update release with secret and target repo

Author: fadi-george

.github/workflows/create-release-pr.yml

@@ -3,6 +3,10 @@ name: Create Release PR
 on:
   # For making a release pr from android / ios sdk actions
   workflow_call:
+    secrets:
+      GH_PUSH_TOKEN:
+        required: false
+        description: "GitHub token for pushing changes"
     inputs:
       flutter_version:
         description: "New Flutter SDK Version (e.g., 5.3.4 or 5.3.4-beta.1)"
@@ -46,7 +50,12 @@ on:
 jobs:
   prep:
     uses: OneSignal/sdk-actions/.github/workflows/prep-release.yml@main
+    secrets:
+      # Need this cross-repo token (sdk-actions & this repo) to perform changes
+      GH_PUSH_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
     with:
+      # Need target_repo otherwise caller would set github.repository to the caller itself (e.g. sdk-actions)
+      target_repo: OneSignal/OneSignal-Flutter-SDK
       version: ${{ inputs.flutter_version }}
 
   update-version:
@@ -61,7 +70,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
         with:
+          # Need repository otherwise caller would set github.repository to the caller itself (e.g. sdk-actions)
+          repository: OneSignal/OneSignal-Flutter-SDK
           ref: ${{ needs.prep.outputs.release_branch }}
+          token: ${{ secrets.GH_PUSH_TOKEN || github.token }}
 
       - name: Get current native SDK versions
         id: current_versions
@@ -154,7 +166,12 @@ jobs:
   create-pr:
     needs: [prep, update-version]
     uses: OneSignal/sdk-actions/.github/workflows/create-release.yml@main
+    secrets:
+      # Need this cross-repo token (sdk-actions & this repo) to perform changes
+      GH_PUSH_TOKEN: ${{ secrets.GH_PUSH_TOKEN }}
     with:
+      # Need target_repo otherwise caller would set github.repository to the caller itself (e.g. sdk-actions)
+      target_repo: OneSignal/OneSignal-Cordova-SDK
       release_branch: ${{ needs.prep.outputs.release_branch }}
       target_branch: ${{ inputs.target_branch }}
       android_from: ${{ needs.update-version.outputs.android_from }}