From fae328d9417e0c5b1de929df6f0074a801a35368 Mon Sep 17 00:00:00 2001
From: Tri Vo Khac <git@trivk.dev>
Date: Sat, 14 Nov 2026 02:34:52 +0700
Subject: [PATCH] ci: publish the Arch package with a package token

---
 .gitea/workflows/arch-package.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/arch-package.yml b/.gitea/workflows/arch-package.yml
index 359aa5c..afb813d 100644
--- a/.gitea/workflows/arch-package.yml
+++ b/.gitea/workflows/arch-package.yml
@@ -13,7 +13,6 @@ on:
 
 permissions:
   contents: read
-  packages: write
 
 jobs:
   package:
@@ -49,7 +48,9 @@ jobs:
           su builder -c "cd $dir && makepkg --noconfirm"
       - name: Publish
         env:
-          TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          # The package registry rejects the job token, so this is a personal access token
+          # with the write:package scope.
+          TOKEN: ${{ secrets.PACKAGE_TOKEN }}
         run: |
           for f in /tmp/pkg/qtpotato-[0-9]*.pkg.tar.zst; do
               curl -fsS -X PUT -H "Authorization: token $TOKEN" --upload-file "$f" \