fix(ci): use PACKAGES_TOKEN PAT for docker registry auth

The auto-injected GITEA_TOKEN does not have effective write access to the container registry on Gitea 1.26 even with `permissions: packages: write` set. Switching to a dedicated PAT (write:package scope) stored as the PACKAGES_TOKEN repo secret. Bumps version to 1.2.3 to trigger a fresh tag-build.
fix(ci): use secrets.GITEA_TOKEN instead of GITHUB_TOKEN
2026-05-22 09:20:46 +02:00 · 2026-05-22 09:13:06 +02:00 · 2026-05-22 08:52:23 +02:00 · 2026-05-22 08:50:04 +02:00
6 changed files with 48 additions and 66 deletions
@@ -0,0 +1,37 @@
+name: Docker Build
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: docker/login-action@v3
+        with:
+          registry: gitea.shcizo.se
+          username: ${{ gitea.actor }}
+          password: ${{ secrets.PACKAGES_TOKEN }}
+
+      - uses: docker/metadata-action@v5
+        id: meta
+        with:
+          images: gitea.shcizo.se/shcizo/pdga-rating
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=raw,value=latest
+
+      - uses: docker/build-push-action@v6
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
@@ -1,52 +1,13 @@
-name: Release Please
+# Deprecated: replaced by .gitea/workflows/docker-build.yml (tag-trigger).
+# Origin moved from GitHub to Gitea; release-please-action and ghcr.io are
+# GitHub-only and don't run on Gitea Actions. Trigger changed to manual-only
+# so neither GitHub nor Gitea Actions will auto-run this file.
+name: Release Please (deprecated)
 on:
-  push:
-    branches: [main]
-
-permissions:
-  contents: write
-  pull-requests: write
+  workflow_dispatch:

 jobs:
-  release-please:
+  noop:
    runs-on: ubuntu-latest
-    outputs:
-      release_created: ${{ steps.release.outputs.release_created }}
-      tag_name: ${{ steps.release.outputs.tag_name }}
    steps:
-      - uses: googleapis/release-please-action@v4
-        id: release
-        with:
-          release-type: node
-
-  docker:
-    needs: release-please
-    if: ${{ needs.release-please.outputs.release_created }}
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      packages: write
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: docker/login-action@v3
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - uses: docker/metadata-action@v5
-        id: meta
-        with:
-          images: ghcr.io/${{ github.repository }}
-          tags: |
-            type=semver,pattern={{version}},value=${{ needs.release-please.outputs.tag_name }}
-            type=semver,pattern={{major}}.{{minor}},value=${{ needs.release-please.outputs.tag_name }}
-            type=raw,value=latest
-
-      - uses: docker/build-push-action@v6
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
+      - run: echo "Deprecated. See .gitea/workflows/docker-build.yml"
@@ -1,3 +0,0 @@
-{
-  ".": "1.2.0"
-}
@@ -1,12 +1,12 @@
 {
  "name": "pdga-ratings",
-  "version": "1.2.0",
+  "version": "1.2.3",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "pdga-ratings",
-      "version": "1.2.0",
+      "version": "1.2.3",
      "dependencies": {
        "ejs": "^4.0.1",
        "express": "^4.18.2",
@@ -1,6 +1,6 @@
 {
  "name": "pdga-ratings",
-  "version": "1.2.0",
+  "version": "1.2.3",
  "description": "PDGA rating scraper and display",
  "main": "server.js",
  "scripts": {
@@ -1,13 +0,0 @@
-{
-  "packages": {
-    ".": {
-      "release-type": "node",
-      "changelog-sections": [
-        { "type": "feat", "section": "Features" },
-        { "type": "fix", "section": "Bug Fixes" },
-        { "type": "chore", "section": "Miscellaneous" },
-        { "type": "refactor", "section": "Code Refactoring" }
-      ]
-    }
-  }
-}
Author	SHA1	Message	Date
Samuel Enocsson	ddac06d68f	fix(ci): use PACKAGES_TOKEN PAT for docker registry auth Docker Build / docker (push) Successful in 1m47s Details The auto-injected GITEA_TOKEN does not have effective write access to the container registry on Gitea 1.26 even with `permissions: packages: write` set. Switching to a dedicated PAT (write:package scope) stored as the PACKAGES_TOKEN repo secret. Bumps version to 1.2.3 to trigger a fresh tag-build.	2026-05-22 09:20:46 +02:00
Samuel Enocsson	5a5e45b685	fix(ci): use secrets.GITEA_TOKEN instead of GITHUB_TOKEN Docker Build / docker (push) Failing after 8s Details Per Gitea Actions docs, the auto-injected token is exposed as GITEA_TOKEN, not GITHUB_TOKEN. The latter is GitHub-Actions-specific and not aliased on Gitea by default. Also bumps version to 1.2.2 to trigger a fresh tag-build.	2026-05-22 09:13:06 +02:00
Samuel Enocsson	77f00db037	1.2.1 Docker Build / docker (push) Failing after 2m5s Details	2026-05-22 08:52:23 +02:00
Samuel Enocsson	50a60b29e7	ci: migrate to Gitea Actions for docker build Origin moved from GitHub to Gitea. release-please-action and ghcr.io are GitHub-specific and don't work on Gitea Actions, so the release-please flow is dropped in favor of manual tag-trigger docker builds. - Add .gitea/workflows/docker-build.yml: builds and pushes to gitea.shcizo.se/shcizo/pdga-rating on tag push (v*) - Remove release-please-config.json and .release-please-manifest.json - Neutralize .github/workflows/release-please.yml to workflow_dispatch (kept as reference; can't be deleted via tooling under .github/)	2026-05-22 08:50:04 +02:00