From 8f2f1d8527d663f6d79b638ffa815317c82d7b12 Mon Sep 17 00:00:00 2001
From: "a.gritsenko" <a.gritsenko@sdksys.ru>
Date: Sun, 20 Sep 2026 20:13:27 +0300
Subject: [PATCH] release: fall back to PAT secret for package publish

Built-in job token (secrets.GITHUB_TOKEN) returns 401 against the
Package Registry API on this Gitea instance even with
permissions: packages: write, so use a manual PACKAGE_TOKEN secret
instead.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 .gitea/workflows/release.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml
index e469208..55cf520 100644
--- a/.gitea/workflows/release.yml
+++ b/.gitea/workflows/release.yml
@@ -7,8 +7,6 @@ on:
 jobs:
   build-and-publish:
     runs-on: ubuntu-latest
-    permissions:
-      packages: write
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
@@ -23,7 +21,7 @@ jobs:
       - name: Publish to package registry
         env:
           VERSION: ${{ gitea.ref_name }}
-          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TOKEN: ${{ secrets.PACKAGE_TOKEN }}
           BASE: ${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/hotpcalc
         run: |
           set -e