[GH Request] Add PAT for automatic release workflow on openedx-ai-extensions

[Henrrypg]

Firm Name

edunext

Urgency

Low (2 weeks)

Requested Change

In order to add automatic changelog generation, version bumping and release workflows is needed to add a PAT from an User with WRITE access to the repo with the following permissions:

Secret Name: AI_EXTENSIONS_GITHUB_TOKEN
PERMISSIONS:

1. contents: write
2. pull_requests: write

The PR adding this CI workflow is openedx/openedx-ai-extensions#223 and it is based on Aspects (https://github.com/openedx/tutor-contrib-aspects/blob/main/.github/workflows/bump-version.yaml#L48)

Reasoning

A new token is required instead of use GITHUB_TOKEN because this token doesn't have permissions to trigger subsequent actions and it is necessary to follow the pipeline MANUAL TRIGGER > BUMPVERSION > create PULL_REQUEST > on Merge > Create Release

[github-actions]

Thank you for your report! @openedx/axim-oncall will triage within a business day. Simple requests usually take 2-3 business days to resolve; more complex requests could take longer.

[feanil]

Hi @Henrrypg even with a github user, we have a requirement that commits have to come from a signed CLA, which means GitHub will fail to commit as a part of the release process no matter what user we use because if the commit doesn't go to a PR, it won't get that check passed. The approach that we recommend for now is to drop the changelog generation step.. We still get github releases which have the same content so it's not a huge loss. A manual changelog may still make sense but I think an automated changelog that is the same as the Github release notes is probably not needed.