Skip to content

chore: pin third-party GitHub Actions to commit SHAs (#45) #23

chore: pin third-party GitHub Actions to commit SHAs (#45)

chore: pin third-party GitHub Actions to commit SHAs (#45) #23

name: Run Release Please
on:
push:
branches:
- main
jobs:
release-please:
runs-on: ubuntu-latest
permissions:
id-token: write # Needed for OIDC to get release secrets.
contents: write # Contents and pull-requests are for release-please to make releases.
pull-requests: write
outputs:
releases_created: ${{ steps.release.outputs.releases_created }}
steps:
- uses: google-github-actions/release-please-action@e4dc86ba9405554aeba3c6bb2d169500e7d3b4ee # v4.4.0
id: release
with:
token: ${{ secrets.GITHUB_TOKEN }}
target-branch: ${{ github.ref_name }}
call-workflow-publish:

Check failure on line 27 in .github/workflows/release-please.yml

View workflow run for this annotation

GitHub Actions / Run Release Please

Invalid workflow file

The workflow is not valid. .github/workflows/release-please.yml (Line: 27, Col: 3): Error calling workflow 'launchdarkly/openfeature-java-server/.github/workflows/publish.yml@f14df8e553554e4ff5aec14f6dcbd19bcee35aa9'. The nested job 'build-and-publish' is requesting 'contents: write, id-token: write', but is only allowed 'contents: read, id-token: none'.
needs: release-please
uses: ./.github/workflows/publish.yml
if: ${{ needs.release-please.outputs.releases_created == 'true' }}
with:
run_tests: true
dry_run: false
prerelease: false