Release SDK updates

.github/workflows/stlc-promote.yml

@@ -13,15 +13,27 @@ jobs:
     if: github.repository == 'run-llama/llamacloud-prod-java'
     env:
       PRODUCTION_REPO: run-llama/llama-parse-java
-      GH_TOKEN: ${{ secrets.PRODUCTION_REPO_TOKEN }}
     steps:
+      - name: Generate production-repo token (CI_BOT GitHub App)
+        id: prod-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.CI_BOT_APP_ID }}
+          private-key: ${{ secrets.CI_BOT_PRIVATE_KEY }}
+          owner: run-llama
+          repositories: llama-parse-java
+          permission-contents: write
+          permission-pull-requests: write
+
       - name: Check out staging
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: Fetch production main
+        env:
+          GH_TOKEN: ${{ steps.prod-token.outputs.token }}
         run: |
           git remote add production \
             "https://x-access-token:${GH_TOKEN}@github.com/${PRODUCTION_REPO}.git"
@@ -54,6 +66,8 @@ jobs:
 
       - name: Open or update the release PR on production
         if: steps.diff.outputs.synced == 'false'
+        env:
+          GH_TOKEN: ${{ steps.prod-token.outputs.token }}
         run: |
           EXISTING_PR=$(gh pr list \
             --repo "${PRODUCTION_REPO}" \

.github/workflows/stlc-sync-from-production.yml

@@ -21,16 +21,27 @@ jobs:
     if: github.repository == 'run-llama/llamacloud-prod-java'
     env:
       PRODUCTION_REPO: run-llama/llama-parse-java
-      PRODUCTION_REPO_TOKEN: ${{ secrets.PRODUCTION_REPO_TOKEN }}
       # The built-in token writes the branch + PR on this (staging) repo.
       GH_TOKEN: ${{ github.token }}
     steps:
+      - name: Generate production-repo token (CI_BOT GitHub App, read-only)
+        id: prod-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.CI_BOT_APP_ID }}
+          private-key: ${{ secrets.CI_BOT_PRIVATE_KEY }}
+          owner: run-llama
+          repositories: llama-parse-java
+          permission-contents: read
+
       - name: Check out staging
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Fetch production main
+        env:
+          PRODUCTION_REPO_TOKEN: ${{ steps.prod-token.outputs.token }}
         run: |
           git remote add production \
             "https://x-access-token:${PRODUCTION_REPO_TOKEN}@github.com/${PRODUCTION_REPO}.git"

README.md

@@ -3,7 +3,7 @@
 <!-- x-release-please-start-version -->
 
 [![Maven Central](https://img.shields.io/maven-central/v/ai.llamaindex.llamacloud/llama-cloud)](https://central.sonatype.com/artifact/ai.llamaindex.llamacloud/llama-cloud/1.3.0)
-[![javadoc](https://javadoc.io/badge2/ai.llamaindex.llamacloud/llama-cloud/1.3.0/javadoc.svg)](https://javadoc.io/doc/ai.llamaindex.llamacloud/llama-cloud/1.2.0)
+[![javadoc](https://javadoc.io/badge2/ai.llamaindex.llamacloud/llama-cloud/1.3.0/javadoc.svg)](https://javadoc.io/doc/ai.llamaindex.llamacloud/llama-cloud/1.3.0)
 
 <!-- x-release-please-end -->