fix(ci): add gh auth setup-git to release-plz.sh

The release-plz workflow's checkout uses persist-credentials: false (set
in #471), so the token isn't written to .git/config and `git push origin
release --force` would 403. Mirror the workaround already applied to
scripts/postversion.sh.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
jdx 2026-05-12 15:07:20 -05:00
parent 46bb674500
commit f69419101e
No known key found for this signature in database
GPG key ID: 584DADE86724B407

View file

@ -47,6 +47,11 @@ if [ -n "$latest_release_version" ] && [ "$cur_pkg_version" = "$latest_release_v
git config user.name mise-en-dev
git config user.email 123107610+mise-en-dev@users.noreply.github.com
# Configure git to use gh's credential helper. The checkout step uses
# persist-credentials: false (per zizmor's artipacked audit), so the
# token isn't written to .git/config and raw `git push` would 403.
gh auth setup-git
# Create a PR with the version bump
npm version "${version#v}" --no-git-tag-version