release: fall back to PAT secret for package publish

Built-in job token (secrets.GITHUB_TOKEN) returns 401 against the Package Registry API on this Gitea instance even with permissions: packages: write, so use a manual PACKAGE_TOKEN secret instead. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-20 20:13:27 +03:00
1 changed files with 1 additions and 3 deletions
@@ -7,8 +7,6 @@ on:
 jobs:
  build-and-publish:
    runs-on: ubuntu-latest
-    permissions:
-      packages: write
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-go@v5
@@ -23,7 +21,7 @@ jobs:
      - name: Publish to package registry
        env:
          VERSION: ${{ gitea.ref_name }}
-          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          TOKEN: ${{ secrets.PACKAGE_TOKEN }}
          BASE: ${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/hotpcalc
        run: |
          set -e