From bcddd6d872e6bfdaa40a52ce3d0f4da9ee1852b3 Mon Sep 17 00:00:00 2001
From: Nick Nisi <nick.nisi@workos.com>
Date: Mon, 18 May 2026 09:47:46 -0500
Subject: [PATCH 1/2] fix: don't format CHANGELOG.md

---
 .oxfmtrc.json | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.oxfmtrc.json b/.oxfmtrc.json
index 6e6af33..a0e1bd7 100644
--- a/.oxfmtrc.json
+++ b/.oxfmtrc.json
@@ -7,5 +7,10 @@
   "tabWidth": 2,
   "singleQuote": true,
   "printWidth": 80,
-  "ignorePatterns": ["pnpm-lock.yaml", "package-lock.json", "dist"]
+  "ignorePatterns": [
+    "pnpm-lock.yaml",
+    "package-lock.json",
+    "dist",
+    "CHANGELOG.md"
+  ]
 }

From 8a2908bc4d6dc4c932e94cceee44c879d3489e30 Mon Sep 17 00:00:00 2001
From: Nick Nisi <nick.nisi@workos.com>
Date: Mon, 18 May 2026 09:50:45 -0500
Subject: [PATCH 2/2] fix: drop GitHub App token, use GITHUB_TOKEN for
 release-please

The app token was cargo-culted from authkit-tanstack-start where it's
needed for cross-workflow triggers. With publishing inlined into this
same workflow, GITHUB_TOKEN is sufficient.
---
 .github/workflows/release-please.yml | 9 ---------
 1 file changed, 9 deletions(-)

diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml
index 9dbbf76..cf08482 100644
--- a/.github/workflows/release-please.yml
+++ b/.github/workflows/release-please.yml
@@ -19,17 +19,8 @@ jobs:
     outputs:
       release_created: ${{ steps.release.outputs.release_created }}
     steps:
-      - name: Generate token
-        id: generate-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3
-        with:
-          app-id: ${{ vars.SDK_BOT_APP_ID }}
-          private-key: ${{ secrets.SDK_BOT_PRIVATE_KEY }}
-
       - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5
         id: release
-        with:
-          token: ${{ steps.generate-token.outputs.token }}
 
   publish:
     needs: release-please