From 377eca73be9186a532919c0b28493e10943e4a60 Mon Sep 17 00:00:00 2001
From: "path-sync[bot]" <path-sync[bot]@users.noreply.github.com>
Date: Fri, 13 Feb 2026 07:03:05 +0000
Subject: [PATCH] chore: sync python-template from e37eaba2

---
 .github/workflows/post-merge.yaml | 24 ++++++++++--------------
 1 file changed, 10 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/post-merge.yaml b/.github/workflows/post-merge.yaml
index b47c629..5e44790 100644
--- a/.github/workflows/post-merge.yaml
+++ b/.github/workflows/post-merge.yaml
@@ -13,25 +13,21 @@ jobs:
   create-tag:
     runs-on: ubuntu-latest
     permissions:
-      actions: write
       contents: write
     steps: 
+      - name: Generate App token
+        id: app-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.RELEASE_BOT_APP_ID }}
+          private-key: ${{ secrets.RELEASE_BOT_PRIVATE_KEY }}
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
       - uses: ./.github/actions/setup
       - name: post-merge
         run: just pkg-post-merge
-      - name: Get the tag
-        id: get_tag
-        run: echo "tag=$(git describe --tags --abbrev=0)" >> "$GITHUB_OUTPUT"
-      - name: Trigger Release
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          gh workflow run release.yaml --ref ${{ steps.get_tag.outputs.tag }} -f tag=${{ steps.get_tag.outputs.tag }}
-      - name: Trigger Docs
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: |
-          gh workflow run docs.yaml --ref main
+      # App token pushes trigger downstream workflows automatically:
+      # - release.yaml via tag push event (on: push: tags: "v*")
+      # - docs.yaml via main branch push event (on: push: branches: main)