ci(action, PVQ-5086): Moving from PAT into Github App for updating versions list.

Author: peterkral-pdfix

.github/workflows/maven-release.yml

@@ -91,14 +91,25 @@ jobs:
     - name: Prepare directory for versions repository
       run: mkdir -p pdfix-version-updates
 
-    - name: Checkout versions repository
-      uses: actions/checkout@v4
-      with:
-        repository: pdfix/pdfix-version-updates
-        path: pdfix-version-updates
-        token: ${{ secrets.PAT_VERSIONS }}
-        ref: main
-        fetch-depth: 0
+      - name: Generate GitHub App token
+        id: app-token
+        # v2.2.2 last stable version pinned by sha commit to avoid what happened to Lite LLM
+        uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349
+        with:
+          app-id: ${{ secrets.APP_ID }}
+          private-key: ${{ secrets.APP_PRIVATE_KEY }}
+          owner: pdfix
+          repositories: pdfix-version-updates
+
+      - name: Checkout versions repo
+        uses: actions/checkout@v4
+        with:
+          repository: pdfix/pdfix-version-updates
+          path: pdfix-version-updates
+          token: ${{ steps.app-token.outputs.token }}
+          ref: main
+          fetch-depth: 0
+          fetch-tags: true
 
     - name: Update versions repository with new version
       run: chmod +x update_versions_repository.sh && ./update_versions_repository.sh ${{ env.ACTION_NAMESPACE }} ${{ env.ACTION_REPOSITORY }} ${{ env.tag }}

update_versions_repository.sh

@@ -41,18 +41,28 @@ if jq -e --arg name "$DOCKER_NAME" '.["pdfix-actions"][] | select(.name == $name
     git push
 
     # Step 4: Tag latest commit with increment
+    git fetch --tags
     git pull
+
     if git describe --exact-match --tags HEAD > /dev/null 2>&1; then
         echo "HEAD already has a tag — skipping tagging."
     else
         LATEST_TAG=$(git tag -l "v*.*.*" | sort -V | tail -n 1)
-        echo "Latest tag is: $LATEST_TAG"
-        VERSION=${LATEST_TAG#v}
-        IFS='.' read -r MAJOR MINOR PATCH <<< "$VERSION"
-        PATCH=$((PATCH + 1))
-        NEW_TAG="v$MAJOR.$MINOR.$PATCH"
+
+        if [ -z "$LATEST_TAG" ]; then
+            echo "No existing tags found, starting from v0.0.1"
+            NEW_TAG="v0.0.1"
+        else
+            echo "Latest tag is: $LATEST_TAG"
+            VERSION=${LATEST_TAG#v}
+            IFS='.' read -r MAJOR MINOR PATCH <<< "$VERSION"
+            PATCH=$((PATCH + 1))
+            NEW_TAG="v$MAJOR.$MINOR.$PATCH"
+        fi
+
         git tag -a "$NEW_TAG" -m "Release $NEW_TAG"
         git push origin "$NEW_TAG"
+
         echo "Tagged HEAD with: $NEW_TAG"
     fi