Skip to content

feat: update permission inputs#358

Merged
parkerbxyz merged 2 commits intomainfrom
dependabot/npm_and_yarn/octokit/openapi-22.0.0
Apr 11, 2026
Merged

feat: update permission inputs#358
parkerbxyz merged 2 commits intomainfrom
dependabot/npm_and_yarn/octokit/openapi-22.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps @octokit/openapi from 21.0.0 to 22.0.0.

Release notes

Sourced from @​octokit/openapi's releases.

v22.0.0

22.0.0 (2025-12-09)

Features

  • drop projects-classic endpoints, add GitHub API endpoints: cache limits (retention & storage) for repos/orgs/enterprises, billing budgets & usage, artifacts deployment metadata, and projectsV2 drafts & fields (#518) (b0c44a4)

BREAKING CHANGES

  • Removed /orgs/{org}/projects
  • Removed /orgs/{org}/settings/billing/actions
  • Removed /orgs/{org}/settings/billing/packages
  • Removed /orgs/{org}/settings/billing/shared-storage
  • Removed /orgs/{org}/teams/{team_slug}/projects
  • Removed /orgs/{org}/teams/{team_slug}/projects/{project_id}
  • Removed /projects/columns/{column_id}
  • Removed /projects/columns/{column_id}/moves
  • Removed /projects/{project_id}
  • Removed /projects/{project_id}/collaborators
  • Removed /projects/{project_id}/collaborators/{username}
  • Removed /projects/{project_id}/collaborators/{username}/permission
  • Removed /repos/{owner}/{repo}/projects
  • Removed /teams/{team_id}/projects
  • Removed /teams/{team_id}/projects/{project_id}
  • Removed /user/projects
  • Removed /users/{username}/projects
  • Removed /users/{username}/settings/billing/actions
  • Removed /users/{username}/settings/billing/packages
  • Removed /users/{username}/settings/billing/shared-storage
Commits
  • 6f63b86 build(deps): lock file maintenance (#520)
  • b0c44a4 feat: drop projects-classic endpoints, add GitHub API endpoints: cache limits...
  • a8043eb ci(action): update actions/checkout action to v6 (#519)
  • af315cd build(deps): lock file maintenance (#514)
  • 170f396 build(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#516)
  • 077a1b9 build(deps): lock file maintenance (#508)
  • cfca956 ci(action): update github/codeql-action action to v4 (#510)
  • f15da93 ci(action): update peter-evans/create-or-update-comment action to v5 (#509)
  • 64bef33 chore(deps): update dependency map-obj to v6 (#507)
  • 4e8e223 chore(deps): update dependency github-enterprise-server-versions to v3 (#511)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​octokit/openapi since your current version.


Resolves github/gh-aw#18921.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 1, 2026
@dependabot dependabot bot requested a review from a team as a code owner April 1, 2026 11:28
@github-actions github-actions bot changed the title build(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0 feat: update permission inputs Apr 1, 2026
@ericsciple
Copy link
Copy Markdown

Hey @parkerbxyz, this PR would unblock a warning we're seeing in Agentic Workflows. When the gh-aw compiler generates a workflow using safe-outputs: create-discussion, it sets permission-discussions: write on create-github-app-token, which produces a runtime warning since the input doesn't exist yet. The token still works (inherited from the app installation), but the warning is confusing for users.

This Dependabot bump adds permission-discussions along with a few others, which would resolve it. CI looks green. Would it be alright to merge this?

Context: github/gh-aw#18921

@parkerbxyz
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 10, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@parkerbxyz
Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [@octokit/openapi](https://github.com/octokit/openapi) from 21.0.0 to 22.0.0.
- [Release notes](https://github.com/octokit/openapi/releases)
- [Commits](octokit/openapi@v21.0.0...v22.0.0)

---
updated-dependencies:
- dependency-name: "@octokit/openapi"
  dependency-version: 22.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot changed the title feat: update permission inputs build(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0 Apr 10, 2026
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/octokit/openapi-22.0.0 branch from 675fbe3 to 558d22f Compare April 10, 2026 23:08
@parkerbxyz parkerbxyz linked an issue Apr 10, 2026 that may be closed by this pull request
@github-actions github-actions bot changed the title build(deps-dev): bump @octokit/openapi from 21.0.0 to 22.0.0 feat: update permission inputs Apr 10, 2026
@parkerbxyz parkerbxyz removed a link to an issue Apr 10, 2026
@parkerbxyz parkerbxyz linked an issue Apr 11, 2026 that may be closed by this pull request
@parkerbxyz parkerbxyz merged commit 076e948 into main Apr 11, 2026
4 checks passed
@parkerbxyz parkerbxyz deleted the dependabot/npm_and_yarn/octokit/openapi-22.0.0 branch April 11, 2026 00:35
create-app-token-action-releaser bot pushed a commit that referenced this pull request Apr 11, 2026
# [3.1.0](v3.0.0...v3.1.0) (2026-04-11)

### Bug Fixes

* **deps:** bump p-retry from 7.1.1 to 8.0.0 ([#357](#357)) ([3bbe07d](3bbe07d))

### Features

* add `client-id` input and deprecate `app-id` ([#353](#353)) ([e6bd4e6](e6bd4e6))
* update permission inputs ([#358](#358)) ([076e948](076e948))
@create-app-token-action-releaser
Copy link
Copy Markdown

🎉 This PR is included in version 3.1.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code released

Projects

None yet

Development

Successfully merging this pull request may close these issues.

actions/create-github-app-token warning Add missing permission-discussions input to action.yml

2 participants