fix: dispatch release without PAT checkout (#40)

Co-authored-by: Genie Automagik <genie@namastex.ai>

Author: namastex888

.github/workflows/auto-release.yml

@@ -6,6 +6,7 @@ on:
 
 permissions:
   contents: write
+  actions: write
 
 jobs:
   tag:
@@ -16,8 +17,8 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          # PAT required: GITHUB_TOKEN tag pushes don't trigger other workflows
-          token: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
+          # Use the built-in token for checkout; dispatch release explicitly after pushing the tag.
+          token: ${{ github.token }}
 
       - name: Compute next calver tag
         id: calver
@@ -36,11 +37,12 @@ jobs:
           echo "tag=${TAG}" >> "$GITHUB_OUTPUT"
           echo "Next tag: ${TAG}"
 
-      - name: Create and push tag
+      - name: Create tag and dispatch release
         env:
-          GH_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
+          GH_TOKEN: ${{ github.token }}
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
           git tag -a "${{ steps.calver.outputs.tag }}" -m "Release ${{ steps.calver.outputs.tag }}"
           git push origin "${{ steps.calver.outputs.tag }}"
+          gh workflow run release.yml --ref main -f tag="${{ steps.calver.outputs.tag }}"

.github/workflows/release.yml

@@ -50,13 +50,13 @@ jobs:
     needs: [test, worker]
     runs-on: macos-latest
     env:
-      GH_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
+      GH_TOKEN: ${{ github.token }}
     steps:
       - name: Checkout
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
+          token: ${{ github.token }}
 
       - name: Setup Go
         uses: actions/setup-go@v5
@@ -113,6 +113,6 @@ jobs:
           version: latest
           args: release --clean --config /tmp/.goreleaser.yaml --release-notes /tmp/release-notes.md
         env:
-          GITHUB_TOKEN: ${{ secrets.RELEASE_PLEASE_TOKEN || github.token }}
+          GITHUB_TOKEN: ${{ github.token }}
           WK_CLIENT_ID: ${{ secrets.WK_CLIENT_ID }}
           WK_CLIENT_SECRET: ${{ secrets.WK_CLIENT_SECRET }}