From 4d5cb9285d071f0e1bce7fcda190aedd84f515c1 Mon Sep 17 00:00:00 2001 From: Blair Hamilton Date: Thu, 2 Jul 2026 18:33:32 -0400 Subject: [PATCH] fix(setup-go): mint private-module token via create-github-app-token@v2 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit v1 targets the deprecated Node 20 runtime (forced to Node 24 with a warning); v2 is Node 24-native and input-compatible. Matches the v1->v2 bump k4a just made for its inline token steps (pinpredict/k4a#112) — now that k4a mints through this composite, keep it on v2 so the Node 20 deprecation warning doesn't come back. Co-Authored-By: Claude Opus 4.8 (1M context) --- actions/setup-go/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/actions/setup-go/action.yml b/actions/setup-go/action.yml index 21188da..9b07dec 100644 --- a/actions/setup-go/action.yml +++ b/actions/setup-go/action.yml @@ -60,7 +60,7 @@ runs: - name: Mint private-module read token id: private-module-token if: ${{ inputs.private-modules == 'true' }} - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@v2 with: app-id: ${{ inputs.private-modules-app-id }} private-key: ${{ inputs.private-modules-app-private-key }}