Creating a release (with file upload) on another repo just broke

[ospfranco]

Hi, we have a complex build pipeline. Were we need to build a core package and then create releases on multiple sub repos (in the same org) using the artifacts from the core package. We were using this action with PAT that had the correct permissions.

Suddenly our build pipeline started failing and I'm now getting the following error:

Run softprops/action-gh-release@v2.2.2
👩‍🏭 Creating new GitHub release for tag 5.6.5...
⚠️ GitHub release failed with status: 403
{"message":"Resource not accessible by integration","documentation_url":"https://docs.github.com/rest/releases/releases#create-a-release","status":"403"}
Skip retry — your GitHub token/PAT does not have the required permission to create a release
⚠️ Unexpected error fetching GitHub release for tag refs/tags/5.6.5: HttpError: Resource not accessible by integration - https://docs.github.com/rest/releases/releases#create-a-release
Error: Resource not accessible by integration - https://docs.github.com/rest/releases/releases#create-a-release

I tried creating a fine-grained token in case this was a problem with the tokens being deprecated but still get the same error. Even if the permissions are set to content:write on the org level.

Any ideas if this broke accidentally or if this is an intentional change on Github?

[ospfranco]

I was using a PAT to authenticate to another repo in the same org. Turns out the problem is this action reads the GITHUB_TOKEN first before any passed token. This line

2bdaa59

Needs to be changed