fix: use GITHUB_TOKEN for gh-pages push (ACCESS_TOKEN expired)
The ACCESS_TOKEN secret was created in 2022 and has expired. Switch both gh-pages publish steps (stable and testing dist) to github.token, which is generated fresh per run and never expires. Add permissions: contents: write to the publish job so GITHUB_TOKEN can push to gh-pages. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
da0aaff0d2
commit
58a648e1a3
|
|
@ -269,6 +269,8 @@ jobs:
|
||||||
needs: [build, security]
|
needs: [build, security]
|
||||||
# Only publish on direct pushes (not PRs) to tracked branches or tags
|
# Only publish on direct pushes (not PRs) to tracked branches or tags
|
||||||
if: github.event_name == 'push' && needs.build.outputs.channel != 'none'
|
if: github.event_name == 'push' && needs.build.outputs.channel != 'none'
|
||||||
|
permissions:
|
||||||
|
contents: write
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4.3.1
|
- uses: actions/checkout@v4.3.1
|
||||||
|
|
@ -315,7 +317,7 @@ jobs:
|
||||||
env:
|
env:
|
||||||
APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }}
|
APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }}
|
||||||
APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }}
|
APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }}
|
||||||
GH_TOKEN: ${{ secrets.ACCESS_TOKEN }}
|
GH_TOKEN: ${{ github.token }}
|
||||||
run: |
|
run: |
|
||||||
# Abort clearly if signing key not configured
|
# Abort clearly if signing key not configured
|
||||||
if [[ -z "$APT_SIGNING_KEY" ]]; then
|
if [[ -z "$APT_SIGNING_KEY" ]]; then
|
||||||
|
|
@ -410,7 +412,7 @@ jobs:
|
||||||
env:
|
env:
|
||||||
APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }}
|
APT_SIGNING_KEY: ${{ secrets.APT_SIGNING_KEY }}
|
||||||
APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }}
|
APT_SIGNING_KEY_PASSPHRASE: ${{ secrets.APT_SIGNING_KEY_PASSPHRASE }}
|
||||||
GH_TOKEN: ${{ secrets.ACCESS_TOKEN }}
|
GH_TOKEN: ${{ github.token }}
|
||||||
run: |
|
run: |
|
||||||
if [[ -z "$APT_SIGNING_KEY" ]]; then
|
if [[ -z "$APT_SIGNING_KEY" ]]; then
|
||||||
echo "::error::APT_SIGNING_KEY secret is not set"
|
echo "::error::APT_SIGNING_KEY secret is not set"
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue