From aff0ef881fa5cc9e349d2b2336d6a445032c0d2d Mon Sep 17 00:00:00 2001 From: Lars Bogner Date: Sun, 23 Aug 2026 21:38:41 +0200 Subject: [PATCH] Document CI_TOKEN's write:repository scope requirement (gitea #50) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The prior e2e run (task 1348) failed on the bump-version job's push step with a 403 Forbidden — CI_TOKEN lacked write access. Note this on the checkout step so the requirement isn't lost, now that the token has been rescoped. Trivial commit to re-open a merge request and re-run the job end to end. Co-Authored-By: Claude Opus 5 --- .gitea/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml index 1cab07d..1f62d7c 100644 --- a/.gitea/workflows/ci.yml +++ b/.gitea/workflows/ci.yml @@ -98,6 +98,9 @@ jobs: volumes: - /srv/act-runner-cache/uv:/uv-cache steps: + # CI_TOKEN needs write:repository scope (not just read) — this job + # pushes commits and tags to master, unlike ruff-check/ruff-format/ + # type-check/test above, which only need to check out the repo. - uses: actions/checkout@v4 with: token: ${{ secrets.CI_TOKEN }}