Remove use of --token for WinGet release

mdanish-kh · web-flow · commit 60b17bb2e9ca · 2025-06-25T13:39:11.000+05:00
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -867,15 +867,16 @@ jobs:
           .\wingetcreate.exe update Coder.Coder `
             --submit `
             --version "${version}" `
-            --urls "${amd64_installer_url}" "${amd64_zip_url}" "${arm64_zip_url}" `
-            --token "$env:WINGET_GH_TOKEN"
+            --urls "${amd64_installer_url}" "${amd64_zip_url}" "${arm64_zip_url}"
 
         env:
           # For gh CLI:
           GH_TOKEN: ${{ github.token }}
           # For wingetcreate. We need a real token since we're pushing a commit
           # to GitHub and then making a PR in a different repo.
-          WINGET_GH_TOKEN: ${{ secrets.CDRCI_GITHUB_TOKEN }}
+          # winget-create will read the following environment variable to access the GitHub token needed for submitting a PR
+          # See https://aka.ms/winget-create-token
+          WINGET_CREATE_GITHUB_TOKEN: ${{ secrets.CDRCI_GITHUB_TOKEN }}
 
       - name: Comment on PR
         run: |
