feat(ci): use PAT secret for release workflows

Signed-off-by: Victor Adossi <[email protected]>

Author: vados-cosmonic

.github/workflows/create-release-pr.yml

@@ -116,7 +116,7 @@ jobs:
       - name: Generate changelog
         working-directory: ${{ steps.project-meta.outputs.project-dir }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PAT || secrets.GITHUB_TOKEN }}
         run: |
           git cliff \
             --repository=${{ github.workspace }}/.git \

.github/workflows/release.yml

@@ -211,7 +211,7 @@ jobs:
       - name: Re-generate current changelog
         working-directory: ${{ needs.meta.outputs.project-dir }}
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PAT || secrets.GITHUB_TOKEN }}
           GITHUB_REPO: ${{ github.repository }}
         run: |
           git cliff --repository=${{ github.workspace }}/.git --tag=${{ needs.meta.outputs.release-ref }} > CHANGELOG.current

.github/workflows/tag-release.yml

@@ -88,8 +88,7 @@ jobs:
       - name: Push tag
         if: ${{ steps.meta.outputs.proceed }}
         env:
-          # TODO: we must use a PAT here to trigger the release action automatically
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PAT || secrets.GITHUB_TOKEN }}
         run: |
           git config user.name "github-actions[bot]";
           git config user.email "github-actions[bot]@users.noreply.github.com";