From 2dc8573ba64b21cc15865cde577812437cb5d848 Mon Sep 17 00:00:00 2001
From: "mergify[bot]" <37929162+mergify[bot]@users.noreply.github.com>
Date: Sat, 25 May 2024 17:43:39 +0000
Subject: [PATCH] ci: use official create-github-app-token (backport #1275)
 (#1276)

<hr>This is an automatic backport of pull request #1275 done by [Mergify](https://mergify.com).
---
 .github/workflows/build.yml      | 2 +-
 .github/workflows/release-v3.yml | 6 +++---
 .github/workflows/release-v5.yml | 6 +++---
 .github/workflows/release.yml    | 6 +++---
 .github/workflows/upgrade-v4.yml | 2 +-
 .github/workflows/upgrade-v5.yml | 2 +-
 .projenrc.ts                     | 2 ++
 projenrc/ReleaseBranches.ts      | 6 +++---
 8 files changed, 17 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2296d6f2..5c050887 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -81,7 +81,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
+        uses: actions/create-github-app-token@v1
         with:
           app_id: ${{ secrets.PROJEN_APP_ID }}
           private_key: ${{ secrets.PROJEN_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release-v3.yml b/.github/workflows/release-v3.yml
index 8731cf4b..f8cbe7a7 100644
--- a/.github/workflows/release-v3.yml
+++ b/.github/workflows/release-v3.yml
@@ -18,10 +18,10 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
+        uses: actions/create-github-app-token@v1
         with:
-          app_id: ${{ secrets.PROJEN_APP_ID }}
-          private_key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
+          app-id: ${{ secrets.PROJEN_APP_ID }}
+          private-key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
       - name: Checkout
         uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/release-v5.yml b/.github/workflows/release-v5.yml
index 8bc29e13..399e39c3 100644
--- a/.github/workflows/release-v5.yml
+++ b/.github/workflows/release-v5.yml
@@ -18,10 +18,10 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
+        uses: actions/create-github-app-token@v1
         with:
-          app_id: ${{ secrets.PROJEN_APP_ID }}
-          private_key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
+          app-id: ${{ secrets.PROJEN_APP_ID }}
+          private-key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
       - name: Checkout
         uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 51c9c069..402dee68 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,10 +18,10 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c
+        uses: actions/create-github-app-token@v1
         with:
-          app_id: ${{ secrets.PROJEN_APP_ID }}
-          private_key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
+          app-id: ${{ secrets.PROJEN_APP_ID }}
+          private-key: " ${{ secrets.PROJEN_APP_PRIVATE_KEY }}"
       - name: Checkout
         uses: actions/checkout@v4
         with:
diff --git a/.github/workflows/upgrade-v4.yml b/.github/workflows/upgrade-v4.yml
index f1b9832b..c8dc5a89 100644
--- a/.github/workflows/upgrade-v4.yml
+++ b/.github/workflows/upgrade-v4.yml
@@ -49,7 +49,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
+        uses: actions/create-github-app-token@v1
         with:
           app_id: ${{ secrets.PROJEN_APP_ID }}
           private_key: ${{ secrets.PROJEN_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/upgrade-v5.yml b/.github/workflows/upgrade-v5.yml
index b8a617f0..5f9a9666 100644
--- a/.github/workflows/upgrade-v5.yml
+++ b/.github/workflows/upgrade-v5.yml
@@ -49,7 +49,7 @@ jobs:
     steps:
       - name: Generate token
         id: generate_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a
+        uses: actions/create-github-app-token@v1
         with:
           app_id: ${{ secrets.PROJEN_APP_ID }}
           private_key: ${{ secrets.PROJEN_APP_PRIVATE_KEY }}
diff --git a/.projenrc.ts b/.projenrc.ts
index 3f2ec07a..97c8a383 100644
--- a/.projenrc.ts
+++ b/.projenrc.ts
@@ -343,6 +343,8 @@ new TypeScriptSourceFile(project, 'src/esbuild-types.ts', {
   },
 });
 
+// Use official github-app-token action
+project.github?.actions.set('tibdex/github-app-token', 'actions/create-github-app-token@v1');
 
 // Synth project
 project.synth();
diff --git a/projenrc/ReleaseBranches.ts b/projenrc/ReleaseBranches.ts
index e9895115..32588f13 100644
--- a/projenrc/ReleaseBranches.ts
+++ b/projenrc/ReleaseBranches.ts
@@ -64,10 +64,10 @@ export class StableReleases {
         JsonPatch.add('/jobs/release/steps/0', {
           name: 'Generate token',
           id: 'generate_token',
-          uses: 'tibdex/github-app-token@021a2405c7f990db57f5eae5397423dcc554159c',
+          uses: 'actions/create-github-app-token@v1',
           with: {
-            app_id: '${{ secrets.PROJEN_APP_ID }}',
-            private_key: ' ${{ secrets.PROJEN_APP_PRIVATE_KEY }}',
+            'app-id': '${{ secrets.PROJEN_APP_ID }}',
+            'private-key': ' ${{ secrets.PROJEN_APP_PRIVATE_KEY }}',
           },
         }),
         JsonPatch.add('/jobs/release/steps/1/with/token', '${{ steps.generate_token.outputs.token }}'),