Function pushWithToken

packages/bumpy/src/commands/ci.ts:699–719

* Push a branch to origin, optionally using a custom GitHub token. * * When `BUMPY_GH_TOKEN` is set, the remote URL is temporarily rewritten to * include the token. Pushes made with a PAT or GitHub App token bypass * GitHub's anti-recursion guard, allowing `pull_request` workflows to fire * on

(rootDir: string, branch: string, config: BumpyConfig)

 *   bumpy ci release --snapshot pr-${{ github.event.pull_request.number }}
 *
 * Re-running on a new commit republishes and floats the dist-tag (and the comment updates
 * in place). On forks the publish token and PR-comment token are unavailable — expected,
 * since snapshots target a registry only trusted contributors can publish to.
 */
async function ciSnapshotRelease(rootDir: string, opts: ReleaseOptions): Promise<void> {
  const { publishCommand } = await import('./publish.ts');
  const outcome = await publishCommand(rootDir, { snapshot: opts.snapshot, tag: opts.tag });
  if (!outcome || outcome.published.length === 0) return;

  const prNumber = detectPrNumber();
  if (!prNumber) {
    log.dim('  No PR detected — skipping snapshot install-instructions comment.');
    return;
  }
  const pm = await detectPackageManager(rootDir);
  const comment = formatSnapshotComment(outcome.snapshot, outcome.published, pm);
  await postOrUpdatePrComment(prNumber, comment, rootDir, SNAPSHOT_COMMENT_MARKER);
}

// ---- Token-aware push ----

/**
 * Push a branch to origin, optionally using a custom GitHub token.
 *