Do not lose the sync when Actions may not open pull requests#135
Conversation
The first successful sync published the artifact, committed it and pushed the branch, then failed on the last step: GitHub Actions is not permitted to create or approve pull requests That is a repository setting, not a bug in the workflow — but the run ended with the link buried in the log and no indication of what to change. - prefer a SYNC_PR_TOKEN secret when present. Pull requests opened by the default token do not trigger on: pull_request workflows, so they show no checks even though this job ran typecheck, lint and the build before pushing. - when opening the request is refused, write the ready-made compare link and the exact setting to change into the run summary. The step still fails, since a half-finished publication should be visible, but the remaining click is one link away instead of a log dive. - document the setting in the README next to the pipeline description. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
Caution The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased. |
|
This pull request has been ignored for the connected project Preview Branches by Supabase. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 05cf51a4e4
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
1 participant
Follow-up to the first successful sync run, which got all the way to the end and then stopped at:
Everything before that worked: archive verified, extracted, audited, republished, typecheck + lint + six-locale build passed, branch committed and pushed. Only the last click was missing — and the run ended with the link buried in the log and no hint about what to change.
The setting
Settings → Actions → General → Workflow permissions → "Allow GitHub Actions to create and approve pull requests". It is off by default.
What this changes
SYNC_PR_TOKENsecret when present. Worth knowing: pull requests opened by the defaultGITHUB_TOKENdo not triggeron: pull_requestworkflows, so they arrive showing no checks — even though this job already ran typecheck, lint and the full build before pushing. A PAT makes the checks visible; without one the verification still happened, it just is not displayed on the request.Right now, without merging anything
The branch from that run is already pushed and contains the build with the larger models and the transcript fixes (
0.2.0, build id93bf828369d2):https://github.com/YurMil/cadautoscript.com/compare/main...chore/whisper-transcriber-sync?expand=1
Opening that by hand publishes the current work immediately; this pull request only stops the same thing happening silently next time.
🤖 Generated with Claude Code