ci: ensure the auto-created release-please action runs CI

[lumirlumir]

Prerequisites checklist

• I have read the contributing guidelines.

What is the purpose of this pull request?

This PR follows up on eslint/css#330.

In this PR, I've ensured the auto-created release-please action triggers CI.

Problem

Currently, the auto-created PR from the release-please action does not trigger CI, as shown below:

For example: eslint/rewrite#336

This can result in CI not running and may lead to issues like eslint/rewrite#308 if the check is missing.

Solution

I've used secrets.WORKFLOW_PUSH_BOT_TOKEN instead of the default secrets.GITHUB_TOKEN, following the same approach described in eslint/css#330.

Also, the permissions for contents and pull_requests is no longer necessary because secrets.WORKFLOW_PUSH_BOT_TOKEN already grants the required permissions, so I removed it.

FYI: the token input reference: https://github.com/googleapis/release-please-action?tab=readme-ov-file#action-inputs

Test

I've tested it in my forked repository (using rewrite repository), and it works as expected:

lumirlumir/fork-rewrite#9

• Before: CI wasn't running

• After: CI is running

What changes did you make? (Give an overview)

This PR follows up on eslint/css#330.

In this PR, I've ensured the auto-created release-please action triggers CI.

Related Issues

Ref: eslint/css#330

Is there anything you'd like reviewers to focus on?

N/A

[Copilot]

Pull request overview

This PR updates the release-please workflow to ensure that auto-created release PRs trigger CI checks. The change follows a similar fix implemented in the eslint/css repository, addressing an issue where release PRs could be merged without proper CI validation.

Key Changes:

• Replaces secrets.GITHUB_TOKEN with secrets.WORKFLOW_PUSH_BOT_TOKEN in the release-please action
• Removes contents: write and pull-requests: write permissions (now redundant as the bot token already has these)

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.