fix: Enhance bump-patch workflow with token generation and improved Git configuration for version bumping through a GitHub App

Author: madMathematician971

.github/workflows/bump-patch.yml

@@ -9,10 +9,20 @@ jobs:
   bump-patch:
     name: Bump patch version (Poetry)
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     steps:
+      - name: Generate token
+        id: generate_token
+        uses: actions/create-github-app-token@v1
+        with:
+          app_id: ${{ secrets.VERSION_BUMP_APP_ID }}
+          private_key: ${{ secrets.VERSION_BUMP_APP_TOKEN }}
+
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ steps.generate_token.outputs.token }}
 
       - name: Install uv
         run: curl -LsSf https://astral.sh/uv/install.sh | sh
@@ -27,10 +37,15 @@ jobs:
           echo "VERSION=$(uv run --no-sync poetry version -s)" >> $GITHUB_OUTPUT
 
       - name: Commit & push changes
+        env:
+          GH_TOKEN: ${{ steps.generate_token.outputs.token }}
         run: |
-          git config user.name "github-actions"
-          git config user.email "actions@github.com"
+          git config user.name "${{ secrets.VERSION_BUMP_APP_ID }}[bot]"
+          git config user.email "${{ secrets.VERSION_BUMP_APP_ID }}[bot]@users.noreply.github.com"
+
           git add pyproject.toml
           git commit -m "ci: bump patch version to v${{ steps.bump_version.outputs.VERSION }} [skip ci]" || echo "No changes"
           git tag v${{ steps.bump_version.outputs.VERSION }} || echo "Tag exists"
+
+          git remote set-url origin "https://x-access-token:${GH_TOKEN}@github.com/${{ github.repository }}.git"
           git push origin HEAD:develop --follow-tags

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "it-tools-api"
-version = "0.1.0"
+version = "0.1.1"
 description = "API for IT Tools"
 authors = [
     { name = "Anton Dmytrenko", email = "48_decorum.row@icloud.com" },