From 59baf706361d705596f8e96351200a65ea06c121 Mon Sep 17 00:00:00 2001 From: "Michael A. Smith" Date: Fri, 29 May 2026 21:59:58 -0400 Subject: [PATCH 1/4] ci(actionlint): ignore stale create-github-app-token input errors actionlint ships pre-v3.1.0 metadata for actions/create-github-app-token, so it wrongly rejects `client-id` and demands the deprecated `app-id`. Scope an ignore to just that action until the upstream fix lands. Assisted-by: Claude Code --- .github/actionlint.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .github/actionlint.yaml diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml new file mode 100644 index 00000000..b689ce88 --- /dev/null +++ b/.github/actionlint.yaml @@ -0,0 +1,9 @@ +# Workaround for stale bundled metadata for actions/create-github-app-token. +# actionlint ships pre-v3.1.0 inputs, so it wrongly rejects `client-id` and +# demands the now-deprecated `app-id`. Remove once the fix lands upstream: +# https://github.com/rhysd/actionlint/pull/652 +paths: + .github/workflows/*.yml: + ignore: + - 'missing input "app-id" which is required by action "actions/create-github-app-token' + - 'input "client-id" is not defined in action "actions/create-github-app-token' From 0028dba8114d66cbe34c21e46afabeac168d3e84 Mon Sep 17 00:00:00 2001 From: "Michael A. Smith" Date: Fri, 29 May 2026 22:10:50 -0400 Subject: [PATCH 2/4] ci(actionlint): tighten ignore regexes to full action reference Match `actions/create-github-app-token@"` including the version suffix and closing quote so the ignore can't accidentally match unrelated messages sharing the prefix. Assisted-by: Claude Code --- .github/actionlint.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml index b689ce88..fe846817 100644 --- a/.github/actionlint.yaml +++ b/.github/actionlint.yaml @@ -5,5 +5,5 @@ paths: .github/workflows/*.yml: ignore: - - 'missing input "app-id" which is required by action "actions/create-github-app-token' - - 'input "client-id" is not defined in action "actions/create-github-app-token' + - 'missing input "app-id" which is required by action "actions/create-github-app-token@[^"]+"' + - 'input "client-id" is not defined in action "actions/create-github-app-token@[^"]+"' From 5900cf1e845c5e0ea8bab74cc8b59f90522a36c8 Mon Sep 17 00:00:00 2001 From: "Michael A. Smith" Date: Fri, 29 May 2026 22:28:45 -0400 Subject: [PATCH 3/4] ci(actionlint): trigger workflow on actionlint.yaml changes The paths filter only matched .github/actions/** and .github/workflows/**, so edits to the new .github/actionlint.yaml config would not run the lint job. Add the config to both push and pull_request paths. Assisted-by: Claude Code --- .github/workflows/actionlint.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml index c602f7ba..4d65d48a 100644 --- a/.github/workflows/actionlint.yml +++ b/.github/workflows/actionlint.yml @@ -5,12 +5,14 @@ on: branches: - master paths: + - '.github/actionlint.yaml' - '.github/actions/**' - '.github/workflows/**' pull_request: branches: - master paths: + - '.github/actionlint.yaml' - '.github/actions/**' - '.github/workflows/**' From 9713fa6ac062d51f0c7baa340d981e8f2eb15d61 Mon Sep 17 00:00:00 2001 From: "Michael A. Smith" Date: Fri, 29 May 2026 22:35:39 -0400 Subject: [PATCH 4/4] self-review pass: match both .yml and .yaml workflow extensions GitHub Actions accepts both extensions; scope the ignore glob to *.{yml,yaml} so a future .yaml workflow using create-github-app-token isn't silently excluded from the workaround. Assisted-by: Claude Code --- .github/actionlint.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actionlint.yaml b/.github/actionlint.yaml index fe846817..3d3818eb 100644 --- a/.github/actionlint.yaml +++ b/.github/actionlint.yaml @@ -3,7 +3,7 @@ # demands the now-deprecated `app-id`. Remove once the fix lands upstream: # https://github.com/rhysd/actionlint/pull/652 paths: - .github/workflows/*.yml: + .github/workflows/*.{yml,yaml}: ignore: - 'missing input "app-id" which is required by action "actions/create-github-app-token@[^"]+"' - 'input "client-id" is not defined in action "actions/create-github-app-token@[^"]+"'