(beam) branch users/damccorm/explicitToken created (now 4e52252dd1e)

[da...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

damccorm pushed a change to branch users/damccorm/explicitToken
in repository https://gitbox.apache.org/repos/asf/beam.git


      at 4e52252dd1e Update git push commands to use GITHUB_TOKEN

This branch includes the following new commits:

     new 4e52252dd1e Update git push commands to use GITHUB_TOKEN

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.

(beam) 01/01: Update git push commands to use GITHUB_TOKEN

[da...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

damccorm pushed a commit to branch users/damccorm/explicitToken
in repository https://gitbox.apache.org/repos/asf/beam.git

commit 4e52252dd1ec03bc3b22546d823c1822964a2a5f
Author: Danny McCormick <da...@google.com>
AuthorDate: Thu Apr 30 09:45:58 2026 -0400

    Update git push commands to use GITHUB_TOKEN
---
 .github/workflows/finalize_release.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/finalize_release.yml b/.github/workflows/finalize_release.yml
index 476314d4f9b..41b21f40f68 100644
--- a/.github/workflows/finalize_release.yml
+++ b/.github/workflows/finalize_release.yml
@@ -130,6 +130,8 @@ jobs:
   push_git_tags:
     if: ${{github.event.inputs.TAG_RELEASE == 'yes'}}
     runs-on: [self-hosted, ubuntu-24.04, main]
+    env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
     - name: Checkout
       uses: actions/checkout@v4
@@ -156,20 +158,21 @@ jobs:
 
         # Tag for Go SDK
         git tag "sdks/$VERSION_TAG" "$RC_TAG"^{} -m "Tagging release" --local-user="${{steps.import_gpg.outputs.name}}"
-        git push https://github.com/apache/beam "sdks/$VERSION_TAG"
+        git push https://${GITHUB_TOKEN}@github.com/apache/beam "sdks/$VERSION_TAG"
 
         # Tag for repo root.
         git tag "$VERSION_TAG" "$RC_TAG"^{} -m "Tagging release" --local-user="${{steps.import_gpg.outputs.name}}"
-        git push https://github.com/apache/beam "$VERSION_TAG"
+        git push https://${GITHUB_TOKEN}@github.com/apache/beam "$VERSION_TAG"
 
         git checkout -b "$POST_RELEASE_BRANCH" "$VERSION_TAG"
-        git push https://github.com/apache/beam "$POST_RELEASE_BRANCH"
+        git push https://${GITHUB_TOKEN}@github.com/apache/beam "$POST_RELEASE_BRANCH"
 
   update_master:
     needs: push_git_tags
     runs-on: ubuntu-latest
     env:
         POST_RELEASE_BRANCH: "release-${{ github.event.inputs.RELEASE }}-postrelease"
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - name: Check out code
         uses: actions/checkout@v4
@@ -184,4 +187,4 @@ jobs:
         run: |
           git add .asf.yaml
           git commit -m "Adding ${POST_RELEASE_BRANCH} to protected branches in .asf.yaml"
-          git push origin ${MASTER_BRANCH}
+          git push https://${GITHUB_TOKEN}@github.com/apache/beam ${MASTER_BRANCH}