node-walk 0.3.0__tar.gz → 0.4.0__tar.gz

{node_walk-0.3.0 → node_walk-0.4.0}/.github/workflows/release.yml

@@ -29,12 +29,22 @@ jobs:
   release:
     name: Auto-bump, Tag, Build & Publish
     runs-on: ubuntu-latest
+    environment:
+      name: ${{ inputs.target == 'testpypi' && 'testpypi' || 'pypi' }}
+      url: ${{ inputs.target == 'testpypi' && 'https://test.pypi.org/project/node-walk/' || 'https://pypi.org/project/node-walk/' }}
     steps:
+      - name: Generate GitHub App Token
+        id: app_token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.RELEASE_APP_ID }}
+          private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
+
       - name: Check out repository
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ steps.app_token.outputs.token }}
 
       - name: Set up Python
         uses: actions/setup-python@v5
@@ -104,9 +114,8 @@ jobs:
 
           # Push commit and tag back to repository
           branch = os.environ.get("GITHUB_REF_NAME", "main")
-          remote_url = f"https://x-access-token:{os.environ['GITHUB_TOKEN']}@github.com/{os.environ['GITHUB_REPOSITORY']}.git"
-          subprocess.run(["git", "push", remote_url, f"HEAD:{branch}"], check=True)
-          subprocess.run(["git", "push", remote_url, new_tag], check=True)
+          subprocess.run(["git", "push", "origin", f"HEAD:{branch}"], check=True)
+          subprocess.run(["git", "push", "origin", new_tag], check=True)
 
           with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as out:
               out.write(f"version={target_ver}\n")
@@ -114,7 +123,6 @@ jobs:
           EOF
         env:
           INPUT_BUMP_TYPE: ${{ inputs.bump_type }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build package distributions
         run: python -m build
@@ -128,6 +136,7 @@ jobs:
       - name: Create GitHub Release
         uses: softprops/action-gh-release@v2
         with:
+          token: ${{ steps.app_token.outputs.token }}
           tag_name: ${{ steps.auto_tag.outputs.tag }}
           files: dist/*
           generate_release_notes: true

{node_walk-0.3.0 → node_walk-0.4.0}/CHANGELOG.md

@@ -11,6 +11,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ---
 
+## [0.4.0] - 2026-08-26
+
+---
+
+## [0.3.1] - 2026-08-25
+
+---
+
 ## [0.3.0] - 2026-08-23
 
 ---

{node_walk-0.3.0 → node_walk-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: node-walk
-Version: 0.3.0
+Version: 0.4.0
 Summary: Semantic code intelligence — local-first graph of your codebase for humans and LLMs
 Author: CodeGraph Contributors
 License: MIT
@@ -163,6 +163,16 @@ pytest tests/ -v
 
 ---
 
+## Release Automation Setup
+
+The `Release & Publish` workflow can push release commits/tags to `main`.
+
+If your repository ruleset requires pull requests for `main`, create a `RELEASE_PUSH_TOKEN` secret with a PAT from a user/app that is explicitly allowed to bypass that ruleset, then add that actor to the ruleset bypass list.
+
+If `RELEASE_PUSH_TOKEN` is not set, the workflow falls back to `GITHUB_TOKEN`.
+
+---
+
 ## Graph Storage & Lifecycle
 
 The generated graph is stored in `.node_walk/graph.db` inside your indexed repository. It is disposable and can be re-indexed at any time with `node-walk index .`.

{node_walk-0.3.0 → node_walk-0.4.0}/README.md

@@ -139,6 +139,16 @@ pytest tests/ -v
 
 ---
 
+## Release Automation Setup
+
+The `Release & Publish` workflow can push release commits/tags to `main`.
+
+If your repository ruleset requires pull requests for `main`, create a `RELEASE_PUSH_TOKEN` secret with a PAT from a user/app that is explicitly allowed to bypass that ruleset, then add that actor to the ruleset bypass list.
+
+If `RELEASE_PUSH_TOKEN` is not set, the workflow falls back to `GITHUB_TOKEN`.
+
+---
+
 ## Graph Storage & Lifecycle
 
 The generated graph is stored in `.node_walk/graph.db` inside your indexed repository. It is disposable and can be re-indexed at any time with `node-walk index .`.