From ddac06d68f64283289e73ebbe48a7009ac00ddc2 Mon Sep 17 00:00:00 2001
From: Samuel Enocsson <samuel.enocsson@consid.se>
Date: Fri, 22 May 2026 09:20:46 +0200
Subject: [PATCH] fix(ci): use PACKAGES_TOKEN PAT for docker registry auth

The auto-injected GITEA_TOKEN does not have effective write access to
the container registry on Gitea 1.26 even with `permissions: packages:
write` set. Switching to a dedicated PAT (write:package scope) stored
as the PACKAGES_TOKEN repo secret.

Bumps version to 1.2.3 to trigger a fresh tag-build.
---
 .gitea/workflows/docker-build.yml | 2 +-
 package-lock.json                 | 4 ++--
 package.json                      | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/docker-build.yml b/.gitea/workflows/docker-build.yml
index d058eeb..274d97b 100644
--- a/.gitea/workflows/docker-build.yml
+++ b/.gitea/workflows/docker-build.yml
@@ -18,7 +18,7 @@ jobs:
         with:
           registry: gitea.shcizo.se
           username: ${{ gitea.actor }}
-          password: ${{ secrets.GITEA_TOKEN }}
+          password: ${{ secrets.PACKAGES_TOKEN }}
 
       - uses: docker/metadata-action@v5
         id: meta
diff --git a/package-lock.json b/package-lock.json
index 418abee..51fdc92 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "pdga-ratings",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pdga-ratings",
-      "version": "1.2.2",
+      "version": "1.2.3",
       "dependencies": {
         "ejs": "^4.0.1",
         "express": "^4.18.2",
diff --git a/package.json b/package.json
index c9f41dc..d558a40 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "pdga-ratings",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "PDGA rating scraper and display",
   "main": "server.js",
   "scripts": {