From 333678481b1f02ee31fa1443aba4f1f7cb5b08b5 Mon Sep 17 00:00:00 2001
From: Omochice <44566328+Omochice@users.noreply.github.com>
Date: Sun, 4 May 2025 06:58:01 +0900
Subject: [PATCH 1/2] fix: replace `-` with `_` (#246)

---
 lib/get-permissions-from-inputs.js |   3 ++-
 tests/snapshots/index.js.md        |   2 +-
 tests/snapshots/index.js.snap      | Bin 1392 -> 1388 bytes
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/lib/get-permissions-from-inputs.js b/lib/get-permissions-from-inputs.js
index 7777d94..7d01023 100644
--- a/lib/get-permissions-from-inputs.js
+++ b/lib/get-permissions-from-inputs.js
@@ -10,7 +10,8 @@ export function getPermissionsFromInputs(env) {
     if (!key.startsWith("INPUT_PERMISSION-")) return permissions;
     if (!value) return permissions;
 
-    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase();
+    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase()
+      .replaceAll(/-/g, "_");
 
     // Inherit app permissions if no permissions inputs are set
     if (permissions === undefined) {
diff --git a/tests/snapshots/index.js.md b/tests/snapshots/index.js.md
index 55b25ba..e419536 100644
--- a/tests/snapshots/index.js.md
+++ b/tests/snapshots/index.js.md
@@ -331,7 +331,7 @@ Generated by [AVA](https://avajs.dev).
     --- REQUESTS ---␊
     GET /repos/actions/create-github-app-token/installation␊
     POST /app/installations/123456/access_tokens␊
-    {"repositories":["create-github-app-token"],"permissions":{"issues":"write","pull-requests":"read"}}`
+    {"repositories":["create-github-app-token"],"permissions":{"issues":"write","pull_requests":"read"}}`
 
 ## post-revoke-token-fail-response.test.js
 
diff --git a/tests/snapshots/index.js.snap b/tests/snapshots/index.js.snap
index 0b63dabc7db6f383c4adb398cbab95a6b6bd508f..773f4b18b4e1aa064fd7944d242c0276c527e30b 100644
GIT binary patch
literal 1388
zcmV-y1(W(gRzV<BZeeh9Xm4~Nb~6eC044Y#Q)m(i!TlGu*J4>@o0`5|6xdj==`ve%
znh@Rir5}q300000000B+TG4JBMHEef5RwrRydgj^S|M!;89R1D(u@ist<p3PG$lzz
z(yEHayVv&M^~^GJ*REAnNJ#tu;s@G4;0yQzK7&8tjR!QdPQ2UNPMdAos;r;v^~{|!
z_nvcRXJ;R^nvn{+=J&^d0wcIjcz{Al8bYig;0PfVGEUG`5e!y;G{Q(8n~p;B%i}QQ
z$iI7Q?wvXNnSXokgE@$J6QY*E5VW4%KqYuGs@LN}(jYOYdbBODlQb!h1x<8x{&9~M
ze$6&n=r8QJnGjzMBxs*-84_PZtc*aV1sI=j4a5Le$u$ieg=`a4U67=uG{Fv#mWm=Z
zu-CKwScSMxg^to^YJu$!<GIAt1*$N{!;tp4=`z;tnB)4|wRKo+TyJbNg0+o$V{3iA
zz8qX$xxBKvz6tg9%U4%<rNWp2q$<HUK_Yn%zIM@yg%Hvpk0S2sEkefXjg{4})+RNz
z_)V0w89SL!I!)V@_kkMZ2<HR#bOg8`3k_xy8EY)p*XZ&(t=A744OU-e_2oMiN-5df
z`u_IT{=q(>lvcL44oHp1qSjxjxw6#Gs6s6}^~$Z?{c(RD$GLw^EzL@e2LTv!?E0I^
z120>DkKOgA4CUQ>IFa!mImY*dF+#SfBji-3A8u!PJioEMb8zGK)#JUbTf6%^2fKSm
z$Gbn=+}b0fXiKD*7$i-{WP*zLS6uvW{PT(PvmDgZc@L-Ky^+Jqp2B-3(%Ka}%y|J<
z9pG4tzO6_XhIAmXL%{?*hLB1aL_$IVM>|>&IcK@^jLsqz&TtoD#-=hPi)V27QnmDw
zi}I2JCh}6;qwffAV^GtD!E_=1lcVY1bN-Go350~BPlAYx9$EASNB`2P5V<5f5}^&+
zl2L;JnG&@F1Vs-Bb~w6U+!)Yyl4QUQ5iW4Ga`#&mpy~>&@dP_|Cilp;z#B=EY~I>Q
zLs)f~p+V@4erq71Xth9tMA96Rm1SZeP%<=CvInS#>4N)H0tSiIvIB6^B>=*MKqV3(
zv{I^0RP4{WRKzdyUZBNA1fi=}so9sK*-XmwI(?qD1vQ<CJMAtYU8!6I+O|2jWTZCx
zwlmdWVkHd}S*iLt-nUcUKS_0AX0A;<igFw$7H4RcYI-W@Mo_I>caybicxq*t-rlH@
zM;19E^kO9SODyXOc5L3~BI3;mN{L*QL=pqq)JD~qAd4CQKbI6_5=9f~zA}~WZY_IZ
zoc}Aw`9EKk*U!>K)*MP*luO5RFC81RwPe4bqCGB$CmWt3iuxm`sK>9vlaz4_R4VEU
z%=YO(&{YYRntAiLNK4+R{@#*zQuk@1sXw!5O0kq;`Janr`I*F`iY+XIoK`xogH}oz
zyzw%a!uT&|Gd_`)cLm7)ZjS8#&cE2b_$aaEbKwi#K%Wr!0yfB#3FvrtYPv-T_~b*-
zo9fhQ-6=1Lwd#uy!Ya9K4`@gTEuKW^NT!KDnz}!6Pdm$eOV=%3cbe<cvq)dqcgxed
zlHjk9;9iE{F=%)At)wYx=8tl${;gzn$?A(?^^%uit;ZgC?y%Q*%o}Kd;4OJ^5=F<O
z16q4s0}s82lhxqI%2;FXt1gU0@q!-wA2xFDoqW#NfNLpao3R7OaXV<>l0woatc*;4
zImbavv8B}u3!qxdp;}C#jKVGv(-m<%mf;xU#Do6~utM%}_;C)@d*l3cAv`lD4s)TL
ue32Xelc&mKUnv-kG7-&(88iiN4-P-gVR=8rGTw#d#{UoZe*3L3DF6V^n5cyS

