fix: release workflow token

.gitea/workflows/publish.yml

@@ -20,6 +20,7 @@ jobs:
         with:
           ref: ${{ github.ref_name }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -65,8 +66,8 @@ jobs:
         id: release_step
         env:
           TWINE_USERNAME: "__token__"
-          TWINE_PASSWORD: ${{ secrets.PIP_REPOSITORY_API_TOKEN }}
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          TWINE_PASSWORD: ${{ secrets.MX_GITEA_BOT_TOKEN }}
+          MX_GITEA_BOT_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
         run: |
           pip install python-semantic-release==9.* wheel build twine
           semantic-release --config ./ci/semantic_release.toml version

ci/semantic_release.toml

@@ -28,9 +28,7 @@ default_bump_level = 0
 [tool.semantic_release.remote]
 type = "gitea"
 domain = "gitea.psi.ch"
-
-[tool.semantic_release.remote.token]
-env = "GITEA_TOKEN"
+token = { env = "MX_GITEA_BOT_TOKEN" }
 
 [tool.semantic_release.publish]
 dist_glob_patterns = ["dist/*"]