ci: actions/create-github-app-token -> v3

[matthewelwell]

Thanks for submitting a PR! Please check the boxes below:

• I have read the Contributing Guide.
• I have added information to docs/ if required so people know about the feature.
• I have filled in the "Changes" section below.
• I have filled in the "How did you test this code" section below.

Changes

Updates actions/create-github-app-token to v3 to resolve current failures in our CI workflows based on Node 20 usage.

How did you test this code?

CI against this PR should prove if it's successful or not.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated
docs	Ignored	Preview	Sep 2, 2026 2:31pm UTC
flagsmith-frontend-preview	Ignored	Preview	Sep 2, 2026 2:31pm UTC
flagsmith-frontend-staging	Ignored	Preview	Sep 2, 2026 2:31pm UTC

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Team

Run ID: 5701252f-21f2-4d29-937a-923b042fb46b

📥 Commits

Reviewing files that changed from the base of the PR and between 69d5ecb and edefa78.

📒 Files selected for processing (1)

• .github/workflows/api-fix-docs-artefacts.yml

Included review availability: Your plan provides up to 8 included reviews per hour; 6 remain after this review.

---

📝 Walkthrough

Walkthrough

The workflow pins actions/create-github-app-token to a commit. It replaces app-id with client-id and adds permission-contents: write. The private key input and token usage remain unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to edefa

This CI-only change updates the token action and explicitly requests the write permission needed for the workflow’s existing documentation push. It does not alter product behavior or deployment paths, so no actionable merge-blocking risk remains after normal checks and review.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-api-test:pr-8240	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-e2e:pr-8240	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-api:pr-8240	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-8240	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-8240	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-frontend:pr-8240	Finished ✅	Results ✅

[coderabbitai]

Actionable comments posted: 2

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: f4e8f758-6523-4044-b3a3-b3d01a998c91

📥 Commits

Reviewing files that changed from the base of the PR and between 124dc1a and c5ae6fb.

📒 Files selected for processing (1)

• .github/workflows/api-fix-docs-artefacts.yml

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.81%. Comparing base (1d5b043) to head (edefa78).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8240   +/-   ##
=======================================
  Coverage   98.81%   98.81%           
=======================================
  Files        1621     1621           
  Lines       66128    66128           
=======================================
  Hits        65344    65344           
  Misses        784      784           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #20069 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 2 passed

Details

 2 tests across 2 suites
 1 minute, 12 seconds
 edefa78
 🔄 Run: #20069 (attempt 1)

🗂️ Previous results

✅ private-cloud · depot-ubuntu-latest-16 — run #20069 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 4 passed

Details

 4 tests across 4 suites
 33.1 seconds
 edefa78
 🔄 Run: #20069 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #20069 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 41.8 seconds
 edefa78
 🔄 Run: #20069 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #20069 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 34.2 seconds
 edefa78
 🔄 Run: #20069 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #20068 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 5 passed

Details

 5 tests across 4 suites
 43.1 seconds
 69d5ecb
 🔄 Run: #20068 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #20068 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 3 passed

Details

 3 tests across 3 suites
 41.9 seconds
 69d5ecb
 🔄 Run: #20068 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #20068 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 49.1 seconds
 69d5ecb
 🔄 Run: #20068 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #20068 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 33.7 seconds
 69d5ecb
 🔄 Run: #20068 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #19101 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 2 passed

Details

 2 tests across 2 suites
 37.5 seconds
 c5ae6fb
 🔄 Run: #19101 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #19101 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 36.9 seconds
 c5ae6fb
 🔄 Run: #19101 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #19101 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 3 passed

Details

 3 tests across 3 suites
 32.4 seconds
 c5ae6fb
 🔄 Run: #19101 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #19101 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 33.7 seconds
 c5ae6fb
 🔄 Run: #19101 (attempt 1)

[github-actions]

Visual Regression

19 screenshots compared. See report for details.
View full report

[coderabbitai]

Note

GitHub couldn't provide a complete incremental comparison for this pull request, so CodeRabbit is performing a full review instead. This review may take a little longer.