Repository navigation
chore(ci): adopt putio-ci credential names - #68
Conversation
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
There was a problem hiding this comment.
Copilot review overview
🔵 Needs a closer look
It alters the release/credential wiring of the npm publish pipeline, where any misconfiguration could break publishing, so a maintainer should give final sign-off.
Review effort: Balanced
Findings: 1
Open (1)
What changed in this PR
This PR adopts the renamed putio-ci App credential names for the npm release pipeline. The release job in ci.yml consumes the shared putdotio/.github frontend release workflow, which was updated (in putdotio/.github PR #3) to accept PUTIO_CI_APP_PRIVATE_KEY while keeping the legacy PUTIO_RELEASE_BOT_PRIVATE_KEY as a fallback. This repo is repinned to that merged commit and passes the new secret name, and the distribution docs are updated to reflect the App's new name.
Changes:
- Update the release job's reusable-workflow pin and switch the passed secret from
PUTIO_RELEASE_BOT_PRIVATE_KEYtoPUTIO_CI_APP_PRIVATE_KEY. - Rename
putio-releasertoputio-ciin the release-expectations documentation.
| File | Description |
|---|---|
.github/workflows/ci.yml |
Repins the shared release workflow to the credential-rename commit and passes the new PUTIO_CI_APP_PRIVATE_KEY secret. |
docs/DISTRIBUTION.md |
Updates the release bot name from putio-releaser to putio-ci to match the App's new name. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Use the renamed putio-ci App credentials for releases.
PUTIO_CI_APP_PRIVATE_KEYthrough the compatible shared workflow, pinned to its merged commit.pnpm run verify,actionlint, andgit diff --checkpassed locally. No release or deployment was dispatched.Written by an agent (Codex, gpt-6-astra)