From faf1594adfa7451756b8d2e447a8abb9c514c95f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mateusz=20Burzy=C5=84ski?= <mateuszburzynski@gmail.com>
Date: Tue, 2 Jun 2026 10:31:14 +0200
Subject: [PATCH] Use internal bot for versioning

---
 .github/workflows/publish.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2516d6c..dd3b80b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -16,6 +16,7 @@ jobs:
   version:
     name: Version
     runs-on: ubuntu-latest
+    environment: version
     timeout-minutes: 10
     outputs:
       hasChangesets: ${{ steps.changesets.outputs.hasChangesets }}
@@ -32,10 +33,17 @@ jobs:
         with:
           skip-cache: true # avoid cache poisoning attacks
 
+      - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        id: app-token
+        with:
+          client-id: ${{ vars.APP_CLIENT_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+
       - name: Create or update release pull request
         id: changesets
         uses: changesets/action@63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b # v1.8.0
         with:
+          github-token: ${{ steps.app-token.outputs.token }}
           version: pnpm version-packages
 
   publish: