I ended-up using the GitHub GraphQL API with actions/github-script
into workflow, instead of actually using the binary. The step handles properly both additions and deletions, with CreateCommitOnBranch
mutation.
Previous implementation, without verified signature:
New implementation:
You can examine the actual PR with the new implementation.