DNM: Temp for Snapshot

.github/actions/gradle-task-with-commit/action.yml

@@ -17,6 +17,8 @@ inputs:
   commit-message:
     description: 'The commit message to use if changes are generated'
     default: ''
+  access-token:
+    description: 'The access token to use for checkouts.'
   restore-cache-key:
     description: 'The unique identifier for the associated cache.  Any other consumers or producers for this cache must use the same name.'
     default: 'null'
@@ -31,7 +33,9 @@ runs:
       id: can-push
       shell: bash
       run: |
-        if [[ "${{ env.GITHUB_REF_PROTECTED }}" == 'true' ]]; then
+        if [[ "${{ inputs.access-token }}" == '' ]]; then
+          echo "can_push=false" >> $GITHUB_OUTPUT
+        elif [[ "${{ env.GITHUB_REF_PROTECTED }}" == 'true' ]]; then
           echo "can_push=false" >> $GITHUB_OUTPUT
         elif [[ "${{ github.event.pull_request.head.repo.full_name }}" != "${{ github.repository }}" ]]; then
           echo "can_push=false" >> $GITHUB_OUTPUT
@@ -40,10 +44,11 @@ runs:
         fi
 
     # ensure that we have the actual branch checked out.  By default, actions/checkout is headless.
-    - name: check out with PAT
+    - name: check out with the generated app token
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       if: steps.can-push.outputs.can_push == 'true'
       with:
+        token: ${{ inputs.access-token }}
         ref: ${{ github.head_ref }}
         fetch-depth: 0
 
@@ -70,7 +75,7 @@ runs:
 
     - name: commit ${{ inputs.fix-task }} changes
       if: steps.can-push.outputs.can_push == 'true'
-      uses: stefanzweifel/git-auto-commit-action@8756aa072ef5b4a080af5dc8fef36c5d586e521d # v5
+      uses: stefanzweifel/git-auto-commit-action@v6
       with:
         commit_message: ${{ steps.set-commit-message.outputs.commit-message }}
         commit_options: '--no-verify --signoff'