Problem

The CI/CD pipeline fails during semantic-release with:

remote: Permission to structured-world/gitlab-mcp.git denied to sw-release-bot[bot].
fatal: unable to access - The requested URL returned error: 403

Key observation: The release commit gets uploaded successfully, but the tag upload fails.

Root Cause

• @semantic-release/git uses git with origin remote → works ✅
• semantic-release core uses git with direct URL → fails ❌

The actions/checkout with GitHub App token configures credentials for the origin remote, but semantic-release uploads tags directly to the repository URL, bypassing the credential helper.

Solution

Explicitly configure http.https://github.com/.extraheader with the App token before running semantic-release.

References

• Failed run: https://github.com/structured-world/gitlab-mcp/actions/runs/21697383638