Drop the release Helm chart and changelog PR - #4
Merged
Merged
Conversation
The repo job in the publish workflow bumped the in-repo Helm chart version and added a changelog entry, then opened a PR against this fork. It has failed since the fork switched the job to the built-in token: GitHub blocks Actions from creating pull requests unless the "Allow GitHub Actions to create and approve pull requests" setting is on, which it is not for this repository. Nothing in that job publishes anything. The chart is not published anywhere and this fork only ships the release assets and the ghcr.io image, so remove the job rather than grant the permission, along with update-repo.sh, which it was the only caller of. The chart bump and the changelog date are now a manual release step.
This was referenced Sep 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The
repojob inpublish.yamlhas failed on every release since the forkswitched it to the built-in token — most recently on
v4.137.1:
Job-level
pull-requests: writeis not enough; GitHub additionally gates PRcreation behind the repository's "Allow GitHub Actions to create and approve
pull requests" setting, which is off here
(
can_approve_pull_request_reviews: false). Upstream avoids this by running thejob with a PAT.
That job publishes nothing. It bumped the in-repo Helm chart version and added
a changelog entry, then opened a PR against this fork. We only ship the release
assets and
ghcr.io/motuslabs/code-server, and the chart is not publishedanywhere, so the job is removed rather than the permission granted.
ci/build/update-repo.shgoes with it — the job was its only caller — andMAINTAINING.mdnow states that the chart bump and changelog date are manual.publish.yamlis left with just thedockerjob.Note for a follow-up:
update.yamlends in the samegh pr createwithsecrets.UPDATE_PR_TOKEN || github.token, and this repository has no secretsset, so the daily update PR will hit this error too.
🤖 Generated with Claude Code