*: add PAT to github actions

.github/workflows/bump-minor-version.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags for versioning
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -37,7 +37,7 @@ jobs:
         id: bump
         uses: mathieudutour/github-tag-action@a22cf08638b34d5badda920f9daf6e72c477b07b # v6.2
         with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          github_token: ${{ secrets.OBOL_PLATFORM_PAT }}
           # NOTE: This workflow ignores conventional commit messages and always bumps the minor version.
           default_bump: minor # Will go from v1.7.X -> v1.8.0
           dry_run: true # Don't create tag yet, just calculate the new version
@@ -93,7 +93,6 @@ jobs:
 
           # The release branch is already checked out; no need to checkout again.
 
-
           echo "::notice::Created and pushed release branch: $RELEASE_BRANCH"
 
       - name: 7. Modify App Version in Code
@@ -114,7 +113,7 @@ jobs:
       - name: 8. Create Pull Request to Release Branch
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           commit-message: "app: bump minor version to ${{ steps.vars.outputs.NEW_V_VERSION }}"
           committer: "obol-platform <platform@obol.tech>"
           author: "obol-platform <platform@obol.tech>"
@@ -137,3 +136,25 @@ jobs:
 
             category: misc
             ticket: none
+
+      - name: 9. Output Summary
+        if: always()
+        run: |
+          cat << EOF >> $GITHUB_STEP_SUMMARY
+          ## Minor Release Process Initiated
+
+          ### Details
+          - **Previous Release:** \`${{ steps.bump.outputs.previous_tag }}\`
+          - **New Release Branch:** \`${{ steps.vars.outputs.RELEASE_BRANCH }}\`
+          - **New Version:** \`${{ steps.vars.outputs.NEW_V_VERSION }}\`
+
+          ### Next Steps
+          1. Review and merge the created PR to \`${{ steps.vars.outputs.RELEASE_BRANCH }}\`
+          2. After merge, run the "Tag Minor Release Candidate" workflow
+          3. Test the release candidate thoroughly (Kurtosis, Hoodi environments, etc.)
+          4. If successful, proceed with "Prepare Minor Full Release" workflow
+          5. After stable PR is merged to release branch, run "Tag Minor Full Release" workflow
+          6. Finally, merge the dev version PR to \`main\` to start the next development cycle
+
+          **Note:** This workflow is for minor releases (vX.Y.0). Patch releases (vX.Y.Z) use a different workflow.
+          EOF

.github/workflows/bump-patch-version.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags for versioning
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           persist-credentials: false
 
       - name: 2. Import GPG key
@@ -150,7 +150,7 @@ jobs:
       - name: 7. Create Pull Request to Release Branch
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           commit-message: "app: bump patch version to ${{ steps.vars.outputs.NEW_V_VERSION }}"
           committer: "obol-platform <platform@obol.tech>"
           author: "obol-platform <platform@obol.tech>"

.github/workflows/prepare-minor-full-release.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -150,7 +150,7 @@ jobs:
         id: create_stable_pr
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           commit-message: "app/version: bump v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }} to stable"
           committer: "obol-platform <platform@obol.tech>"
           author: "obol-platform <platform@obol.tech>"
@@ -213,7 +213,7 @@ jobs:
         id: create_dev_pr
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           commit-message: "app: bump version to ${{ steps.version.outputs.NEXT_DEV_VERSION }}"
           committer: "obol-platform <platform@obol.tech>"
           author: "obol-platform <platform@obol.tech>"

.github/workflows/prepare-patch-full-release.yml

@@ -16,7 +16,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           persist-credentials: false
 
       - name: 2. Import GPG key
@@ -172,7 +172,7 @@ jobs:
         id: create_stable_pr
         uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
           commit-message: "app/version: bump v${{ steps.version.outputs.MAJOR }}.${{ steps.version.outputs.MINOR }} to stable"
           committer: "obol-platform <platform@obol.tech>"
           author: "obol-platform <platform@obol.tech>"

.github/workflows/tag-minor-full-release.yml

@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -126,6 +126,8 @@ jobs:
 
       - name: 7. Create and Push Tag
         id: create_and_push_tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }}
         run: |
           TAG_VERSION="${{ steps.version.outputs.TAG_VERSION }}"
           RELEASE_BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}"

.github/workflows/tag-minor-release-candidate.yml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -55,7 +55,7 @@ jobs:
           # Checkout the release branch
           git checkout "$RELEASE_BRANCH"
 
-      - name: 3. Extract Version from Branch Name
+      - name: 4. Extract Version from Branch Name
         id: version
         run: |
           BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}"
@@ -76,7 +76,7 @@ jobs:
 
           echo "::notice::Extracted version prefix: ${VERSION_PREFIX}"
 
-      - name: 3. Find Latest Release Candidate
+      - name: 5. Find Latest Release Candidate
         id: latest_rc
         run: |
           VERSION_PREFIX="${{ steps.version.outputs.VERSION_PREFIX }}"
@@ -104,7 +104,10 @@ jobs:
 
           echo "::notice::New release candidate tag will be: ${NEW_TAG}"
 
-      - name: 5. Create and Push Tag
+      - name: 6. Create and Push Tag
+        id: create_and_push_tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }}
         run: |
           NEW_TAG="${{ steps.latest_rc.outputs.NEW_TAG }}"
 
@@ -116,7 +119,7 @@ jobs:
 
           echo "::notice::Successfully created and pushed tag: $NEW_TAG"
 
-      - name: 5. Output Summary
+      - name: 7. Output Summary
         run: |
           cat << EOF >> $GITHUB_STEP_SUMMARY
           ## Minor Release Candidate Tagged Successfully

.github/workflows/tag-patch-full-release.yml

@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -158,6 +158,8 @@ jobs:
 
       - name: 8. Create and Push Tag
         id: create_and_push_tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }}
         run: |
           TAG_VERSION="${{ steps.find_patch.outputs.TAG_VERSION }}"
           RELEASE_BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}"

.github/workflows/tag-patch-release-candidate.yml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           fetch-depth: 0 # Required to get all tags and branches
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.OBOL_PLATFORM_PAT }}
 
       - name: 2. Import GPG key
         env:
@@ -55,7 +55,7 @@ jobs:
           # Checkout the release branch
           git checkout "$RELEASE_BRANCH"
 
-      - name: 3. Extract Version from Branch Name
+      - name: 4. Extract Version from Branch Name
         id: version
         run: |
           BRANCH="${{ steps.find_branch.outputs.RELEASE_BRANCH }}"
@@ -136,8 +136,10 @@ jobs:
 
           echo "::notice::New release candidate tag will be: ${NEW_TAG}"
 
-      - name: 7. Create and Push Tag
+      - name: 6. Create and Push Tag
         id: create_tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.OBOL_PLATFORM_PAT }}
         run: |
           NEW_TAG="${{ steps.latest_rc.outputs.NEW_TAG }}"