Fine-grained tokens do not work with GitHub Rest Pull API

[mdroidian]

tl:dr - fine-grained tokens result in 403, using classic token instead

---

When creating a PR via

https://github.com/RoamJS/roamjs-components/blob/a03b1b802d67a9d24d4822aa3d5a504fab7e0a1e/src/scripts/publishToRoamDepot.ts#L146-L157

Where owner = RoamJS branch = query-builder

We have been continually getting the following error (latest run with error)

{
  message: 'Resource not accessible by personal access token',
  documentation_url: 'https://docs.github.com/rest/pulls/pulls#create-a-pull-request',
  status: '403'
}

According to the GitHub REST API docs, fine-grained tokens only require "Pull request" write access for this

This endpoint works with the following fine-grained token types:

• GitHub App user access tokens
• GitHub App installation access tokens
• Fine-grained personal access tokens

The fine-grained token must have the following permission set:

• "Pull requests" repository permissions (write)

Yet, even with a Fine-grained token with full read-write to repo/org and access to all repos, we could continually get a 403 error.

 Note: this was also tried with multiple users as the `Resource owner`  

I have also replicated this using a VSCode Extension, Thunder Client, with updated headers as per GitHub docs

Others have also reported this issue: https://github.com/orgs/community/discussions/106661 https://github.com/orgs/community/discussions/123362

[mdroidian]

It appears that this requires intervention from GitHub.

Until this is fixed by GitHub, using a classic token does not result in a 403

[dvargas92495]

left a comment: https://github.com/orgs/community/discussions/106661#discussioncomment-10114091