devops -> main #51

Closed

akinus wants to merge 0 commits from devops into main

akinus commented

2026-06-27 19:14:51 +00:00

Owner

Manual PR after pipeline fix.

akinus added 2 commits

2026-06-27 19:14:53 +00:00

fix(level1): use github.token for in-repo release API, keep TAP_TOKEN for tap 66afc4f113

The 'Create Forgejo release + upload artifact' step has been failing
with HTTP 403 'user should have a permission to write to a repo'
because secrets.TAP_TOKEN is the maintainer's cross-repo token
(write:repository scope on the homebrew tap) and does NOT have
write permission on this akclip repo.

Forgejo Actions injects ${{ github.token }} as the auto-token with
write permission to the current repo. That's the right token for:
  - POST /repos/{owner}/{repo}/releases        (release create)
  - POST /releases/{id}/assets                 (asset upload)
  - DELETE /repos/{owner}/{repo}/branches/...
  - POST /repos/{owner}/{repo}/issues/.../labels

TAP_TOKEN is still used for the cross-repo tap sync, which is the
only place a cross-repo write is required.

This also brings the bottles job's FORGEJO_TOKEN in line with the
release job's auto-token, so the entire in-repo release path uses
one identity.

ci: retrigger level2 after token fix e03fcf5a9e

akinus referenced this pull request from a commit

2026-06-28 01:26:19 +00:00

Merge pull request 'devops -> main' (#51) from devops into main

akinus closed this pull request

2026-06-28 01:27:02 +00:00