From 58a648e1a37421e611ebab361586666f9664d325 Mon Sep 17 00:00:00 2001 From: Kevin Adams Date: Sun, 7 Jun 2026 11:08:04 -0400 Subject: [PATCH] fix: use GITHUB_TOKEN for gh-pages push (ACCESS_TOKEN expired) The ACCESS_TOKEN secret was created in 2022 and has expired. Switch both gh-pages publish steps (stable and testing dist) to github.token, which is generated fresh per run and never expires. Add permissions: contents: write to the publish job so GITHUB_TOKEN can push to gh-pages. Co-Authored-By: Claude Sonnet 4.6 --- .github/workflows/build.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c094805..ceec335 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -269,6 +269,8 @@ jobs: needs: [build, security] # Only publish on direct pushes (not PRs) to tracked branches or tags if: github.event_name == 'push' && needs.build.outputs.channel != 'none' + permissions: + contents: write steps: - uses: actions/checkout@v4.3.1 @@ -315,7 +317,7 @@ jobs: env: APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }} APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }} - GH_TOKEN: ${{ secrets.ACCESS_TOKEN }} + GH_TOKEN: ${{ github.token }} run: | # Abort clearly if signing key not configured if [[ -z "$APT_SIGNING_KEY" ]]; then @@ -410,7 +412,7 @@ jobs: env: APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }} APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }} - GH_TOKEN: ${{ secrets.ACCESS_TOKEN }} + GH_TOKEN: ${{ github.token }} run: | if [[ -z "$APT_SIGNING_KEY" ]]; then echo "::error::APT_SIGNING_KEY secret is not set"