Added
- GitHub App Authentication: Organizations can now use GitHub Apps for PR creation instead of individual personal access tokens
- Each organization creates their own GitHub App for centralized control
- Fine-grained permissions: only requires Contents (Read) and Pull requests (Read and write)
- No individual tokens needed - the App authenticates itself
- Centralized audit trail - all actions show as coming from the App
- Supports two private key formats:
- File path:
GITHUB_APP_PRIVATE_KEY_PATH=/path/to/key.pem - Base64-encoded:
GITHUB_APP_PRIVATE_KEY_BASE64=...(useful for CI/CD)
- File path:
- JWT-based authentication with automatic installation token caching
- Falls back gracefully if App is not installed on a repository
- Auto-detected Git author: Commits are automatically attributed to the GitHub App’s bot account (e.g.,
my-app[bot])
Changed
- Updated documentation across all markdown files with GitHub App setup instructions
GITHUB_TOKENtakes precedence over GitHub App credentials when both are configured