I work on wasmtime in the bytecodealliance organization. @tschneidereit ~2 hours ago accepted the permissions changes described online and alluded here. After that all our CI workflows for Wasmtime were failing with:

The run was canceled forcefully by @power-z-gha-runner[bot].

An example job log is https://github.com/bytecodealliance/wasmtime/actions/runs/21599524594 where all three attempts resulted in a cancellation by the @power-z-gha-runner[bot] account. We don't appear to have any debug logs to see what was going on. In the organization audit logs we see that the workflows were indeed cancelled, but we don't have any understanding as to why.

We've since suspended the github app and while workflows are no longer being cancelled the jobs on the ubuntu-24.04-s390x runners are hanging (predictably so) as nothing is picking them up. We're switching our CI back to emulation of s390x on github standard runners, but I wanted to raise an issue here as well about this.