From 3ae55c253174fd4b6b252f83dd9c0f72b02bc20b Mon Sep 17 00:00:00 2001
From: manjeet-fetchai <75420735+manjeet-fetchai@users.noreply.github.com>
Date: Mon, 6 Jul 2026 21:09:49 +0530
Subject: [PATCH 1/4] chore: migrate .github/workflows/deploy-staging.yml from
 PAT to GitHub App auth

---
 .github/workflows/deploy-staging.yml | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml
index 8368dc04f..d38401c2a 100644
--- a/.github/workflows/deploy-staging.yml
+++ b/.github/workflows/deploy-staging.yml
@@ -46,10 +46,19 @@ jobs:
           NEWSLETTER_BASE_URL: ${{ secrets.NEWSLETTER_BASE_URL }}
           SENDER_TOKEN: ${{ secrets.SENDER_TOKEN }}
 
+      - name: Generate GitHub App token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.FETCHAI_DISPATCH_APP_ID }}
+          private-key: ${{ secrets.FETCHAI_DISPATCH_APP_KEY }}
+          repositories: infra-sandbox-london-b-deployment
+
       - name: Repository Dispatch
         run: |
           curl -f -H "Accept: application/vnd.github.everest-preview+json" \
-          -H "Authorization: token ${{ secrets.ORG_DISPATCH_RENDER_TOKEN }}" \
+          -H "Authorization: token ${{ steps.app-token.outputs.token }}" \
           --request POST \
           --data '{"event_type": "docs-staging-build", "client_payload": {"image": "'"${{ secrets.STAGING_IMAGE_REPOSITORY }}"'" , "image_path": "values", "key_path": ".website.image.tag", "commit_message_service": "Docs Staging", "tag": "'"${{ steps.lookup.outputs.version }}"'"}}' \
           https://api.github.com/repos/fetchai/infra-sandbox-london-b-deployment/dispatches
+

From b91ccad3678cea530dc7acf79dde0c68a6d49d60 Mon Sep 17 00:00:00 2001
From: manjeet-fetchai <75420735+manjeet-fetchai@users.noreply.github.com>
Date: Mon, 6 Jul 2026 21:09:52 +0530
Subject: [PATCH 2/4] chore: migrate
 .github/workflows/deploy-staging-revamp.yml from PAT to GitHub App auth

---
 .github/workflows/deploy-staging-revamp.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-staging-revamp.yml b/.github/workflows/deploy-staging-revamp.yml
index 4049a769c..ccdb76a62 100644
--- a/.github/workflows/deploy-staging-revamp.yml
+++ b/.github/workflows/deploy-staging-revamp.yml
@@ -46,10 +46,18 @@ jobs:
           NEWSLETTER_BASE_URL: ${{ secrets.NEWSLETTER_BASE_URL }}
           SENDER_TOKEN: ${{ secrets.SENDER_TOKEN }}
 
+      - name: Generate GitHub App token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.FETCHAI_DISPATCH_APP_ID }}
+          private-key: ${{ secrets.FETCHAI_DISPATCH_APP_KEY }}
+          repositories: infra-sandbox-london-b-deployment
+
       - name: Repository Dispatch
         run: |
           curl -f -H "Accept: application/vnd.github.everest-preview+json" \
-          -H "Authorization: token ${{ secrets.ORG_DISPATCH_RENDER_TOKEN }}" \
+          -H "Authorization: token ${{ steps.app-token.outputs.token }}" \
           --request POST \
           --data '{"event_type": "docs-revamp-staging-build", "client_payload": {"image": "'"${{ secrets.IMAGE_REVAMP_REPOSITORY }}"'" , "image_path": "values", "key_path": ".image.tag", "commit_message_service": "Docs Revamp Staging", "tag": "'"${{ steps.lookup.outputs.version }}"'"}}' \
           https://api.github.com/repos/fetchai/infra-sandbox-london-b-deployment/dispatches

From e17c8af7b0d548bf578a9b8fe82afe3d9e826eae Mon Sep 17 00:00:00 2001
From: manjeet-fetchai <75420735+manjeet-fetchai@users.noreply.github.com>
Date: Mon, 6 Jul 2026 21:09:55 +0530
Subject: [PATCH 3/4] chore: migrate .github/workflows/deploy-production.yml
 from PAT to GitHub App auth

---
 .github/workflows/deploy-production.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml
index de292052a..17b4a05e8 100644
--- a/.github/workflows/deploy-production.yml
+++ b/.github/workflows/deploy-production.yml
@@ -46,10 +46,18 @@ jobs:
           NEWSLETTER_BASE_URL: ${{ secrets.NEWSLETTER_BASE_URL }}
           SENDER_TOKEN: ${{ secrets.SENDER_TOKEN }}
 
+      - name: Generate GitHub App token
+        uses: actions/create-github-app-token@v1
+        id: app-token
+        with:
+          app-id: ${{ secrets.FETCHAI_DISPATCH_APP_ID }}
+          private-key: ${{ secrets.FETCHAI_DISPATCH_APP_KEY }}
+          repositories: infra-production-deployment
+
       - name: Trigger Image Update
         run: |
           curl -H "Accept: application/vnd.github.everest-preview+json" \
-          -H "Authorization: token ${{ secrets.ORG_DISPATCH_RENDER_TOKEN }}" \
+          -H "Authorization: token ${{ steps.app-token.outputs.token }}" \
           --request POST \
           --data '{"event_type": "docs-build", "client_payload": {"image": "${{ env.IMAGE }}", "image_path": "${{ env.IMAGE_PATH }}", "key_path": "${{ env.KEY_PATH }}", "tag": "${{ env.TAG }}", "commit_message_service": "${{ env.SERVICE_NAME }}"}}' \
           ${{ env.TARGET_REPO }}

From 9a8ca629e1619ef00ab38bf0eeb401784a84785b Mon Sep 17 00:00:00 2001
From: manjeet-fetchai <75420735+manjeet-fetchai@users.noreply.github.com>
Date: Mon, 6 Jul 2026 21:24:52 +0530
Subject: [PATCH 4/4] fix: remove trailing blank line from deploy-staging.yml
 (prettier)

---
 .github/workflows/deploy-staging.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml
index d38401c2a..0f9c7f822 100644
--- a/.github/workflows/deploy-staging.yml
+++ b/.github/workflows/deploy-staging.yml
@@ -61,4 +61,3 @@ jobs:
           --request POST \
           --data '{"event_type": "docs-staging-build", "client_payload": {"image": "'"${{ secrets.STAGING_IMAGE_REPOSITORY }}"'" , "image_path": "values", "key_path": ".website.image.tag", "commit_message_service": "Docs Staging", "tag": "'"${{ steps.lookup.outputs.version }}"'"}}' \
           https://api.github.com/repos/fetchai/infra-sandbox-london-b-deployment/dispatches
-