Patrick Niebeling 9a8e4e47f0 Use the built-in GITEA_TOKEN instead of a hand-made RELEASE_TOKEN secret ...

Gitea injects a token into every Actions job as secrets.GITEA_TOKEN, so the
manually created PAT was never necessary. Declare permissions: contents:
write on the job, which Gitea maps to Code: write (deleting the latest-main
tag) and Releases: write (creating the release, uploading the asset) - the
full set the publish step needs.

Removes a secret that had to be created by hand, could expire, and was a
single point of failure the workflow had no fallback for.

2026-08-13 13:54:38 +02:00

..

workflows

Use the built-in GITEA_TOKEN instead of a hand-made RELEASE_TOKEN secret

2026-08-13 13:54:38 +02:00