Skip to content

fix(ci): use default GITHUB_TOKEN for changesets changelog step#3

Merged
rqbazan merged 1 commit into
mainfrom
fix/release-changelog-token
Jun 28, 2026
Merged

fix(ci): use default GITHUB_TOKEN for changesets changelog step#3
rqbazan merged 1 commit into
mainfrom
fix/release-changelog-token

Conversation

@rqbazan

@rqbazan rqbazan commented Jun 28, 2026

Copy link
Copy Markdown
Member

Problem

The Release workflow fails at changeset version. @changesets/changelog-github's GraphQL request fails when authenticated with the vland-bot App token — GitHub starts the response and closes it mid-body, surfacing as:

🦋  error Failed to parse data from GitHub
🦋  error Invalid response body while trying to fetch https://api.github.com/graphql: Premature close
   at @changesets/get-github-info/.../changesets-get-github-info.cjs.js:185

Fix

Point the changesets/action GITHUB_TOKEN at the default ${{ secrets.GITHUB_TOKEN }}, which completes the same GraphQL request. actions/checkout still uses the App token, so the version-branch / tag / publish pushes keep triggering downstream workflows and pass branch protection.

How it was isolated

  • Not permissions — re-ran with the App's Contents / Pull requests / Metadata read permissions confirmed in place → identical Premature close.
  • Not Node — CI and local both run Node 24 (.node-version = 24).
  • The token — running changeset version (same changelog-github generator) locally with a valid token succeeds and generates the changelog. The only differing variable is the token.

Caveat

The chore: update versions PR is now created by github-actions[bot], so the pull_request CI won't run on that bot PR. Everything else (push reach, publish, GitHub release) is unaffected.

🤖 Generated with Claude Code

The Release workflow failed at `changeset version` because
@changesets/changelog-github's GraphQL request fails when authenticated with
the vland-bot App token — GitHub closes the response mid-body ("Premature
close"). The default token completes the same request.

Switch the changesets/action GITHUB_TOKEN to ${{ secrets.GITHUB_TOKEN }}.
The App token still authenticates actions/checkout, so the version-branch,
tag, and publish pushes keep triggering downstream workflows.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@changeset-bot

changeset-bot Bot commented Jun 28, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 335fa89

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@vland-bot

vland-bot Bot commented Jun 28, 2026

Copy link
Copy Markdown
Contributor

Preview release

Latest commit: 335fa89

Some packages have been released:

Package Version Install
@vlandoss/theme-toggle 0.0.1-git-335fa89.0 @vlandoss/theme-toggle@0.0.1-git-335fa89.0

Note

Use the PR number as tag to install any package. For instance:

pnpm add @vlandoss/theme-toggle@pr-3

@rqbazan rqbazan merged commit ca8ba03 into main Jun 28, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant