ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3.1.1 ) by renovate[bot] · Pull Request #5605 · carpenike/k8s-gitops

renovate · 2026-03-14T01:54:15Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	major	`v1` → `v3`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

`v3.1.1`

Compare Source

Bug Fixes

improve error message when app identifier is empty (#362) (07e2b76), closes #249

`v3.1.0`

Compare Source

Bug Fixes

deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)

Features

add client-id input and deprecate app-id (#353) (e6bd4e6)
update permission inputs (#358) (076e948)

`v3.0.0`

Compare Source

feat!: node 24 support (#275) (2e564a0)
fix!: require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)

Bug Fixes

remove custom proxy handling (#143) (dce0ab0)

BREAKING CHANGES

Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.

`v3`

Compare Source

`v2.2.2`

Compare Source

Bug Fixes

deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
deps: bump the production-dependencies group with 4 updates (#336) (6bda5bc)
deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)

`v2.2.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)

`v2.2.0`

Compare Source

Bug Fixes

deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)

Features

update permission inputs (#296) (d90aa53)

`v2.1.4`

Compare Source

Bug Fixes

deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)

`v2.1.3`

Compare Source

Bug Fixes

deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)

`v2.1.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)

Features

use node24 as runner (#267) (a1cbe0f)

`v2.0.6`

Compare Source

Bug Fixes

replace - with _ (#246) (3336784)

`v2.0.5`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#240) (d64d7d7)

`v2.0.4`

Compare Source

Bug Fixes

permission input handling (#243) (2950cbc)

`v2.0.3`

Compare Source

Bug Fixes

README: use v2 in examples (#234) (9ba274d), closes #232
use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)

`v2.0.2`

Compare Source

Bug Fixes

improve log messages for token creation (#226) (eaef294)

`v2.0.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 2 updates (#228) (2411bfc)

`v2.0.0`

Compare Source

feat!: remove deprecated inputs (#213) (5cc811b)

BREAKING CHANGES

Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

`v2`

Compare Source

`v1.12.0`

Compare Source

Features

permissions (#168) (0e0aa99)

`v1.11.7`

Compare Source

Bug Fixes

deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)

`v1.11.6`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)

`v1.11.5`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.2.0 to 9.2.2 (#209) (8cedd97), closes #740 #738 #740 #737 #738 #736 #735 #734 #733 #732
deps: bump @octokit/request-error from 6.1.6 to 6.1.7 (#208) (415f6a5), closes #494 #491 #490 #488 #486 #487 #485 #484

`v1.11.4`

Compare Source

Bug Fixes

deps: bump @octokit/endpoint from 10.1.1 to 10.1.3 (#207) (d30def8), closes #507 #514 #512 #511 #509 #508 #507 #506 #505 #504

`v1.11.3`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#203) (8e85a3c), closes #665 #665 #663 #662 #661 #659 #660 #658 #656 #657 #655 #731 nodejs/undici#4016 nodejs/undici#4017 nodejs/undici#4018 nodejs/undici#4008 nodejs/undici#3991 nodejs/undici#4001 nodejs/undici#3980 nodejs/undici#4003 nodejs/undici#3965 nodejs/undici#4002 nodejs/undici#4006 nodejs/undici#3956 nodejs/undici#3964 nodejs/undici#3447 #3966 nodejs/undici#3967 nodejs/undici#3971 nodejs/undici#3954 nodejs/undici#3972 nodejs/undici#3974 nodejs/undici#3976 #3975 nodejs/undici#3977 nodejs/undici#3978 nodejs/undici#3981 nodejs/undici#3983 nodejs/undici#3986 #4021 #4018 #4017 #4016 #4008 #4007 #4006 #3965

`v1.11.2`

Compare Source

Bug Fixes

deps: bump @octokit/request from 9.1.3 to 9.1.4 in the production-dependencies group (#196) (b4192a5), closes #730 #730 #729 #727 #726 #723 #724 #722 #721 #720 #719
deps: bump undici from 6.19.8 to 7.2.0 (#198) (29aa051), closes nodejs/undici#3958 nodejs/undici#3955 nodejs/undici#3962 nodejs/undici#3921 nodejs/undici#3923 nodejs/undici#3925 nodejs/undici#3926 nodejs/undici#3924 nodejs/undici#3933 nodejs/undici#3916 nodejs/undici#3930 nodejs/undici#3938 #3937 nodejs/undici#3940 nodejs/undici#3931 nodejs/undici#3941 nodejs/undici#3911 nodejs/undici#3888 nodejs/undici#3939 nodejs/undici#3947 nodejs/undici#3945 nodejs/undici#3916 nodejs/undici#3893 nodejs/undici#3902 #3901 nodejs/undici#3903 nodejs/undici#3905 nodejs/undici#3900 nodejs/undici#3913 nodejs/undici#3910 nodejs/undici#3909 nodejs/undici#3906 nodejs/undici#3922 #3962 #3955 #3958 #3945 #3947 #3939 #3888 #3911 #3941

`v1.11.1`

Compare Source

What's Changed

Bug Fixes

deps: bump the production-dependencies group across 1 directory with 3 updates by @dependabot in #193

Full Changelog: actions/create-github-app-token@v1.11.0...v1.11.1

`v1.11.0`

Compare Source

What's Changed

Features

Allow repositories input to be comma or newline-separated by @peter-evans in #169

New Contributors

@peter-evans made their first contribution in #169

Full Changelog: actions/create-github-app-token@v1.10.4...v1.11.0

`v1.10.4`

Compare Source

What's Changed

build(deps-dev): bump the development-dependencies group with 4 updates by @dependabot in #150
docs(README): fix the git committer string and Configure git CLI examples by @maboloshi in #151
docs(readme): document how a Base64 private key could be decoded by @vleon1a in #155
test: fix test file extensions and inputs for repositories by @parkerbxyz in #161
build(deps-dev): bump the development-dependencies group across 1 directory with 4 updates by @dependabot in #167

Bug Fixes

bump the production-dependencies group across 1 directory with 3 updates by @dependabot in #166

New Contributors

@vleon1a made their first contribution in #155

Full Changelog: actions/create-github-app-token@v1.10.3...v1.10.4

`v1.10.3`

Compare Source

What's Changed

docs(README): fix committer string example and add git config example by @anuraaga in #145

Bug Fixes

fix(deps): bump undici from 6.18.2 to 6.19.2 in the production-dependencies group by @dependabot in #149

New Contributors

@anuraaga made their first contribution in #145

Full Changelog: actions/create-github-app-token@v1.10.2...v1.10.3

`v1.10.2`

Compare Source

Bug Fixes

do not revoke token if already expired (#147) (66a7045), closes #140 #95

`v1.10.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#138) (8d81a59), closes #606 #606 #605 #604 nodejs/undici#3295 nodejs/undici#3298 nodejs/undici#3294 nodejs/undici#3281 nodejs/undici#3286 nodejs/undici#3284 nodejs/undici#3291 nodejs/undici#3290 nodejs/undici#3283 nodejs/undici#3281 nodejs/undici#3263 nodejs/undici#3279 nodejs/undici#3227 nodejs/undici#3234 nodejs/undici#3240 nodejs/undici#3245 nodejs/undici#3241 nodejs/undici#3247 nodejs/undici#3248 nodejs/undici#3219 nodejs/undici#3251 nodejs/undici#3254 nodejs/undici#3258 nodejs/undici#3257 nodejs/undici#3259 nodejs/undici#3262 nodejs/undici#3264 nodejs/undici#3118 nodejs/undici#3269 #3301 #3294 #3298 #3295 #3293 #3283 #3290 #3291 #3284 #3286

`v1.10.0`

Compare Source

Features

private-key: escaped newlines will be replaced (#132) (9d23fb9)

`v1.9.3`

Compare Source

Bug Fixes

deps: bump undici from 6.10.2 to 6.11.1 (#125) (3c223c7), closes #3024 nodejs/undici#3044 #3023 nodejs/undici#3025 nodejs/undici#3024 nodejs/undici#3034 nodejs/undici#3038 nodejs/undici#2947 nodejs/undici#3040 nodejs/undici#3036 nodejs/undici#3041 #3024 #3041 #3036

`v1.9.2`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 1 update (#123) (beea7b8), closes nodejs/undici#2978 nodejs/undici#2971 nodejs/undici#2980 #2982 nodejs/undici#2983 nodejs/undici#2987 nodejs/undici#2991 #2986 nodejs/undici#2992 nodejs/undici#2985 nodejs/undici#2993 nodejs/undici#2995 nodejs/undici#2998 #2863 nodejs/undici#2999 nodejs/undici#3001 nodejs/undici#2971 nodejs/undici#2980 nodejs/undici#2983 nodejs/undici#2987 nodejs/undici#2991 nodejs/undici#2985 nodejs/undici#2995 nodejs/undici#2960 nodejs/undici#2959 nodejs/undici#2969 nodejs/undici#2962 nodejs/undici#2974 nodejs/undici#2967 nodejs/undici#2966 nodejs/undici#2969 nodejs/undici#2962 nodejs/undici#2826 nodejs/undici#2952 #3001 #2863 #2999 #2998 #2993 #2986 #2992 #2991 #2987

`v1.9.1`

Compare Source

Bug Fixes

clarify owner input description (#118) (d9bc169)

`v1.9.0`

Compare Source

Features

outputs: app-slug and installation-id (#105) (babaff4)

`v1.8.2`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#107) (f83fb27), closes #579 #579 #576 #577 #574 #572 #571 #567 #681 #678 #667 #681 #680 #609 #678 #676 #673 #669 #667 #671 nodejs/undici#2683 nodejs/undici#2645 nodejs/undici#2695 nodejs/undici#2699 nodejs/undici#2703 nodejs/undici#2644 nodejs/undici#2702 nodejs/undici#2706 nodejs/undici#2707 nodejs/undici#2644 #2707 #2706 #2702 #2644 #2703 #2699 #2695 #2645 #2683

`v1.8.1`

Compare Source

Bug Fixes

deps: bump undici from 6.6.0 to 6.6.1 (#103) (5195df7)

`v1.8.0`

Compare Source

Features

add proxy support (#102) (1f82f7d)

`v1.7.0`

Compare Source

Features

github-api-url (#88) (837e275), closes #77

`v1.6.4`

Compare Source

Bug Fixes

revocation: avoid revoking expired tokens and fail gracefully (#95) (0c01407), closes #72

`v1.6.3`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 2 updates (#94) (323044f), closes #562 #557 #562 #560 #559 #558 #557 #553 #552 #551 #75 #75

`v1.6.2`

Compare Source

Bug Fixes

handle clock skew (#87) (495056a)

`v1.6.1`

Compare Source

Bug Fixes

deps: bump dependencies(#84) (474769d), closes #651 #648 #649 #651 #648 #646

`v1.6.0`

Compare Source

Features

add retry (#79) (0f3b4d7), closes #71

`v1.5.1`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 1 update (#68) (6375dce)

`v1.5.0`

Compare Source

Features

use dash notation for inputs (deprecates underscore notation) (#59) (7b1d2ae), closes #57 /github.com/actions/create-github-app-token/issues/57#issuecomment-1751272252

`v1.4.0`

Compare Source

Features

Add a skip_token_revoke input for configuring token revocation (#54) (9ec88c4), closes 1#L46-L47 1#L132

`v1.3.0`

Compare Source

Features

support tokens scoped to multiple repositories within organization (#46) (20fd863)

`v1.2.2`

Compare Source

Bug Fixes

deps: bump the production-dependencies group with 3 updates (#51) (6d98b25), closes #1511 #535 #535 #533 #531 #530 #524 #637 #637 #631 #626

`v1.2.1`

Compare Source

Bug Fixes

GHES: respect GITHUB_API_URL when creating installation access t

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

…1 → v3 ) | datasource | package | from | to | | ----------- | ------------------------------- | ---- | -- | | github-tags | actions/create-github-app-token | v1 | v3 |

carpenike-bot · 2026-03-14T01:56:40Z

🦙 MegaLinter status: ❌ ERROR

Descriptor	Linter	Files	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	3	0	0	0.23s
❌ COPYPASTE	jscpd	yes	2	no	1.45s
✅ REPOSITORY	git_diff	yes	no	no	0.03s
✅ REPOSITORY	secretlint	yes	no	no	3.99s
✅ YAML	prettier	3	0	0	0.61s
✅ YAML	yamllint	3	0	0	0.36s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

ci(github-action)!: Update actions/create-github-app-token action ( v…

9d67c60

…1 → v3 ) | datasource | package | from | to | | ----------- | ------------------------------- | ---- | -- | | github-tags | actions/create-github-app-token | v1 | v3 |

renovate Bot added renovate/github-release renovate/github-action type/major labels Mar 14, 2026

carpenike-bot Bot added the area/ci label Mar 14, 2026

renovate Bot changed the title ~~ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3 )~~ ci(github-action)!: Update actions/create-github-app-token action ( v1.12.0 → v3.1.1 ) Apr 19, 2026

renovate Bot changed the title ~~ci(github-action)!: Update actions/create-github-app-token action ( v1.12.0 → v3.1.1 )~~ ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3 ) Apr 19, 2026

renovate Bot changed the title ~~ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3 )~~ ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3.1.1 ) Apr 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3.1.1 )#5605

ci(github-action)!: Update actions/create-github-app-token action ( v1 → v3.1.1 )#5605
renovate[bot] wants to merge 1 commit intomainfrom
renovate/actions-create-github-app-token-3.x

renovate Bot commented Mar 14, 2026 •

edited

Loading

Uh oh!

carpenike-bot Bot commented Mar 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Mar 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Features

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

What's Changed

Bug Fixes

What's Changed

Features

New Contributors

What's Changed

Bug Fixes

New Contributors

What's Changed

Bug Fixes

New Contributors

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Features

Features

Bug Fixes

Bug Fixes

Configuration

Uh oh!

carpenike-bot Bot commented Mar 14, 2026

🦙 MegaLinter status: ❌ ERROR

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 14, 2026 •

edited

Loading