#10271 ci: Use ephemeral GitHub app token Pull request opened by edgarrmondragon Description Instead of a long-lived token. Checklist • I have read the contribution guide Was generative AI tooling used to co-author this PR? • Yes (please specify the tool below) Related Issues • Closes #XXXX Summary by Sourcery Replace persistent GitHub credentials in the version bump workflow with an ephemeral GitHub App token. Enhancements: • Use a short-lived MeltyBot GitHub App token for version bump releases and release pull requests instead of long-lived repository tokens. CI: • Grant the version bump workflow only the GitHub App contents and pull-request permissions it requires. Chores: • Remove the workflow's direct use of the default and stored GitHub token environment variables. Summary by Sourcery Secure the version bump workflow by using an ephemeral GitHub App token for release operations. Enhancements: • Replace long-lived GitHub credentials in the version bump workflow with a short-lived MeltyBot GitHub App token. CI: • Restrict the version bump workflow to the contents and pull-request permissions required for releases and release pull requests. Chores: • Remove direct use of default and stored GitHub token environment variables from the workflow. meltano/meltano