chore(deps): update actions/create-github-app-token action to v2.2.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	v2.2.1 → v2.2.2

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2.2.2

Compare Source

Bug Fixes

• deps: bump @​actions/core from 1.11.1 to 3.0.0 (#​337) (b044133)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#​335) (5cbc656)
• deps: bump the production-dependencies group with 4 updates (#​336) (6bda5bc)
• deps: bump undici from 7.16.0 to 7.18.2 (#​323) (b4f638f)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Based on the PR description, v2.2.2 contains only dependency updates and bug fixes:

• @actions/core upgraded from 1.11.1 to 3.0.0
• minimatch upgraded from 9.0.5 to 9.0.9
• undici upgraded from 7.16.0 to 7.18.2 (security-related)
• 4 production dependencies updated in a group
• No breaking changes or API modifications identified
• All changes are internal dependency updates without affecting the action's public interface

🎯 Impact Scope Investigation

• Single usage location: .github/workflows/release-please.yml:50 - Used in the release workflow for Homebrew tap management
• Specific purpose: Creates GitHub App token for accessing the homebrew-tap repository during releases
• Current configuration: Uses app-id, private-key, owner, repositories, and permission-contents parameters
• Token usage: Generated token is used by goreleaser for Homebrew Formula updates via TAP_GITHUB_TOKEN
• No impact on other dependencies: This is an isolated GitHub Action with no cascading effects

💡 Recommended Actions

• Immediate merge: This patch update can be merged safely without any code modifications
• No manual migration required: All existing parameters and functionality remain unchanged
• Monitor release workflow: First release after merge will validate the update works correctly
• No configuration changes needed: Current workflow configuration is fully compatible

🔗 Reference Links

• Release v2.2.2
• Commit comparison v2.2.1...v2.2.2

Generated by koki-develop/claude-renovate-review

---

🚫 Permission Denied Tool Executions

The following tool executions that Claude Code attempted were blocked due to insufficient permissions.
Consider adding them to allowed_tools if needed.

Run #24727090214 - 2 tools denied

Tool	Input
WebSearch	{"query":"actions/create-github-app-token v2.2.2 release notes changes"}
Bash	{"command":"gh api repos/actions/create-github-app-token/releases/tags/v2.2.2","description":"Get release notes for v2.2.2 via GitHub API"}

Generated by koki-develop/claude-denied-tools