chore(deps): update actions/create-github-app-token action to v2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	major	v1 → v2

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Overview

Greptile Summary

This PR updates the GitHub Actions workflow dependency actions/create-github-app-token from v1 to v2 in both the release.yml and version-bump.yml workflows. The token output is still consumed in the same way (passed to actions/checkout / action-gh-release / create-pull-request), so the change is isolated to the action version bump and does not alter the surrounding workflow logic.

Confidence Score: 5/5

• This PR is safe to merge with minimal risk.
• The change is a straightforward version bump of a third-party GitHub Action in two workflows, with no changes to inputs/outputs usage in the workflows themselves and no impact on runtime library code.
• No files require special attention

Important Files Changed

Filename	Overview
.github/workflows/release.yml	Bumps actions/create-github-app-token from v1 to v2 in the release workflow; no other logic changes.
.github/workflows/version-bump.yml	Bumps actions/create-github-app-token from v1 to v2 in the version-bump workflow; no other logic changes.

Sequence Diagram

sequenceDiagram
  participant GitHub as GitHub Actions Runner
  participant TokenAction as actions/create-github-app-token@v2
  participant Checkout as actions/checkout@v4
  participant Release as softprops/action-gh-release@v2
  participant UV as uv
  participant PyPI as PyPI
  
  Note over GitHub: .github/workflows/release.yml
  GitHub->>TokenAction: Generate GitHub App token
  TokenAction-->>GitHub: token output
  GitHub->>Checkout: Checkout repo (token)
  GitHub->>GitHub: Read version from pyproject.toml
  GitHub->>Release: Create GitHub Release (token)
  GitHub->>Checkout: Checkout repo (publish job)
  GitHub->>UV: uv build
  GitHub->>PyPI: uv publish (OIDC)

  Note over GitHub: .github/workflows/version-bump.yml
  GitHub->>TokenAction: Generate GitHub App token
  TokenAction-->>GitHub: token output
  GitHub->>Checkout: Checkout repo (token)
  GitHub->>GitHub: Compute new version
  GitHub->>UV: uv lock
  GitHub->>GitHub: Create PR (peter-evans/create-pull-request)

Loading

[greptile-apps]

_{2 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

[gcarvelli]

Should be fine. The major version bump was to remove deprecated snake_case params in favor of the kebab case ones we're already using