Merge pull request #138 from newrelic/update-release

fix: update release workflow to latest version used by pathpoint

Author: amit-y

.github/workflows/release.yml

@@ -109,53 +109,13 @@ jobs:
             echo "No change in package.json, not regenerating third-party notices"
           fi
 
-      - name: Temporarily disable "required_pull_request_reviews" branch protection
-        id: disable-branch-protection
-        if: always()
-        uses: actions/github-script@v1
-        with:
-          github-token: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
-          previews: luke-cage-preview
-          script: |
-            const result = await github.repos.updateBranchProtection({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              branch: 'main',
-              required_status_checks: null,
-              restrictions: null,
-              enforce_admins: null,
-              required_pull_request_reviews: null
-            })
-            console.log("Result:", result)
-
       - name: Push Commit
         if: steps.generate-notices.outputs.commit == 'true'
         uses: ad-m/github-push-action@v0.6.0
         with:
           github_token: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
           branch: main
 
-      - name: Re-enable "required_pull_request_reviews" branch protection
-        id: enable-branch-protection
-        if: always()
-        uses: actions/github-script@v1
-        with:
-          github-token: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
-          previews: luke-cage-preview
-          script: |
-            const result = await github.repos.updateBranchProtection({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              branch: 'main',
-              required_status_checks: null,
-              restrictions: null,
-              enforce_admins: null,
-              required_pull_request_reviews: {
-                required_approving_review_count: 1
-              }
-            })
-            console.log("Result:", result)
-
   job-generate-release:
     runs-on: ubuntu-latest
     needs: [job-checkout-and-build, job-generate-third-party-notices]
@@ -166,6 +126,7 @@ jobs:
         uses: actions/checkout@v2
         with:
           ref: main
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v1
@@ -175,25 +136,6 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Temporarily disable "required_pull_request_reviews" branch protection
-        id: disable-branch-protection
-        if: always()
-        uses: actions/github-script@v1
-        with:
-          github-token: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
-          previews: luke-cage-preview
-          script: |
-            const result = await github.repos.updateBranchProtection({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              branch: 'main',
-              required_status_checks: null,
-              restrictions: null,
-              enforce_admins: null,
-              required_pull_request_reviews: null
-            })
-            console.log("Result:", result)
-
       - name: Run semantic-release
         env:
           # Use nr-opensource-bot for authoring commits done by
@@ -202,26 +144,5 @@ jobs:
           GIT_AUTHOR_EMAIL: "opensource+bot@newrelic.com"
           GIT_COMMITTER_NAME: "nr-opensource-bot"
           GIT_COMMITTER_EMAIL: "opensource+bot@newrelic.com"
-          GITHUB_TOKEN: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
+          GH_TOKEN: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
         run: npx semantic-release@^18.0.0
-
-      - name: Re-enable "required_pull_request_reviews" branch protection
-        id: enable-branch-protection
-        if: always()
-        uses: actions/github-script@v1
-        with:
-          github-token: ${{ secrets.OPENSOURCE_BOT_TOKEN }}
-          previews: luke-cage-preview
-          script: |
-            const result = await github.repos.updateBranchProtection({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              branch: 'main',
-              required_status_checks: null,
-              restrictions: null,
-              enforce_admins: null,
-              required_pull_request_reviews: {
-                required_approving_review_count: 1
-              }
-            })
-            console.log("Result:", result)