sync dev and main

[andybeet]

PRs into dev contained all necessary info. They have already been approved.
Please provide the information below so main can be synced with dev:

List PRs

• PR build(#131): use app token to authenticate workflow #132 which fixes update workflow to use github app #131

Types of changes

What types of changes does this pull request introduce? Put an x in the boxes that apply.
This will inform the new release number.

• Fix (non-breaking change which fixes a bug)
• Feature (non-breaking change which adds or changes functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Other change (if none of the other choices apply)

Reviewer instructions

The underlying PRs should have been reviewed. Please check that the proposed merge is correct before approving.
If any checkboxes other than "Other change" have been selected please prepare the following file changes for a new release version:

• NEWS.md - add release notes
• DESCRIPTION - increment the version number according to Semantic Versioning

[BBeltz1]

passed review previously, good to merge