mirror of
https://github.com/lukaszraczylo/shared-actions.git
synced 2026-10-13 04:58:51 +00:00
create-pull-request and the gh pr merge step both hard-required HOMEBREW_TAP_TOKEN, so any consumer repo without that secret got 'Input token not supplied' and the whole Autoupdate run failed. A same-repo PR needs only the caller's contents/pull-requests write; fall back to the auto-provisioned github.token. Consumers that do set the tap token keep current behavior.