fix(ci): warn loudly when the Flatpak remote publish skips (#961)

The credential gate silently skipped the remote publish when
FLATPAK_GPG_PRIVATE_KEY / FLATPAK_REPO_TOKEN were unset, so the
documented auto-update remote could stay unpublished for releases at a
time (#951). Emit an Actions warning annotation and a run-summary entry
instead of a plain log line, and note in docs/FLATPAK_REMOTE.md that any
token with Contents write on the remote repo works.

Co-authored-by: Jatin K Malik <jatinkrmalik@gmail.com>
This commit is contained in:
devin-ai-integration[bot]
2026-10-16 09:20:44 -07:00
committed by GitHub
co-authored by Jatin K Malik
parent 0ddb127437
commit 08e3e397a5
2 changed files with 12 additions and 4 deletions
+3 -2
View File
@@ -52,8 +52,9 @@ prerelease tags, which never reach the remote.
Actions):
- `FLATPAK_GPG_PRIVATE_KEY` — the armored private key
- `FLATPAK_GPG_PASSPHRASE` — optional
- `FLATPAK_REPO_TOKEN` — fine-grained PAT scoped to
`VocaHQ/vocalinux-flatpak` with Contents: read and write
- `FLATPAK_REPO_TOKEN` — a token with Contents: read and write on
`VocaHQ/vocalinux-flatpak`. The fine-grained PAT scoped to just that
repo is the recommended minimum; a broader classic PAT works too.
5. **Variables (optional)** — same settings page, Variables tab:
- `FLATPAK_REMOTE_REPO` — publish target (default
`VocaHQ/vocalinux-flatpak`)