From 4eada91430f5ecb7994034d475edd59e95b8d81b Mon Sep 17 00:00:00 2001
From: David Perl <david.perl@psi.ch>
Date: Mon, 27 Jul 2026 09:46:33 +0200
Subject: [PATCH] fix: release workflow token

---
 .gitea/workflows/publish.yml | 5 +++--
 ci/semantic_release.toml     | 4 +---
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/publish.yml b/.gitea/workflows/publish.yml
index 1609bbb..a094383 100644
--- a/.gitea/workflows/publish.yml
+++ b/.gitea/workflows/publish.yml
@@ -20,6 +20,7 @@ jobs:
         with:
           ref: ${{ github.ref_name }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -65,8 +66,8 @@ jobs:
         id: release_step
         env:
           TWINE_USERNAME: "__token__"
-          TWINE_PASSWORD: ${{ secrets.PIP_REPOSITORY_API_TOKEN }}
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+          TWINE_PASSWORD: ${{ secrets.MX_GITEA_BOT_TOKEN }}
+          MX_GITEA_BOT_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
         run: |
           pip install python-semantic-release==9.* wheel build twine
           semantic-release --config ./ci/semantic_release.toml version
diff --git a/ci/semantic_release.toml b/ci/semantic_release.toml
index a922328..ededef8 100644
--- a/ci/semantic_release.toml
+++ b/ci/semantic_release.toml
@@ -28,9 +28,7 @@ default_bump_level = 0
 [tool.semantic_release.remote]
 type = "gitea"
 domain = "gitea.psi.ch"
-
-[tool.semantic_release.remote.token]
-env = "GITEA_TOKEN"
+token = { env = "MX_GITEA_BOT_TOKEN" }
 
 [tool.semantic_release.publish]
 dist_glob_patterns = ["dist/*"]