From d88cb7c77b74c7523e9e4ff3bdae2ce09c69a3dd Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 19 Sep 2025 15:14:50 +0000
Subject: [PATCH 1/2] Initial plan


From aba3493487009486669a52339b796749a06652d4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 19 Sep 2025 15:18:37 +0000
Subject: [PATCH 2/2] Replace tibdex/github-app-token with
 actions/create-github-app-token in all workflows

Co-authored-by: v1v <2871786+v1v@users.noreply.github.com>
---
 .github/workflows/create-tag.yml | 11 ++++-------
 .github/workflows/labeler.yml    | 17 +++++++----------
 .github/workflows/updatecli.yml  | 13 +++++--------
 3 files changed, 16 insertions(+), 25 deletions(-)

diff --git a/.github/workflows/create-tag.yml b/.github/workflows/create-tag.yml
index 4a1a9ce..157242b 100644
--- a/.github/workflows/create-tag.yml
+++ b/.github/workflows/create-tag.yml
@@ -22,14 +22,11 @@ jobs:
 
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "contents": "write"
-            }
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-contents: write
 
       - run: make create-release
         env:
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index a62d5f2..1f55f8f 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -17,17 +17,14 @@ jobs:
 
     - name: Get token
       id: get_token
-      uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+      uses: actions/create-github-app-token@v2
       with:
-        app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-        private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-        permissions: >-
-          {
-            "members": "read",
-            "organization_projects": "write",
-            "issues": "read",
-            "pull_requests": "write"
-          }
+        app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+        private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+        permission-members: read
+        permission-organization-projects: write
+        permission-issues: read
+        permission-pull-requests: write
 
     - name: Add agent-java label
       run: gh issue edit "${NUMBER}" --add-label "agent-java" --repo "${{ github.repository }}"
diff --git a/.github/workflows/updatecli.yml b/.github/workflows/updatecli.yml
index d74a1bb..b184c10 100644
--- a/.github/workflows/updatecli.yml
+++ b/.github/workflows/updatecli.yml
@@ -20,15 +20,12 @@ jobs:
 
       - name: Get token
         id: get_token
-        uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0
+        uses: actions/create-github-app-token@v2
         with:
-          app_id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
-          private_key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
-          permissions: >-
-            {
-              "contents": "write",
-              "pull_requests": "write"
-            }
+          app-id: ${{ secrets.OBS_AUTOMATION_APP_ID }}
+          private-key: ${{ secrets.OBS_AUTOMATION_APP_PEM }}
+          permission-contents: write
+          permission-pull-requests: write
 
       - uses: elastic/oblt-actions/updatecli/run@v1
         with: