Skip to content

feat: update permission inputs - #358

Merged
parkerbxyz merged 2 commits into
mainfrom
dependabot/npm_and_yarn/octokit/openapi-22.0.0
Apr 11, 2026
Merged

feat: update permission inputs#358
parkerbxyz merged 2 commits into
mainfrom
dependabot/npm_and_yarn/octokit/openapi-22.0.0

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubApr 1, 2026

Copy link
Copy Markdown
Contributor

Bumps @octokit/openapi from 21.0.0 to 22.0.0.

Release notes

Sourced from @​octokit/openapi's releases.

v22.0.0

22.0.0 (2025-12-09)

Features

  • drop projects-classic endpoints, add GitHub API endpoints: cache limits (retention & storage) for repos/orgs/enterprises, billing budgets & usage, artifacts deployment metadata, and projectsV2 drafts & fields (#518) (b0c44a4)

BREAKING CHANGES

  • Removed /orgs/{org}/projects
  • Removed /orgs/{org}/settings/billing/actions
  • Removed /orgs/{org}/settings/billing/packages
  • Removed /orgs/{org}/settings/billing/shared-storage
  • Removed /orgs/{org}/teams/{team_slug}/projects
  • Removed /orgs/{org}/teams/{team_slug}/projects/{project_id}
  • Removed /projects/columns/{column_id}
  • Removed /projects/columns/{column_id}/moves
  • Removed /projects/{project_id}
  • Removed /projects/{project_id}/collaborators
  • Removed /projects/{project_id}/collaborators/{username}
  • Removed /projects/{project_id}/collaborators/{username}/permission
  • Removed /repos/{owner}/{repo}/projects
  • Removed /teams/{team_id}/projects
  • Removed /teams/{team_id}/projects/{project_id}
  • Removed /user/projects
  • Removed /users/{username}/projects
  • Removed /users/{username}/settings/billing/actions
  • Removed /users/{username}/settings/billing/packages
  • Removed /users/{username}/settings/billing/shared-storage
Commits
  • 6f63b86 build(deps): lock file maintenance (#520)
  • b0c44a4 feat: drop projects-classic endpoints, add GitHub API endpoints: cache limits...
  • a8043eb ci(action): update actions/checkout action to v6 (#519)
  • af315cd build(deps): lock file maintenance (#514)
  • 170f396 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#516)
  • 077a1b9 build(deps): lock file maintenance (#508)
  • cfca956 ci(action): update github/codeql-action action to v4 (#510)
  • f15da93 ci(action): update peter-evans/create-or-update-comment action to v5 (#509)
  • 64bef33 chore(deps): update dependency map-obj to v6 (#507)
  • 4e8e223 chore(deps): update dependency github-enterprise-server-versions to v3 (#511)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​octokit/openapi since your current version.


Resolvesgithub/gh-aw#18921.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2026
@dependabot
dependabotBot requested a review from a team as a code ownerApril 1, 2026 11:28
@github-actionsgithub-actionsBot changed the title build(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0feat: update permission inputsApr 1, 2026
@ericsciple

Copy link
Copy Markdown

Hey @parkerbxyz, this PR would unblock a warning we're seeing in Agentic Workflows. When the gh-aw compiler generates a workflow using safe-outputs: create-discussion, it sets permission-discussions: write on create-github-app-token, which produces a runtime warning since the input doesn't exist yet. The token still works (inherited from the app installation), but the warning is confusing for users.

This Dependabot bump adds permission-discussions along with a few others, which would resolve it. CI looks green. Would it be alright to merge this?

Context: github/gh-aw#18921

@parkerbxyz

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot@github

dependabotBot commented on behalf of githubApr 10, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@parkerbxyz

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [@octokit/openapi](https://github.com/octokit/openapi) from 21.0.0 to 22.0.0.
- [Release notes](https://github.com/octokit/openapi/releases)
- [Commits](octokit/openapi@v21.0.0...v22.0.0)
---
updated-dependencies:
- dependency-name: "@octokit/openapi"
dependency-version: 22.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabotdependabotBot changed the title feat: update permission inputsbuild(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0Apr 10, 2026
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/octokit/openapi-22.0.0 branch from 675fbe3 to 558d22fCompareApril 10, 2026 23:08
@parkerbxyzparkerbxyz linked an issue Apr 10, 2026 that may be closed by this pull request
@github-actionsgithub-actionsBot changed the title build(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0feat: update permission inputsApr 10, 2026
@parkerbxyzparkerbxyz removed a link to an issue Apr 10, 2026
@parkerbxyzparkerbxyz linked an issue Apr 11, 2026 that may be closed by this pull request
@parkerbxyz
parkerbxyz merged commit 076e948 into mainApr 11, 2026
4 checks passed
@parkerbxyz
parkerbxyz deleted the dependabot/npm_and_yarn/octokit/openapi-22.0.0 branch April 11, 2026 00:35
create-app-token-action-releaserBot pushed a commit that referenced this pull request Apr 11, 2026
# [3.1.0](v3.0.0...v3.1.0) (2026-04-11)
### Bug Fixes
* **deps:** bump p-retry from 7.1.1 to 8.0.0 ([#357](#357)) ([3bbe07d](3bbe07d))
### Features
* add `client-id` input and deprecate `app-id` ([#353](#353)) ([e6bd4e6](e6bd4e6))
* update permission inputs ([#358](#358)) ([076e948](076e948))
@create-app-token-action-releaser

Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 3.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update Javascript codereleased

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add missing permission-discussions input to action.yml actions/create-github-app-token warning Action missing the permissions-attestations input

2 participants

@ericsciple@parkerbxyz