Publishing from GitHub Actions started to fail with authentication error

[CatChen]

It used to work but then it became flaky. Now it always fails. Here's an example of the GitHub Actions job:

https://github.com/CatChen/versioned-storage/actions/runs/14183910750/job/39735614113

Here is the printout in case the log is purged in the future:

Check file:///home/runner/work/versioned-storage/versioned-storage/src/Storage.ts
Checking for slow types in the public API...
Check file:///home/runner/work/versioned-storage/versioned-storage/src/Storage.ts
Publishing @catchen/versioned-storage@3.1.16-3 ...
error: Failed to publish @catchen/versioned-storage@3.1.16-3

Caused by:
    0: Failed to publish @catchen/versioned-storage at 3.1.[16](https://github.com/CatChen/versioned-storage/actions/runs/14183910750/job/39735614113#step:6:17)-3
    1: The actor that this request was authenticated for is not authorized as a scope member for this scope. (actorNotScopeMember)[x-deno-ray: fb7648b4625cdfbf08d94f10a6e0f21a]

Here's a screenshot of the repo being linked in the package settings. I already tried unlinking and relinking. It doesn't fix the issue.

[BlackAsLight]

Looking at the error message 1: The actor that this request was authenticated for is not authorized as a scope member for this scope. (actorNotScopeMember)[x-deno-ray: fb7648b4625cdfbf08d94f10a6e0f21a]

That is most likely preferring to the scope level setting that can be found here on GitHub Actions: https://jsr.io/@catchen/~/settings.

I'd imagine the problem is because a bot (check-git-status-bot) is triggering these GitHub Actions and it itself doesn't have permission to publish to JSR due to not being a scope member.

[lucacasonato]

https://jsr.io/docs/troubleshooting#actornotscopemember

[CatChen]

@BlackAsLight Thank you. I managed to trigger the same workflow as myself and the publishing works. There's no way to add a bot to a JSR scope, right?

[BlackAsLight]

@BlackAsLight Thank you. I managed to trigger the same workflow as myself and the publishing works. There's no way to add a bot to a JSR scope, right?

I don't believe so, but if you're adamant about letting the bot publish then I'd suggest just lowering the security on JSR.

[CatChen]

Thank you. I'll stick with using my GitHub user for now.