Use custom token in release CI

[kachkaev]

• Slack thread (internal)
• PRs created don't trigger other actions peter-evans/create-pull-request#48 (comment)
• GITHUB_TOKEN rules and workarounds in docs

When you use the repository’s GITHUB_TOKEN to perform tasks, events triggered by the GITHUB_TOKEN will not create a new workflow run. This prevents you from accidentally creating recursive workflow runs. For example, if a workflow run pushes code using the repository’s GITHUB_TOKEN, a new workflow will not run even when the repository contains a workflow configured to run when push events occur.

Use a repo scoped Personal Access Token (PAT) created on an account that has write access to the repository that pull requests are being created in. This is the standard workaround and recommended by GitHub. However, the PAT cannot be scoped to a specific repository so the token becomes a very sensitive secret. If this is a concern, the PAT can instead be created for a dedicated machine account that has collaborator access to the repository. Also note that because the account that owns the PAT will be the creator of pull requests, that user account will be unable to perform actions such as request changes or approve the pull request.

[codecov]

Codecov Report

Merging #510 (d075db2) into main (89e0bac) will increase coverage by 0.05%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main     #510      +/-   ##
==========================================
+ Coverage   62.45%   62.50%   +0.05%     
==========================================
  Files         229      229              
  Lines        3750     3750              
  Branches      904      904              
==========================================
+ Hits         2342     2344       +2     
+ Misses       1109     1104       -5     
- Partials      299      302       +3     

Flag	Coverage Δ
site-integration	62.50% <ø> (+0.05%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
site/src/pages/login.page.tsx	77.77% <0.00%> (-6.67%)	⬇️
site/src/components/navbar.tsx	94.25% <0.00%> (+1.14%)	⬆️
.../src/components/pages/hub/block-data-container.tsx	86.15% <0.00%> (+1.53%)	⬆️
site/src/components/pages/hub/json-editor.tsx	70.96% <0.00%> (+9.67%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.