From 93f34d6f50050ded0365831a0c0ba391cbfc78b8 Mon Sep 17 00:00:00 2001
From: Eric Crosson <ericcrosson@bitgo.com>
Date: Wed, 10 Jun 2026 16:52:52 +0000
Subject: [PATCH 1/2] chore(root): replace deprecated app-id with client-id in
 audit-api-spec

Ticket: AI-254
---
 .github/workflows/audit-api-spec.yaml | 4 ++--
 commitlint.config.js                  | 1 +
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/audit-api-spec.yaml b/.github/workflows/audit-api-spec.yaml
index d7fac9193f..0c58bf40cf 100644
--- a/.github/workflows/audit-api-spec.yaml
+++ b/.github/workflows/audit-api-spec.yaml
@@ -234,9 +234,9 @@ jobs:
           EOF
       - name: Generate GitHub App Token
         id: generate-github-app-token
-        uses: actions/create-github-app-token@v2
+        uses: actions/create-github-app-token@v3
         with:
-          app-id: ${{ env.STATIC_ANALYSIS_BOT_APP_ID }}
+          client-id: ${{ env.STATIC_ANALYSIS_BOT_APP_ID }}
           private-key: ${{ secrets.STATIC_ANALYSIS_BOT_PRIVATE_KEY }}
           owner: bitgo
           repositories: |
diff --git a/commitlint.config.js b/commitlint.config.js
index d7817d01f8..d2b0352f2f 100644
--- a/commitlint.config.js
+++ b/commitlint.config.js
@@ -20,6 +20,7 @@ module.exports = {
   parserPreset: {
     parserOpts: {
       issuePrefixes: [
+        'AI-',
         'BG-',
         'BMF-',
         'BOS-',

From e2ce14e97c0a68c059583554b27bc33a475530a1 Mon Sep 17 00:00:00 2001
From: Eric Crosson <ericcrosson@bitgo.com>
Date: Thu, 11 Jun 2026 11:50:19 +0000
Subject: [PATCH 2/2] fix(ci): use Client ID (not App ID) for
 create-github-app-token

The create-github-app-token action deprecated app-id in favour of
client-id. These inputs accept different values: app-id takes the
numeric App ID (1819979), client-id takes the alphanumeric OAuth
Client ID (Iv23lipbCWzUuCxFerKJ).

Rename STATIC_ANALYSIS_BOT_APP_ID to STATIC_ANALYSIS_BOT_CLIENT_ID,
set value to Iv23lipbCWzUuCxFerKJ, rename app-id to client-id,
and upgrade action from v2 to v3.
Ref: BitGo/advanced-wallets#233

Ticket: AI-273
Session-Id: 4ea37ed2-bb6a-43da-848a-66a70262d221
Task-Id: 4523dbe1-5473-46a2-824f-14a84177962f
---
 .github/workflows/audit-api-spec.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/audit-api-spec.yaml b/.github/workflows/audit-api-spec.yaml
index 0c58bf40cf..d350b1e17c 100644
--- a/.github/workflows/audit-api-spec.yaml
+++ b/.github/workflows/audit-api-spec.yaml
@@ -7,7 +7,7 @@ on:
       - rel/**
 
 env:
-  STATIC_ANALYSIS_BOT_APP_ID: 1819979
+  STATIC_ANALYSIS_BOT_CLIENT_ID: Iv23lipbCWzUuCxFerKJ
 jobs:
   generate-head-api-spec:
     name: Generate head API spec
@@ -236,7 +236,7 @@ jobs:
         id: generate-github-app-token
         uses: actions/create-github-app-token@v3
         with:
-          client-id: ${{ env.STATIC_ANALYSIS_BOT_APP_ID }}
+          client-id: ${{ env.STATIC_ANALYSIS_BOT_CLIENT_ID }}
           private-key: ${{ secrets.STATIC_ANALYSIS_BOT_PRIVATE_KEY }}
           owner: bitgo
           repositories: |