Merge pull request #19 from jorijn/release-please--branches--main--components--meshcore-stats

chore(main): release 0.2.3
2026-03-28 17:42:55 +01:00 · 2026-01-05 08:58:53 +01:00 · 2026-01-05 08:57:16 +01:00 · 2026-01-05 08:57:01 +01:00
5 changed files with 22 additions and 4 deletions
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -5,6 +5,17 @@ on:
    branches:
      - main

+# Note: We use a fine-grained PAT (RELEASE_PLEASE_TOKEN) instead of GITHUB_TOKEN
+# because GITHUB_TOKEN cannot trigger other workflows (like docker-publish.yml).
+# This is a GitHub security feature to prevent infinite workflow loops.
+#
+# The PAT requires these permissions (scoped to this repository only):
+# - Contents: Read and write (for creating releases and pushing tags)
+# - Pull requests: Read and write (for creating/updating release PRs)
+#
+# To rotate: Settings > Developer settings > Fine-grained tokens
+# Recommended rotation: Every 90 days
+
 permissions:
  contents: write
  pull-requests: write
@@ -16,6 +27,6 @@ jobs:
      - name: Release Please
        uses: googleapis/release-please-action@v4
        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.RELEASE_PLEASE_TOKEN }}
          config-file: release-please-config.json
          manifest-file: .release-please-manifest.json
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-  ".": "0.2.2"
+  ".": "0.2.3"
 }
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.

 This changelog is automatically generated by [release-please](https://github.com/googleapis/release-please) based on [Conventional Commits](https://www.conventionalcommits.org/).

+## [0.2.3](https://github.com/jorijn/meshcore-stats/compare/v0.2.2...v0.2.3) (2026-01-05)
+
+
+### Continuous Integration
+
+* use fine-grained PAT for release-please to trigger Docker builds ([2730a9d](https://github.com/jorijn/meshcore-stats/commit/2730a9d906eeb5761af29dd69e8d4ebbfca50491))
+
 ## [0.2.2](https://github.com/jorijn/meshcore-stats/compare/v0.2.1...v0.2.2) (2026-01-05)


--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -15,7 +15,7 @@ services:
  # MeshCore Stats - Data collection and rendering
  # ==========================================================================
  meshcore-stats:
-    image: ghcr.io/jorijn/meshcore-stats:0.2.2 # x-release-please-version
+    image: ghcr.io/jorijn/meshcore-stats:0.2.3 # x-release-please-version
    container_name: meshcore-stats
    restart: unless-stopped

--- a/src/meshmon/init.py
+++ b/src/meshmon/init.py
@@ -1,3 +1,3 @@
 """MeshCore network monitoring library."""

-__version__ = "0.2.2"  # x-release-please-version
+__version__ = "0.2.3"  # x-release-please-version
Author	SHA1	Message	Date
Jorijn Schrijvershof	5b43f9ed12	Merge pull request #19 from jorijn/release-please--branches--main--components--meshcore-stats chore(main): release 0.2.3	2026-01-05 08:58:53 +01:00
Jorijn Schrijvershof	0fe6c66ed8	chore(main): release 0.2.3	2026-01-05 08:57:16 +01:00
Jorijn Schrijvershof	2730a9d906	ci: use fine-grained PAT for release-please to trigger Docker builds GITHUB_TOKEN cannot trigger other workflows by design. Using a fine-grained PAT (RELEASE_PLEASE_TOKEN) scoped to this repo only allows releases to properly trigger the docker-publish workflow. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-05 08:57:01 +01:00