@itcase/config 1.7.9 → 1.7.10

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itcase/config",
-  "version": "1.7.9",
+  "version": "1.7.10",
   "author": "ITCase",
   "description": "ITCase Config",
   "engines": {

package/semantic-release/common.js

@@ -17,8 +17,10 @@ const releaseNotesFromIssuesScript = join(
   'releaseNotesFromIssues.js',
 )
 
-// Ссылки на задачи из PR. Репозиторий задач и токен приходят из CI:
-// RELEASE_NOTES_ISSUES_REPO, RELEASE_NOTES_GH_TOKEN.
+// Ссылки на задачи из PR.
+// Pull request'ы текущего репозитория читает GITHUB_TOKEN.
+// Задачи другого репозитория читает RELEASE_NOTES_GH_TOKEN.
+// RELEASE_NOTES_ISSUES_REPO — репозиторий задач.
 const releaseNotesFromIssuesPlugin = [
   '@semantic-release/exec',
   {

package/semantic-release/releaseNotesFromIssues.js

@@ -14,8 +14,11 @@ import { join } from 'node:path'
  */
 const [lastTagArg, nextTagArg] = process.argv.slice(2)
 
-// Token is passed from GitHub Actions env and used for all API calls
-const githubToken = process.env.RELEASE_NOTES_GH_TOKEN
+// Pull requests of this repository. In GitHub Actions this is the workflow token.
+const repositoryToken = process.env.GITHUB_TOKEN || process.env.GH_TOKEN
+
+// Issues live in another repository. The workflow token cannot read them.
+const issuesToken = process.env.RELEASE_NOTES_GH_TOKEN
 
 const currentProjectOwner = process.env.GITHUB_REPOSITORY?.split('/')[0]
 const currentProjectRepo = process.env.GITHUB_REPOSITORY?.split('/')[1]
@@ -27,8 +30,12 @@ const releaseNotesIssuesRepo = process.env.RELEASE_NOTES_ISSUES_REPO
 const issuesProjectOwner = releaseNotesIssuesRepo?.split('/')[0]
 const issuesProjectRepo = releaseNotesIssuesRepo?.split('/')[1]
 
-if (!currentProjectOwner || !currentProjectRepo || !githubToken) {
-  throw new Error('Missing "GITHUB_REPOSITORY" or "RELEASE_NOTES_GH_TOKEN"')
+if (!currentProjectOwner || !currentProjectRepo || !repositoryToken) {
+  throw new Error('Missing "GITHUB_REPOSITORY" or "GITHUB_TOKEN"')
+}
+
+if (!issuesToken) {
+  throw new Error('Missing "RELEASE_NOTES_GH_TOKEN"')
 }
 
 if (!issuesProjectOwner || !issuesProjectRepo) {
@@ -269,7 +276,7 @@ async function run() {
 }
 
 // Small helper for GitHub REST API with common headers and query serialization.
-async function fetchGithubApi(pathname, queryParams = {}) {
+async function fetchGithubApi(pathname, token, queryParams = {}) {
   const apiUrl = new URL(`https://api.github.com${pathname}`)
 
   for (const [key, value] of Object.entries(queryParams)) {
@@ -282,7 +289,7 @@ async function fetchGithubApi(pathname, queryParams = {}) {
   const response = await fetch(apiUrl, {
     headers: {
       Accept: 'application/vnd.github+json',
-      Authorization: `Bearer ${githubToken}`,
+      Authorization: `Bearer ${token}`,
       'User-Agent': 'semantic-release-issues-notes',
       // GitHub REST API version header
       'X-GitHub-Api-Version': '2026-03-10',
@@ -428,6 +435,7 @@ async function getAssociatedPullRequestsForCommit(commitSha) {
   // Works for both merge-commit and regular commits associated with PRs.
   const response = await fetchGithubApi(
     `/repos/${currentProjectOwner}/${currentProjectRepo}/commits/${commitSha}/pulls`,
+    repositoryToken,
   )
   return Array.isArray(response) ? response : []
 }
@@ -449,7 +457,7 @@ async function loadIssue(ref) {
   const [issueOwner, issueRepo] = repoRef.split('/')
   const issuePath = `/repos/${issueOwner}/${issueRepo}/issues/${issueNumber}`
   try {
-    return await fetchGithubApi(issuePath)
+    return await fetchGithubApi(issuePath, issuesToken)
   } catch (error) {
     throw new Error(
       `Failed to load issue for ref="${ref}" using path="${issuePath}"`,