You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@beam.apache.org by vt...@apache.org on 2026/04/30 14:39:49 UTC

(beam) branch finalize-release updated: Use REPO_TOKEN

This is an automated email from the ASF dual-hosted git repository.

Amar3tto pushed a commit to branch finalize-release
in repository https://gitbox.apache.org/repos/asf/beam.git


The following commit(s) were added to refs/heads/finalize-release by this push:
     new 451cf6e455b Use REPO_TOKEN
451cf6e455b is described below

commit 451cf6e455bace5a46ae92c77e8bf1df95af33f4
Author: Vitaly Terentyev <vi...@akvelon.com>
AuthorDate: Thu Apr 30 18:37:58 2026 +0400

    Use REPO_TOKEN
---
 .github/workflows/finalize_release.yml | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/finalize_release.yml b/.github/workflows/finalize_release.yml
index 6539d5018a0..9a457990428 100644
--- a/.github/workflows/finalize_release.yml
+++ b/.github/workflows/finalize_release.yml
@@ -24,6 +24,9 @@ on:
         description: Whether to publish the python artifacts into PyPi. Should be yes unless you've already completed this step.
         required: true
         default: 'no'
+      REPO_TOKEN:
+        description: Github Personal Access Token with repo permissions.
+        required: true
       TAG_RELEASE:
         description: Whether to tag the release on GitHub. Should be yes unless you've already completed this step.
         required: true
@@ -135,10 +138,12 @@ jobs:
 
   push_git_tags:
     if: ${{github.event.inputs.TAG_RELEASE == 'yes'}}
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, ubuntu-24.04, main]
     steps:
     - name: Checkout
       uses: actions/checkout@v4
+      with:
+        token: ${{ github.event.inputs.REPO_TOKEN }}
     - name: Set git config
       run: |
         git config user.name $GITHUB_ACTOR
@@ -162,14 +167,14 @@ jobs:
 
         # Tag for Go SDK
         git tag "sdks/$VERSION_TAG" "$RC_TAG"^{} -m "Tagging release" --local-user="${{steps.import_gpg.outputs.name}}"
-        git push https://github.com/apache/beam "sdks/$VERSION_TAG"
+        git push origin "sdks/$VERSION_TAG"
 
         # Tag for repo root.
         git tag "$VERSION_TAG" "$RC_TAG"^{} -m "Tagging release" --local-user="${{steps.import_gpg.outputs.name}}"
-        git push https://github.com/apache/beam "$VERSION_TAG"
+        git push origin "$VERSION_TAG"
 
         git checkout -b "$POST_RELEASE_BRANCH" "$VERSION_TAG"
-        git push https://github.com/apache/beam "$POST_RELEASE_BRANCH"
+        git push origin "$POST_RELEASE_BRANCH"
 
   update_master:
     needs: push_git_tags
@@ -179,6 +184,9 @@ jobs:
     steps:
       - name: Check out code
         uses: actions/checkout@v4
+        with:
+          token: ${{ github.event.inputs.REPO_TOKEN }}
+          ref: master
       - name: Set git config
         run: |
           git config user.name $GITHUB_ACTOR