Replace tibdex/github-app-token with actions/create-github-app-token

[Copilot]

Replace tibdex/github-app-token with actions/create-github-app-token - Ready for Review

The tibdex/github-app-token action has been archived and is no longer maintained. This PR migrates all usages to the official actions/create-github-app-token@v2 action to ensure continued functionality and security updates.

✅ Changes Completed

Updated two GitHub workflow files to use the new action:

.github/workflows/addToProject.yml

• ✅ Replaced tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a with actions/create-github-app-token@v2
• ✅ Changed parameter names: app_id → app-id and private_key → private-key
• ✅ Converted permissions from JSON object format to individual permission parameters:
  • permission-issues: read
  • permission-organization-projects: write
  • permission-pull-requests: read

.github/workflows/updatecli.yml

• ✅ Replaced tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a with actions/create-github-app-token@v2
• ✅ Changed parameter names: app_id → app-id and private_key → private-key
• ✅ Converted permissions from JSON object format to individual permission parameters:
  • permission-contents: write
  • permission-pull-requests: write

Migration Details

The new action uses a different parameter format but provides the same functionality:

Before:

uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
with:
  app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
  private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
  permissions: >-
    {
      "contents": "write",
      "pull_requests": "write"
    }

After:

uses: actions/create-github-app-token@v2
with:
  app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
  private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
  permission-contents: write
  permission-pull-requests: write

✅ Validation Complete

• ✅ No remaining uses of tibdex/github-app-token found
• ✅ New action properly configured in both workflow files
• ✅ YAML syntax validation passed
• ✅ All required permissions correctly mapped

No changes to existing secret names or workflow functionality are required. The generated tokens will work identically to the previous implementation.

This PR is ready for review and merge.

Fixes #1367.

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

[Copilot]

@v1v 👋 This repository doesn't have Copilot instructions. With Copilot instructions, I can understand the repository better, work faster and produce higher quality PRs.

I can generate a .github/copilot-instructions.md file for you automatically. Click here to open a pre-filled issue and assign it to me. I'll write the instructions, and then tag you for review.

[v1v]

@copilot finish the PR, it's still marked as WIP in the description

[Copilot]

@copilot finish the PR, it's still marked as WIP in the description

The PR is now finished and marked as ready for review. All changes have been completed:

✅ Both workflow files updated to use actions/create-github-app-token@v2 ✅ All permissions properly migrated from JSON format to individual parameters ✅ No remaining uses of the deprecated tibdex/github-app-token action ✅ YAML syntax validated

The PR description has been updated to clearly indicate completion status. Ready for merge!