Skip to content

add gh app, change autocommit to verified-bot-commit#359

Open
andrew-fleming wants to merge 1 commit intoOpenZeppelin:mainfrom
andrew-fleming:add-gh-app
Open

add gh app, change autocommit to verified-bot-commit#359
andrew-fleming wants to merge 1 commit intoOpenZeppelin:mainfrom
andrew-fleming:add-gh-app

Conversation

@andrew-fleming
Copy link
Contributor

@andrew-fleming andrew-fleming commented Jan 25, 2026

This PR proposes to:

Fixes #321

Summary by CodeRabbit

  • Chores
    • Updated release preparation workflow with enhanced authentication and verification mechanisms to improve release deployment reliability and security.

✏️ Tip: You can customize this high-level summary in your review settings.

@andrew-fleming andrew-fleming requested review from a team as code owners January 25, 2026 03:55
@coderabbitai
Copy link

coderabbitai bot commented Jan 25, 2026

Walkthrough

The release preparation workflow is updated to retrieve a GitHub App token during checkout and replace the simple auto-commit step with a two-step process that collects changed files and creates a verified bot commit.

Changes

Cohort / File(s) Summary
GitHub Actions Workflow Configuration
.github/workflows/prepare-release.yml
Added GitHub App token retrieval step using actions/create-github-app-token and passes token to Checkout. Replaced single "Auto-commit changes" step with two-step verified commit process: "Collect changed files" (outputs file list) and "Commit version bump" (uses iarekylew00t/verified-bot-commit action with message, token, ref, and collected files).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 A token appears, shiny and bright,
GitHub App whispers through the night,
Changed files collected, sorted with care,
Verified commits floating through air! ✨

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the two main changes: adding GitHub App token retrieval and replacing auto-commit with verified-bot-commit action.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Contributor

@emnul emnul left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very nice!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add verified sig to autocommit in the CI

2 participants