From 677b6d1a6bce1593963cc31398cfc66a53f7169f Mon Sep 17 00:00:00 2001
From: Tom Ha <tomh@apadmi.com>
Date: Wed, 22 Apr 2026 10:25:08 +0100
Subject: [PATCH 1/2] ci: Update `release-tag` workflow to use GitHub app token

---
 .github/workflows/release-tag.yml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index 8b0eadc..c1c460c 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -12,6 +12,12 @@ jobs:
     runs-on: [ ubuntu-latest ]
     if: contains(github.event.head_commit.message, 'chore(release)')
     steps:
+      - name: Generate token
+        id: generate-token
+        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 #v3.1.1
+        with:
+          app-id: ${{ secrets.MELOS_APP_ID }}
+          private-key: ${{ secrets.MELOS_APP_PRIVATE_KEY }}
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
@@ -19,6 +25,7 @@ jobs:
       - uses: bluefireteam/melos-action@705015c3d2bc4ab94201ac24accb2bbe070cf533 # v3.6.0
         with:
           tag: true
+          token: ${{ steps.generate-token.outputs.token }}
       - run: |
           melos exec -c 1 --no-published --no-private --order-dependents -- \
           gh workflow run release-publish.yml \

From 6c5867f434bee6b554917f7af6db4d38e1dd0e06 Mon Sep 17 00:00:00 2001
From: Tom Ha <tomh@apadmi.com>
Date: Wed, 22 Apr 2026 10:32:12 +0100
Subject: [PATCH 2/2] ci: Add `workflow_dispatch` trigger to `release_tag`
 workflow

---
 .github/workflows/release-tag.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index c1c460c..2fe4328 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -2,6 +2,7 @@ name: Tag and start release
 on:
   push:
     branches: [develop]
+  workflow_dispatch:
 
 jobs:
   publish-packages: