ci(repo): use CLERK_COOKIE_PAT for release checkout so CI runs on Release PR updates

[jacekradko]

Pass CLERK_COOKIE_PAT to the actions/checkout step in the Release workflow so commits pushed by changesets/action are authored by clerk-cookie instead of GITHUB_TOKEN. GitHub suppresses synchronize events from GITHUB_TOKEN-pushed commits, which is why CI never runs on subsequent updates to the open Release PR (e.g. #8484) and we have to close/reopen it to re-trigger checks.

Verified by checking workflow runs on changeset-release/main: only the edited-listening workflows (pr-title-linter, major-version-check) fire on bot updates, while ci.yml and the pull_request_target Labeler are silent until a human close/reopen.

[changeset-bot]

🦋 Changeset detected

Latest commit: e5ed578

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 0 packages

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-js-sandbox	Ready	Preview, Comment	May 7, 2026 2:34am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro

Run ID: 1d1f3436-88ee-45f3-bddb-e927af1ebbba

📥 Commits

Reviewing files that changed from the base of the PR and between 4c44aa6 and e5ed578.

📒 Files selected for processing (2)

• .changeset/release-pr-ci-trigger.md
• .github/workflows/release.yml

---

📝 Walkthrough

Walkthrough

This pull request updates the GitHub Actions workflow configuration to address a CI triggering issue. A new changeset file was created with minimal content, and the Release workflow's checkout step was modified to use a long-lived personal access token (secrets.CLERK_COOKIE_PAT) instead of the default authentication. This change ensures that subsequent "Release PR updates" CI jobs are not suppressed when commits are pushed during the release process.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: using CLERK_COOKIE_PAT for release checkout to enable CI runs on Release PR updates.
Description check	✅ Passed	The description is directly related to the changeset, explaining the purpose of passing CLERK_COOKIE_PAT and the problem it solves with GitHub's synchronize event suppression.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[pkg-pr-new]

Open in StackBlitz

@clerk/astro

npm i https://pkg.pr.new/@clerk/astro@8497

@clerk/backend

npm i https://pkg.pr.new/@clerk/backend@8497

@clerk/chrome-extension

npm i https://pkg.pr.new/@clerk/chrome-extension@8497

@clerk/clerk-js

npm i https://pkg.pr.new/@clerk/clerk-js@8497

@clerk/dev-cli

npm i https://pkg.pr.new/@clerk/dev-cli@8497

@clerk/expo

npm i https://pkg.pr.new/@clerk/expo@8497

@clerk/expo-passkeys

npm i https://pkg.pr.new/@clerk/expo-passkeys@8497

@clerk/express

npm i https://pkg.pr.new/@clerk/express@8497

@clerk/fastify

npm i https://pkg.pr.new/@clerk/fastify@8497

@clerk/hono

npm i https://pkg.pr.new/@clerk/hono@8497

@clerk/localizations

npm i https://pkg.pr.new/@clerk/localizations@8497

@clerk/nextjs

npm i https://pkg.pr.new/@clerk/nextjs@8497

@clerk/nuxt

npm i https://pkg.pr.new/@clerk/nuxt@8497

@clerk/react

npm i https://pkg.pr.new/@clerk/react@8497

@clerk/react-router

npm i https://pkg.pr.new/@clerk/react-router@8497

@clerk/shared

npm i https://pkg.pr.new/@clerk/shared@8497

@clerk/tanstack-react-start

npm i https://pkg.pr.new/@clerk/tanstack-react-start@8497

@clerk/testing

npm i https://pkg.pr.new/@clerk/testing@8497

@clerk/ui

npm i https://pkg.pr.new/@clerk/ui@8497

@clerk/upgrade

npm i https://pkg.pr.new/@clerk/upgrade@8497

@clerk/vue

npm i https://pkg.pr.new/@clerk/vue@8497

commit: e5ed578