From 124331d52d5a4d31fab4cbb809fffa2b4d87ca75 Mon Sep 17 00:00:00 2001
From: peternhale <peter.hale@salesforce.com>
Date: Tue, 22 Jul 2025 13:16:20 -0600
Subject: [PATCH] build: fix gh token and stop npm from starting

---
 .github/workflows/automerge.yml          |  2 +-
 .github/workflows/benchmark.yml          |  4 ++--
 .github/workflows/release-extensions.yml | 19 ++++++++++---------
 .github/workflows/release-npm.yml        |  6 +++---
 4 files changed, 16 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml
index f053ed7f..c1ddc71d 100644
--- a/.github/workflows/automerge.yml
+++ b/.github/workflows/automerge.yml
@@ -60,7 +60,7 @@ jobs:
         id: automerge
         uses: pascalgn/automerge-action@v0.15.6
         env:
-          GITHUB_TOKEN: '${{ secrets.GITHUB_TOKEN }}'
+          GITHUB_TOKEN: '${{ secrets.IDEE_GH_TOKEN }}'
           MERGE_METHOD: 'squash'
           MERGE_RETRIES: '3'
           MERGE_RETRY_SLEEP: '30000'
diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml
index 1db12aa6..c3d0e3ca 100644
--- a/.github/workflows/benchmark.yml
+++ b/.github/workflows/benchmark.yml
@@ -42,7 +42,7 @@ jobs:
           name: 'LSP Performance Benchmarks'
           tool: 'benchmarkjs'
           output-file-path: 'benchmark-output.json'
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.IDEE_GH_TOKEN }}
           auto-push: true
           alert-threshold: '130%'
           comment-on-alert: true
@@ -56,7 +56,7 @@ jobs:
           name: 'LSP Performance Benchmarks'
           tool: 'benchmarkjs'
           output-file-path: 'benchmark-output.json'
-          github-token: ${{ secrets.GITHUB_TOKEN }}
+          github-token: ${{ secrets.IDEE_GH_TOKEN }}
           auto-push: false
           save-data-file: false
           alert-threshold: '130%'
diff --git a/.github/workflows/release-extensions.yml b/.github/workflows/release-extensions.yml
index 05506230..7dcebfe4 100644
--- a/.github/workflows/release-extensions.yml
+++ b/.github/workflows/release-extensions.yml
@@ -204,7 +204,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.IDEE_GH_TOKEN }}
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -226,7 +226,8 @@ jobs:
           npx tsx .github/scripts/index.ts ext-version-bumper
 
       - name: Validate GitHub authentication
-        if: inputs.dry-run != 'true' && github.event.inputs.dry-run != 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.IDEE_GH_TOKEN }}
         run: |
           # Validate that required tokens are present
           if [ -z "$GITHUB_TOKEN" ]; then
@@ -245,7 +246,7 @@ jobs:
       - name: Commit version bumps with tags
         env:
           # Ensure GitHub CLI has proper authentication
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.IDEE_GH_TOKEN }}
           DRY_RUN: ${{ inputs.dry-run || github.event.inputs.dry-run || 'false' }}
         run: |
           IS_PROMOTION="${{ needs.determine-build-type.outputs.is-promotion }}"
@@ -325,8 +326,6 @@ jobs:
       artifact-name: ${{ needs.calculate-artifact-name.outputs.artifact-name }}
       dry-run: ${{ inputs.dry-run || github.event.inputs.dry-run || 'false' }}
 
-
-
   determine-publish-matrix:
     needs: [determine-changes, calculate-artifact-name]
     runs-on: ubuntu-latest
@@ -395,7 +394,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.IDEE_GH_TOKEN }}
           ref: ${{ inputs.branch || github.ref }}
 
       - name: Download VSIX artifacts
@@ -404,7 +403,7 @@ jobs:
           name: ${{ needs.calculate-artifact-name.outputs.artifact-name }}
           path: ./vsix-artifacts
 
-      - name: Debug - List downloaded artifacts
+      - name: List downloaded artifacts
         run: |
           echo "=== DEBUG: Downloaded Artifacts ==="
           echo "Artifact name: ${{ needs.calculate-artifact-name.outputs.artifact-name }}"
@@ -478,7 +477,8 @@ jobs:
 
   slack-notify:
     name: Slack Notification
-    needs: [determine-build-type, determine-changes, bump-versions, package, publish]
+    needs:
+      [determine-build-type, determine-changes, bump-versions, package, publish]
     runs-on: ubuntu-latest
     if: always() && needs.publish.result == 'success' && (inputs.dry-run != 'true' && github.event.inputs.dry-run != 'true')
     steps:
@@ -584,7 +584,8 @@ jobs:
 
   slack-notify-failure:
     name: Slack Failure Notification
-    needs: [determine-build-type, determine-changes, bump-versions, package, publish]
+    needs:
+      [determine-build-type, determine-changes, bump-versions, package, publish]
     runs-on: ubuntu-latest
     if: always() && needs.publish.result == 'failure' && (inputs.dry-run != 'true' && github.event.inputs.dry-run != 'true')
     steps:
diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml
index af564be5..1f4b8555 100644
--- a/.github/workflows/release-npm.yml
+++ b/.github/workflows/release-npm.yml
@@ -1,8 +1,8 @@
 name: Release NPM Packages
 
 on:
-  push:
-    branches: [main]
+  # push:
+  #   branches: [main]
   workflow_call:
     inputs:
       branch:
@@ -145,7 +145,7 @@ jobs:
           cd packages/${{ matrix.package }}
           npx semantic-release
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.IDEE_GH_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
 
       - name: Dry Run Complete