Release SDK updates

.github/workflows/release-please.yml

@@ -5,16 +5,28 @@ on:
       - main
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read
 
 jobs:
   release-please:
     if: github.repository == 'kernel/kernel-python-sdk'
     runs-on: ubuntu-latest
 
     steps:
+      - name: Mint release token
+        id: release-token
+        uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
+        with:
+          app-id: ${{ secrets.ADMIN_APP_ID }}
+          private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }}
+          owner: kernel
+          repositories: kernel-python-sdk
+          permission-contents: write
+          permission-issues: write
+          permission-pull-requests: write
+          permission-workflows: write
+
       - uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4.4.1
         id: release
         with:
-          token: ${{ secrets.RELEASE_PLEASE_TOKEN }}
+          token: ${{ steps.release-token.outputs.token }}

requirements-dev.lock

@@ -29,15 +29,20 @@ async-timeout==5.0.1
 attrs==25.4.0
     # via aiohttp
     # via nox
+    # via standardwebhooks
 backports-asyncio-runner==1.2.0
     # via pytest-asyncio
 certifi==2026.1.4
     # via httpcore
     # via httpx
+colorama==0.4.6
+    # via griffe
 colorlog==6.10.1
     # via nox
 dependency-groups==1.3.1
     # via nox
+deprecated==1.3.1
+    # via standardwebhooks
 dirty-equals==0.11
 distlib==0.4.0
     # via virtualenv
@@ -53,14 +58,16 @@ filelock==3.19.1
 frozenlist==1.8.0
     # via aiohttp
     # via aiosignal
+griffe==1.14.0
 h11==0.16.0
     # via httpcore
 httpcore==1.0.9
     # via httpx
 httpx==0.28.1
     # via httpx-aiohttp
-    # via kernel
     # via respx
+    # via standardwebhooks
+    # via kernel
 httpx-aiohttp==0.1.12
     # via kernel
 humanize==4.13.0
@@ -112,6 +119,7 @@ pytest==8.4.2
 pytest-asyncio==1.2.0
 pytest-xdist==3.8.0
 python-dateutil==2.9.0.post0
+    # via standardwebhooks
     # via time-machine
 respx==0.22.0
 rich==14.2.0
@@ -120,29 +128,39 @@ six==1.17.0
     # via python-dateutil
 sniffio==1.3.1
     # via kernel
+standardwebhooks==1.0.1
+    # via kernel
 time-machine==2.19.0
 tomli==2.4.0
     # via dependency-groups
     # via mypy
     # via nox
     # via pytest
+types-deprecated==1.3.1.20251101
+    # via standardwebhooks
+types-python-dateutil==2.9.0.20251115
+    # via standardwebhooks
 typing-extensions==4.15.0
     # via aiosignal
     # via anyio
     # via exceptiongroup
-    # via kernel
     # via multidict
     # via mypy
     # via pydantic
     # via pydantic-core
     # via pyright
     # via pytest-asyncio
+    # via kernel
     # via typing-inspection
     # via virtualenv
 typing-inspection==0.4.2
     # via pydantic
 virtualenv==20.36.1
     # via nox
+websockets==15.0.1
+    # via kernel
+wrapt==2.0.1
+    # via deprecated
 yarl==1.22.0
     # via aiohttp
 zipp==3.23.0

requirements.lock

@@ -26,9 +26,12 @@ async-timeout==5.0.1
     # via aiohttp
 attrs==25.4.0
     # via aiohttp
+    # via standardwebhooks
 certifi==2026.1.4
     # via httpcore
     # via httpx
+deprecated==1.3.1
+    # via standardwebhooks
 distro==1.9.0
     # via kernel
 exceptiongroup==1.3.1
@@ -42,6 +45,7 @@ httpcore==1.0.9
     # via httpx
 httpx==0.28.1
     # via httpx-aiohttp
+    # via standardwebhooks
     # via kernel
 httpx-aiohttp==0.1.12
     # via kernel
@@ -59,18 +63,32 @@ pydantic==2.12.5
     # via kernel
 pydantic-core==2.41.5
     # via pydantic
+python-dateutil==2.9.0.post0
+    # via standardwebhooks
+six==1.17.0
+    # via python-dateutil
 sniffio==1.3.1
     # via kernel
+standardwebhooks==1.0.1
+    # via kernel
+types-deprecated==1.3.1.20251101
+    # via standardwebhooks
+types-python-dateutil==2.9.0.20251115
+    # via standardwebhooks
 typing-extensions==4.15.0
     # via aiosignal
     # via anyio
     # via exceptiongroup
-    # via kernel
     # via multidict
     # via pydantic
     # via pydantic-core
+    # via kernel
     # via typing-inspection
 typing-inspection==0.4.2
     # via pydantic
+websockets==15.0.1
+    # via kernel
+wrapt==2.0.1
+    # via deprecated
 yarl==1.22.0
     # via aiohttp