From 1712dff77009260a752726690b9bca44c7cbae4a Mon Sep 17 00:00:00 2001
From: Jan Calanog <jan.calanog@elastic.co>
Date: Tue, 27 Aug 2024 13:53:30 +0200
Subject: [PATCH 1/2] Use obltmachine for tagging in the release workflow

---
 .github/workflows/release.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5579b810..cd1d2997 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -27,7 +27,11 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - uses: elastic/apm-pipeline-library/.github/actions/setup-git@current
+          token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
+
+      - uses: elastic/oblt-actions/git/setup@v1
+        with:
+          github-token: ${{ secrets.RELEASE_GITHUB_TOKEN }}
       - run: npm ci # runs npm prepublish
 
       - name: configure NPMJS token

From 31ecfd89d25b94560391fc4f8b78202b6cfa8254 Mon Sep 17 00:00:00 2001
From: Jan Calanog <jan.calanog@elastic.co>
Date: Tue, 27 Aug 2024 13:56:24 +0200
Subject: [PATCH 2/2] Add missing places where we need to use the PAT

---
 .github/workflows/release.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index cd1d2997..a514bb5b 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -15,7 +15,6 @@ on:
         default: false
 
 permissions:
-  contents: write # needed to push the tag and create the release
   id-token: write # to enable use of OIDC for npm provenance
 
 jobs:
@@ -40,7 +39,7 @@ jobs:
       - run: npx semantic-release --dry-run="${DRY_RUN}"
         env:
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-          GITHUB_TOKEN: ${{ github.token }}
+          GITHUB_TOKEN: ${{ secrets.RELEASE_GITHUB_TOKEN }}
 
       - name: Get version and package name
         run: |