From 5bac59a2e0afa2308dd69d5fcee5e9bb475cff7b Mon Sep 17 00:00:00 2001 From: Sowmya Viswanathan Date: Fri, 12 Jun 2026 14:58:10 -0700 Subject: [PATCH 1/2] fix(prerelease-setup): remove ${{ }} expression from github-token input description The github-token input description embedded the literal ${{ github.token }} as example prose. GitHub evaluates every ${{ }} expression in an action manifest, including input descriptions, and the 'github' context is not available there, so the manifest failed template validation: Unrecognized named-value: 'github' ... github.token Both prerelease consumer jobs (vCluster, AI Cloud) use this action as their first step, so they died at 'Set up job' before any step ran. Reword the example to plain text so it is not parsed as an expression. --- .github/actions/prerelease-setup/action.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/actions/prerelease-setup/action.yml b/.github/actions/prerelease-setup/action.yml index 1044973..9b960c8 100644 --- a/.github/actions/prerelease-setup/action.yml +++ b/.github/actions/prerelease-setup/action.yml @@ -6,7 +6,7 @@ inputs: description: 'AWS STS role-session-name. Each consumer job passes a distinct value (e.g. prerelease-vcluster-, prerelease-aicloud-).' required: true github-token: - description: 'GitHub token with contents:read on loft-sh/loft-enterprise. Required because the platform release resolvers call the GitHub API for a private repo; unauthenticated calls return 404. Pass ${{ github.token }} from a job whose permissions grant contents:read.' + description: 'GitHub token with contents:read on loft-sh/loft-enterprise. Required because the platform release resolvers call the GitHub API for a private repo; unauthenticated calls return 404. Pass the calling job''s github.token from a job whose permissions grant contents:read.' required: true standalone-vcluster-version: description: 'vCluster version to install for standalone (e.g. 0.34.0). Empty resolves to the latest GitHub release of loft-sh/vcluster.' From 0add841f942c8795c8061685a3a386f9a7544718 Mon Sep 17 00:00:00 2001 From: Sowmya Viswanathan Date: Fri, 12 Jun 2026 15:16:44 -0700 Subject: [PATCH 2/2] docs(prerelease-setup): regenerate README for github-token description make check-docs regenerates action READMEs from action.yml via auto-doc. The previous commit changed the github-token input description but did not regenerate the README, so check-docs reported drift. --- .github/actions/prerelease-setup/README.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/actions/prerelease-setup/README.md b/.github/actions/prerelease-setup/README.md index fb47160..8b17c43 100644 --- a/.github/actions/prerelease-setup/README.md +++ b/.github/actions/prerelease-setup/README.md @@ -39,14 +39,14 @@ provisioning (`aws-test-infra`) and the Ginkgo test execution -| INPUT | TYPE | REQUIRED | DEFAULT | DESCRIPTION | -|-------------------------------------|--------|----------|---------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| github-token | string | true | | GitHub token with contents:read on loft-sh/loft-enterprise.
Required because the platform release resolvers
call the GitHub API for a
private repo; unauthenticated calls return 404.
Pass ${{ github.token }} from a
job whose permissions grant contents:read. | -| platform-base-version | string | false | | Platform version for the initial install
(e.g. 4.9.0). Empty resolves to the latest
stable release of loft-sh/loft-enterprise. | -| platform-rc-version | string | false | | Platform RC version for upgrade (e.g. 4.10.0-alpha.6).
Empty resolves to the latest pre-release
of loft-sh/loft-enterprise. | -| role-session-name | string | true | | AWS STS role-session-name. Each consumer job
passes a distinct value (e.g. prerelease-vcluster-, prerelease-aicloud-). | -| standalone-vcluster-upgrade-version | string | false | | vCluster version to upgrade standalone to
(e.g. 0.35.0-alpha.7). Empty resolves to the latest
vCluster pre-release. Must differ from the
resolved base version. | -| standalone-vcluster-version | string | false | | vCluster version to install for standalone
(e.g. 0.34.0). Empty resolves to the latest
GitHub release of loft-sh/vcluster. | +| INPUT | TYPE | REQUIRED | DEFAULT | DESCRIPTION | +|-------------------------------------|--------|----------|---------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| github-token | string | true | | GitHub token with contents:read on loft-sh/loft-enterprise.
Required because the platform release resolvers
call the GitHub API for a
private repo; unauthenticated calls return 404.
Pass the calling job's github.token from
a job whose permissions grant contents:read. | +| platform-base-version | string | false | | Platform version for the initial install
(e.g. 4.9.0). Empty resolves to the latest
stable release of loft-sh/loft-enterprise. | +| platform-rc-version | string | false | | Platform RC version for upgrade (e.g. 4.10.0-alpha.6).
Empty resolves to the latest pre-release
of loft-sh/loft-enterprise. | +| role-session-name | string | true | | AWS STS role-session-name. Each consumer job
passes a distinct value (e.g. prerelease-vcluster-, prerelease-aicloud-). | +| standalone-vcluster-upgrade-version | string | false | | vCluster version to upgrade standalone to
(e.g. 0.35.0-alpha.7). Empty resolves to the latest
vCluster pre-release. Must differ from the
resolved base version. | +| standalone-vcluster-version | string | false | | vCluster version to install for standalone
(e.g. 0.34.0). Empty resolves to the latest
GitHub release of loft-sh/vcluster. |