Skip to content

Release 2.0.32 (2026-05-22)

Bug fixes

  • pass app secrets to github-config audit The ops-github-config reusable workflow now requires a GitHub App token because the Actions permissions API needs administration:read, which is not available on GITHUB_TOKEN.

Chores

  • bump version to 2.0.32

Documentation

  • note personal account installation requirement The App must be installed on personal accounts too, not just organizations, for the dynamic per-org token resolution to work with personal repositories.

Refactoring

  • drop installation_id from identities.toml Remove installation_id from the Identity dataclass and all plan documents. Installation IDs will be resolved dynamically at runtime by the wrapper scripts via GET /app/installations (Plan 5).

Rewrite the account setup guide to document the GitHub App registration workflow based on the actual steps performed during initial setup.

  • dynamic per-org installation token resolution Replace static installation_id lookup with dynamic per-org token resolution. _detect_org() reads the GitHub org from git remote, _resolve_installations() discovers installation IDs via the App API, and get_installation_token() caches tokens per-org with 55-min TTL.