Skip to content

fix(ci): replace SWIFTLM_PR_TOKEN with GITHUB_TOKEN in upstream sync#7

Merged
solderzzc merged 1 commit intomainfrom
fix/upstream-sync-token
Apr 19, 2026
Merged

fix(ci): replace SWIFTLM_PR_TOKEN with GITHUB_TOKEN in upstream sync#7
solderzzc merged 1 commit intomainfrom
fix/upstream-sync-token

Conversation

@solderzzc
Copy link
Copy Markdown
Member

Problem

Run #24622349998 failed with:

remote: Permission to SharpAI/mlx-swift.git denied to solderzzc.
fatal: unable to access 'https://github.com/SharpAI/mlx-swift/': The requested URL returned error: 403

The SWIFTLM_PR_TOKEN secret is a PAT belonging to the solderzzc account, which has lost write access to this repository.

Fix

Switch both checkout token and GH_TOKEN to use the built-in GITHUB_TOKEN. The repo already has:

  • default_workflow_permissions: write
  • can_approve_pull_request_reviews: true

So GITHUB_TOKEN has sufficient permissions for both the force-push and PR creation.

…workflow

The SWIFTLM_PR_TOKEN PAT (belonging to solderzzc) has lost write access
to SharpAI/mlx-swift, causing the upstream sync job to fail with HTTP 403.

The repo already has default_workflow_permissions=write and
can_approve_pull_request_reviews=true, so GITHUB_TOKEN is sufficient
for both force-pushing the sync branch and creating the PR.
Copilot AI review requested due to automatic review settings April 19, 2026 06:20
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR fixes the scheduled upstream-sync GitHub Actions workflow by replacing a now-invalid personal access token secret (SWIFTLM_PR_TOKEN) with the built-in GITHUB_TOKEN, restoring the workflow’s ability to force-push the sync branch and open/update a PR.

Changes:

  • Update actions/checkout to authenticate with secrets.GITHUB_TOKEN.
  • Update the gh pr create step to use secrets.GITHUB_TOKEN for authentication.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@solderzzc solderzzc merged commit f57a838 into main Apr 19, 2026
10 of 11 checks passed
@solderzzc solderzzc deleted the fix/upstream-sync-token branch April 19, 2026 19:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants