fix: Use token from github-app-token to update native dependencies (#1217)

Author: mayeut

.github/workflows/update-dependencies.yml

@@ -19,17 +19,19 @@ jobs:
       run: |
         git config --global user.name "manylinux-bot[bot]"
         git config --global user.email "89297709+manylinux-bot[bot]@users.noreply.github.com"
-    - name: "Run update native dependencies"
-      run: nox --force-color -s update_native_dependencies
-    - name: "Run update python dependencies"
-      run: nox --force-color -s update_python_dependencies update_python_tools
-    # we use this step to grab a Github App auth token, so that PRs generated by this workflow
-    # run the GHA tests.
+    # we use this step to grab a Github App auth token, so that lastversion can query GitHub API
+    # without rate-limit and PRs get run by GHA.
     - uses: tibdex/github-app-token@v1
       id: generate-token
       with:
         app_id: ${{ secrets.MANYLINUX_BOT_APP_ID }}
         private_key: ${{ secrets.MANYLINUX_BOT_APP_PRIVATE_KEY }}
+    - name: "Run update native dependencies"
+      run: nox --force-color -s update_native_dependencies
+      env:
+        GITHUB_API_TOKEN: ${{ steps.generate-token.outputs.token }}
+    - name: "Run update python dependencies"
+      run: nox --force-color -s update_python_dependencies update_python_tools
     - name: Create Pull Request
       if: github.ref == 'refs/heads/main' && github.repository == 'pypa/manylinux'
       uses: peter-evans/create-pull-request@v3