literal 1392
zcmV-$1&{hcRzV<BZeeh9Xm4~Nb~6eC06CBB+D5aDS%4P0a&iu(YrS8!4woVZpCB-Z
zKrqqDuOEvD00000000B+THS8rL=<j|5K<5l+#x_PvXIh3oy19LT5CacSJ}1~Y?n3_
z?XFhU#6C%eIJWVOlZ{p@BqUw{@dDd7;0bsG9)maFjtkC=-NxP~>5tp)YH=>wIGH);
zn={|{jmMK0?Uv(NJ^uSK2qqkON~k56=jt~20a#RktuxmT1uqHUqVywY+@(J6dV>FQ
zY}-`O@7|hwXHLH6-=6zm4jkG7r_F^8K`^_47mAatTAwmkw?ZzwzTRP?8@6=nGd&EP
ztLHsj_%+#NVX&~RMna0-(1oB#sB4pA0KUhW@B#)LKMH_w5G8Ui04kW<A;Rl{OWIyQ
zL>KVC<9I{)d9t5bAnH}n<MQ#cCHup8EWWM+6-<-bw%(__XPTWZKQdPD)nTQ2zq($v
zR@aScqh2>E)>>_?wo=~!qrP@`g%+?Eg3_^Ih@ZH$4_~Wj*+MXv3+gyj%{Q}6)2P-~
zzFM8sRO07O*ujMHfTCf_rgQ*01`=>JU}q!1Q=bLEH-u?cE5@o`sq2Q(tX559#WX69
z3c9Y7-NyI(jlJd`!HdFXqe;q0m-3)iR?|{GXBNuIp%)(R?2Y?lo7A_w990EFTEO{{
z>dy<$wB-D2=3{M2D(%VhiH!e9F}}|@M>6S(kW-m{u$koX{QBm0b8G+Z(QX5gZ#Q>#
z507?!c+l7-akOR9M<J1xVlwiV6z{0`-xRMV&d*X%Pscr)j(01C*F1ywT%_eYGR;*1
zmlR+>U;{ZLJs9ajoE06oMSb)$7lsaVA%mkGF0hodJi4H>xSp8dE{u;&WkeRw;qX!^
z_mZ3Pk_;wtEABB+1eY;%-h<(EA^wx1>ECn3ZO%im2^B?RIh6IuVv*s+(y0)sOSWAB
z9S9^Dv2@@@M8(BVus;6jQlYLW=Mcz2k|E`UslcVe<8M6+p)*mYA!-gs@`P+Mu@$z+
z#>4F>gj5F~aRL4K8l_>gb{hgrMp`3MtDsCQ&$W4p?1BhJ(SrL^h~p$u%L>3r7Yid;
zmKP#yTS}=kQL#U#O5xw;y+E5X2YpAj$~AjCnoX2Et<%f2&8X=_+-Y|K(MqKv=p9*e
zNk&~(Uv|c>+{c8FWu+RVc;AV5|1#Ba>6x`Q;m}hYClaSEmCF0LdvKssxUU8)*YL>7
z61}y!k%nuUK+*ex7)xf-6=ZHYzzDSEKrWG+l1PY#&CBs@OpwKl?=K|<H*}ndbgxaN
zyIRYxjq`t{IREFX^7>htNSZ^gi+t(0^wP0DTTAkd@Q^L;=w!o_MNxmG6m|SMJV_b1
z5T57Y9cQvn7pxu@E7#1MzeQTs;`zsSC-Xi{G{%KRlZz!6%l}*~l?#c*%eJr#Q(Ec1
z4qC}&@W#tv3gf?=&G^ujyvsoLcT;5lcm8_!;&EZ~=fXF<fj%Md4Q!An6HxK))O52D
z@a2b~54=;SRj0hf54-`h!7h<~c|b#KXw%RUiev#P#zQYo+|$l7-`sU`*PZ6N`gx?!
z?7R7CT~6><NN_Dda32D7_>I}Jn)!<qtAEQ`owNF8SiP(zSgV=OG<DdE@3djS1mITE
z#~T_wKA@GKV<cO9K3NS#%qoq2fWc!?T+@U9gKFw`C!d?<kOnSN+%%ht<1(qGibA3%
ztR|WK;~WJs!WPY*odMNq3e{o+B@Vkxc#rx1ScYSW6A%6qz%seV!N)03?~Uuz1N+>X
yD9o8^@<l5BCugQd{-hwzG7-&(2{ajR4-P&}VR=8oGTw!y^8W`RSngFYDF6UB@wpQK


From df432ceedc7162793a195dd1713ff69aefc7379e Mon Sep 17 00:00:00 2001
From: semantic-release-bot <semantic-release-bot@martynus.net>
Date: Sat, 3 May 2025 21:58:35 +0000
Subject: [PATCH 2/2] build(release): 2.0.6 [skip ci]

## [2.0.6](https://github.com/actions/create-github-app-token/compare/v2.0.5...v2.0.6) (2025-05-03)

### Bug Fixes

* replace `-` with `_` ([#246](https://github.com/actions/create-github-app-token/issues/246)) ([3336784](https://github.com/actions/create-github-app-token/commit/333678481b1f02ee31fa1443aba4f1f7cb5b08b5))
---
 dist/main.cjs     | 2 +-
 package-lock.json | 4 ++--
 package.json      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/dist/main.cjs b/dist/main.cjs
index 501be52..905c9fb 100644
--- a/dist/main.cjs
+++ b/dist/main.cjs
@@ -42400,7 +42400,7 @@ function getPermissionsFromInputs(env) {
   return Object.entries(env).reduce((permissions2, [key, value]) => {
     if (!key.startsWith("INPUT_PERMISSION-")) return permissions2;
     if (!value) return permissions2;
-    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase();
+    const permission = key.slice("INPUT_PERMISSION-".length).toLowerCase().replaceAll(/-/g, "_");
     if (permissions2 === void 0) {
       return { [permission]: value };
     }
diff --git a/package-lock.json b/package-lock.json
index d514b39..9c0901f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "create-github-app-token",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "create-github-app-token",
-      "version": "2.0.5",
+      "version": "2.0.6",
       "license": "MIT",
       "dependencies": {
         "@actions/core": "^1.11.1",
diff --git a/package.json b/package.json
index 80b5359..f294bd9 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
   "name": "create-github-app-token",
   "private": true,
   "type": "module",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "GitHub Action for creating a GitHub App Installation Access Token",
   "scripts": {
     "build": "esbuild main.js post.js --bundle --outdir=dist --out-extension:.js=.cjs --platform=node --target=node20.0.0 --packages=bundle",

<!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'>
<html xmlns='http://www.w3.org/1999/xhtml'>
<head>
<title>pFad - Phonifier reborn</title>
<meta http-equiv='Content-Type' content='text/html; charset=utf-8' />
</head>
<body>
<h1>Pfad - The Proxy pFad of &#169; 2024 Garber Painting. All rights reserved.</h1>


<!-- Disclaimer -->
<p>Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.</p>
<br>
<p>Alternative Proxies:</p><p><a href="http://rainy.clevelandohioweatherforecast.com/php-proxy/index.php?q=https://github.com/actions/create-github-app-token/compare/v2.0.5...v2.0.6.patch" target="_blank">Alternative Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/index.php?u=https://github.com/actions/create-github-app-token/compare/v2.0.5...v2.0.6.patch" target="_blank">pFad Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v3index.php?u=https://github.com/actions/create-github-app-token/compare/v2.0.5...v2.0.6.patch" target="_blank">pFad v3 Proxy</a></p><p><a href="http://rainy.clevelandohioweatherforecast.com/pFad/v4index.php?u=https://github.com/actions/create-github-app-token/compare/v2.0.5...v2.0.6.patch" target="_blank">pFad v4 Proxy</a></p></body>
</html>