.gitea/workflows/publish.yml

@@ -20,6 +20,7 @@ jobs:
         with:
           ref: ${{ github.ref_name }}
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v6
@@ -66,7 +67,7 @@ jobs:
         env:
           TWINE_USERNAME: "__token__"
           TWINE_PASSWORD: ${{ secrets.MX_GITEA_BOT_TOKEN }}
-          GITEA_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
+          MX_GITEA_BOT_TOKEN: ${{ secrets.MX_GITEA_BOT_TOKEN }}
         run: |
           pip install python-semantic-release==9.* wheel build twine
           semantic-release --config ./ci/semantic_release.toml version

ci/semantic_release.toml

@@ -28,9 +28,7 @@ default_bump_level = 0
 [tool.semantic_release.remote]
 type = "gitea"
 domain = "gitea.psi.ch"
-
-[tool.semantic_release.remote.token]
-env = "GITEA_TOKEN"
+token = { env = "MX_GITEA_BOT_TOKEN" }
 
 [tool.semantic_release.publish]
 dist_glob_patterns = ["dist/*"]