From 7ec76742ff7d4de33794a9e3d8fb97068f100310 Mon Sep 17 00:00:00 2001
From: "Gustavo H. Strassburger" <gustavo@posthog.com>
Date: Tue, 30 Jun 2026 18:22:27 -0300
Subject: [PATCH 1/2] Fix publish job: use GITHUB_TOKEN instead of app token
 for tagging/releases

---
 .github/workflows/release.yml | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e40f75a0..e2d6b94f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -262,19 +262,11 @@ jobs:
             changelog: openfeature-provider/CHANGELOG.md
             github_release: true
     steps:
-      - name: Get GitHub App token
-        id: releaser
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
-        with:
-          client-id: ${{ secrets.GH_APP_POSTHOG_PYTHON_RELEASER_APP_ID }}
-          private-key: ${{ secrets.GH_APP_POSTHOG_PYTHON_RELEASER_PRIVATE_KEY }}
-
       - name: Checkout release commit
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: ${{ needs.version-bump.outputs.commit-hash }}
           fetch-depth: 0
-          token: ${{ steps.releaser.outputs.token }}
 
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
@@ -320,7 +312,7 @@ jobs:
       - name: Tag ${{ matrix.package.name }} release
         if: steps.detect.outputs.has-new-version == 'true' && matrix.package.tag_prefix != ''
         env:
-          GH_TOKEN: ${{ steps.releaser.outputs.token }}
+          GH_TOKEN: ${{ github.token }}
           TAG: ${{ matrix.package.tag_prefix }}${{ steps.detect.outputs.version }}
           COMMIT_HASH: ${{ needs.version-bump.outputs.commit-hash }}
         run: |
@@ -331,7 +323,7 @@ jobs:
       - name: Create ${{ matrix.package.name }} GitHub Release
         if: steps.detect.outputs.has-new-version == 'true' && matrix.package.github_release
         env:
-          GH_TOKEN: ${{ steps.releaser.outputs.token }}
+          GH_TOKEN: ${{ github.token }}
           TAG: ${{ matrix.package.tag_prefix }}${{ steps.detect.outputs.version }}
           CHANGELOG_FILE: ${{ matrix.package.changelog }}
         run: |

From f773839017eb85b5d18be8eee34154ca3c6ac498 Mon Sep 17 00:00:00 2001
From: "Gustavo H. Strassburger" <gustavo@posthog.com>
Date: Tue, 30 Jun 2026 18:28:53 -0300
Subject: [PATCH 2/2] Add changeset for openfeature-provider-posthog patch
 release

---
 .sampo/changesets/fix-publish-job-token.md | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 .sampo/changesets/fix-publish-job-token.md

diff --git a/.sampo/changesets/fix-publish-job-token.md b/.sampo/changesets/fix-publish-job-token.md
new file mode 100644
index 00000000..f96c6cbf
--- /dev/null
+++ b/.sampo/changesets/fix-publish-job-token.md
@@ -0,0 +1,5 @@
+---
+'pypi/openfeature-provider-posthog': patch
+---
+
+Fix release workflow: use GITHUB_TOKEN instead of environment-scoped app token in the publish job.