Function pushWithToken

packages/bumpy/src/commands/ci.ts:699–719

* Push a branch to origin, optionally using a custom GitHub token. * * When `BUMPY_GH_TOKEN` is set, the remote URL is temporarily rewritten to * include the token. Pushes made with a PAT or GitHub App token bypass * GitHub's anti-recursion guard, allowing `pull_request` workflows to fire * on

(rootDir: string, branch: string, config: BumpyConfig)

 * but PR workflows won't be triggered automatically.
 */
function pushWithToken(rootDir: string, branch: string, config: BumpyConfig): void {
  // Guard against misconfigured versionPr.branch pointing at the base branch
  if (branch === config.baseBranch || branch === 'main' || branch === 'master') {
    throw new Error(`Refusing to force-push to "${branch}" — this looks like a base branch, not a version PR branch`);
  }

  withGitToken(rootDir, () => {
    // --no-verify skips pre-push hooks (e.g. bumpy check) which would fail
    // on the version branch since bump files are consumed during versioning
    runArgs(['git', 'push', '-u', 'origin', branch, '--force', '--no-verify'], { cwd: rootDir });
  });

  if (process.env.BUMPY_GH_TOKEN && process.env.GITHUB_REPOSITORY) {
    log.dim('  Pushed with custom token — PR workflows will be triggered');
  } else if (!process.env.BUMPY_GH_TOKEN && process.env.GITHUB_REPOSITORY) {
    // Only warn on GitHub Actions — other CI providers don't have this limitation
    log.warn(
      'BUMPY_GH_TOKEN is not set — PR checks will not trigger automatically.\n' + '  Run `bumpy ci setup` for help.',
    );
  }
}

// ---- version-pr mode ----