Merge pull request #1448 from PolicyEngine/fix/versioning-push-auth

Pass GitHub App token to add-and-commit for branch protection

Author: hua7450

.github/workflows/update-versioning.yml

@@ -25,10 +25,9 @@ jobs:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
-          repository: ${{ github.event.pull_request.head.repo.full_name }}
-          ref: ${{ github.event.pull_request.head.ref }}
+          ref: main
           token: ${{ steps.app-token.outputs.token }}
       - name: Setup Python
         uses: actions/setup-python@v2
@@ -44,4 +43,5 @@ jobs:
           add: "."
           committer_name: Github Actions[bot]
           author_name: Github Actions[bot]
-          message: Update PolicyEngine Household API
+          message: Update PolicyEngine Household API
+          github_token: ${{ steps.app-token.outputs.token }}

changelog_entry.yaml

@@ -1,4 +1,4 @@
 - bump: patch
   changes:
     fixed:
-    - Switch versioning workflow from PAT to GitHub App token for authentication
+    - Pass GitHub App token to EndBug/add-and-commit to allow pushing to protected main branch