From cff1408d87a3d44ce875d64b5aab302fc985eaff Mon Sep 17 00:00:00 2001
From: chendelian <116870791@qq.com>
Date: Wed, 6 May 2026 18:15:22 +0800
Subject: [PATCH] ci(publish): use repository-level PACKAGE_TOKEN secret

---
 .github/workflows/publish.yml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index fc8fd80..977fce7 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,10 +6,6 @@ on:
       - 'v*'
   workflow_dispatch:
 
-permissions:
-  contents: read
-  packages: write
-
 jobs:
   publish:
     runs-on: ubuntu-latest
@@ -36,7 +32,7 @@ jobs:
       - name: Publish to Gitea Package Registry
         env:
           TWINE_USERNAME: __token__
-          TWINE_PASSWORD: ${{ github.token }}
+          TWINE_PASSWORD: ${{ secrets.PACKAGE_TOKEN }}
         run: |
           python3.12 -m twine upload \
             --repository-url https://git.jc2009.com/api/packages/client-jiangchang/pypi \