From 8cf99dc6c6f95b8a6ebb1ca0e4f0804b72d567c3 Mon Sep 17 00:00:00 2001 From: Matt McKay Date: Tue, 21 Jul 2026 16:01:03 +1000 Subject: [PATCH] Rebase pushes with the machine-user PAT (action-translation#125) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Commits pushed with the default GITHUB_TOKEN trigger no workflows, so a rebased branch gets a run-less head: force-pushed re-translated content lands unreviewed, and with required checks a run-less head blocks merging. Measured both ways on the test harness 2026-07-21 — zero runs under GITHUB_TOKEN, review triggered under the PAT. Sync mode has always passed the PAT for exactly this reason; rebase pushing to the same PRs with a weaker token was an inconsistency, not a decision. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/rebase-translations.yml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/.github/workflows/rebase-translations.yml b/.github/workflows/rebase-translations.yml index 25a9870..b108906 100644 --- a/.github/workflows/rebase-translations.yml +++ b/.github/workflows/rebase-translations.yml @@ -46,4 +46,11 @@ jobs: with: mode: rebase anthropic-api-key: ${{ secrets.ANTHROPIC_API_KEY }} - github-token: ${{ secrets.GITHUB_TOKEN }} + # PAT rather than the default GITHUB_TOKEN, deliberately: commits pushed + # with GITHUB_TOKEN trigger no workflows (GitHub's recursion guard), so a + # rebased branch ends up with a run-less head — force-pushed re-translated + # content lands unreviewed, and with required checks a run-less head blocks + # merging. Validated both ways on the test harness, 2026-07-21: zero runs + # under GITHUB_TOKEN, review triggered under the PAT. + # See QuantEcon/action-translation#125. + github-token: ${{ secrets.QUANTECON_SERVICES_PAT }}