From 225aa83b210c8eda79592b70df64b63f621a2a2b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Tue, 17 Feb 2026 17:57:00 -0800
Subject: [PATCH] ci: use a github app for token generation

---
 .github/workflows/changesets-version.yml | 28 +++++++++---------------
 1 file changed, 10 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/changesets-version.yml b/.github/workflows/changesets-version.yml
index 6f0b512eb0..671380dbcb 100644
--- a/.github/workflows/changesets-version.yml
+++ b/.github/workflows/changesets-version.yml
@@ -11,11 +11,6 @@ jobs:
     name: Create Version Bump PR
     runs-on: ubuntu-latest
 
-    # Remove this once we setup react-native-sdk[bot] with this repo
-    permissions:
-      contents: write # for GH releases and Git tags (Changesets)
-      pull-requests: write # version PRs (Changesets)
-
     if: ${{ github.repository == 'microsoft/fluentui-react-native' }}
     steps:
       - name: Checkout
@@ -31,16 +26,15 @@ jobs:
       - name: Build packages
         run: yarn buildci
 
-      # Bring this back once we setup react-native-sdk[bot] with this repo
-      # - name: Generate token for version PR
-      #   uses: actions/create-github-app-token@v2
-      #   id: app-token
-      #   with:
-      #     app-id: ${{ vars.APP_ID }}
-      #     private-key: ${{ secrets.PRIVATE_KEY }}
-      #     permissions: |
-      #       contents: write
-      #       pull-requests: write
+      - name: Generate token for version PR
+        uses: actions/create-github-app-token@v2
+        id: app-token
+        with:
+          app-id: ${{ vars.APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+          permissions: |
+            contents: write
+            pull-requests: write
 
       - name: Create Version Bump PR
         id: changesets
@@ -49,6 +43,4 @@ jobs:
           version: yarn changeset:version
           createGithubReleases: false
         env:
-          # Switch token once we setup react-native-sdk[bot] with this repo
-          # GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}