chore(main): release create-github-app-token 4.0.0 - #368

🤖 I have created a release beep boop

4.0.0 (2026-05-08)

⚠ BREAKING CHANGES

• Custom proxy handling has been removed. If you use HTTP_PROXY or HTTPS_PROXY, you must now also set NODE_USE_ENV_PROXY=1 on the action step.
• Requires Actions Runner v2.327.1 or later if you are using a self-hosted runner.
• Removed deprecated inputs (app_id, private_key, skip_token_revoke) and made app-id and private-key required in the action configuration.

Features

• github-api-url (#88) (837e275)
• private-key: escaped newlines will be replaced (#132) (9d23fb9)
• add client-id input and deprecate app-id (#353) (e6bd4e6)
• Add a skip_token_revoke input for configuring token revocation (#54) (9ec88c4)
• add GitHub Enterprise Server (GHES) support (#36) (ede6c15)
• add proxy support (#102) (1f82f7d)
• add retry (#79) (0f3b4d7)
• allow repositories input to be comma or newline-separated (#169) (796b88d)
• initial version (#1) (f456852)
• node 24 support (#275) (2e564a0)
• outputs: app-slug and installation-id (#105) (babaff4)
• permissions (#168) (0e0aa99)
• remove deprecated inputs (#213) (5cc811b)
• support tokens scoped to multiple repositories within organization (#46) (20fd863)
• update permission inputs (#296) (d90aa53)
• update permission inputs (#358) (076e948)
• use node20 as runner (#23) (803e078)
• use node24 as runner (#267) (a1cbe0f)
• use dash notation for inputs (deprecates underscore notation) (#59) (7b1d2ae)

Bug Fixes

• action-config: prepare for release to marketplace (#10) (12aa811)
• check for token before revoking (#30) (2540ed4)
• ci: release configuration (#6) (847634e)
• clarify owner input description (#118) (d9bc169)
• deps: bump @actions/core from 1.11.1 to 3.0.0 (#337) (b044133)
• deps: bump @octokit/auth-app from 7.2.1 to 8.0.1 (#257) (bef1eaf)
• deps: bump @octokit/endpoint from 10.1.1 to 10.1.3 (#207) (d30def8)
• deps: bump @octokit/request from 9.1.3 to 9.1.4 in the production-dependencies group (#196) (b4192a5)
• deps: bump @octokit/request from 9.2.0 to 9.2.2 (#209) (8cedd97)
• deps: bump @octokit/request from 9.2.3 to 10.0.2 (#256) (5d7307b)
• deps: bump @octokit/request-error from 6.1.6 to 6.1.7 (#208) (415f6a5)
• deps: bump dependencies(#84) (474769d)
• deps: bump glob from 10.4.5 to 10.5.0 (#305) (5480f43)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#335) (5cbc656)
• deps: bump p-retry from 6.2.1 to 7.1.0 (#294) (dce3be8)
• deps: bump p-retry from 7.1.1 to 8.0.0 (#357) (3bbe07d)
• deps: bump the production-dependencies group across 1 directory with 2 updates (#228) (2411bfc)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#166) (e177c20)
• deps: bump the production-dependencies group across 1 directory with 3 updates (#193) (fa6118c)
• deps: bump the production-dependencies group with 1 update (#68) (6375dce)
• deps: bump the production-dependencies group with 2 updates (#138) (8d81a59)
• deps: bump the production-dependencies group with 2 updates (#210) (1ff1dea)
• deps: bump the production-dependencies group with 2 updates (#292) (55e2a4b)
• deps: bump the production-dependencies group with 2 updates (#311) (b212e6a)
• deps: bump the production-dependencies group with 2 updates (#94) (323044f)
• deps: bump the production-dependencies group with 3 updates (#107) (f83fb27)
• deps: bump the production-dependencies group with 3 updates (#240) (d64d7d7)
• deps: bump the production-dependencies group with 3 updates (#51) (6d98b25)
• deps: bump undici from 5.28.4 to 7.5.0 (#214) (a24b46a)
• deps: bump undici from 6.18.2 to 6.19.2 in the production-dependencies group (#149) (cc82279)
• deps: bump undici from 6.6.0 to 6.6.1 (#103) (5195df7)
• deps: bump undici from 7.16.0 to 7.18.2 (#323) (b4f638f)
• deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#254) (f3d5ec2)
• deps: update [@octokit](https://github.com/octokit) packages to latest (#24) (b287cb8)
• do not revoke token if already expired (#147) (66a7045)
• GHES: respect GITHUB_API_URL when creating installation access token (#38) (c08c5ac)
• handle clock skew (#87) (495056a)
• improve error message when app identifier is empty (#362) (07e2b76)
• improve log messages for token creation (#226) (eaef294)
• mask the installation token in logs (#28) (bc256c2)
• permission input handling (#243) (2950cbc)
• README: fix name in usage examples (#12) (cb1fcdd)
• README: update action name (#5) (c08b794)
• README: update repository name, remove section for feature that is not yet implemented (#9) (c04bb41)
• README: use v2 in examples (#234) (9ba274d), closes #232
• release: build dist/ before release (#33) (9a6a017), closes #32
• release: update version in package.json (#35) (1dccc4c), closes #34
• remove custom proxy handling (#143) (dce0ab0)
• replace - with _ (#246) (3336784)
• require NODE_USE_ENV_PROXY for proxy support (#342) (4451bcb)
• revert "use node24 as runner" (#278) (5204204)
• revocation: avoid revoking expired tokens and fail gracefully (#95) (0c01407)
• use core.getBooleanInput() to retrieve boolean input values (#223) (c3c17c7)

This PR was generated with Release Please. See documentation.