From 7c0f529a8b7b43aefe8e27dcb28e534c43836877 Mon Sep 17 00:00:00 2001
From: Hasko <javics86@gmail.com>
Date: Sun, 7 Jun 2026 10:11:05 +0200
Subject: [PATCH] =?UTF-8?q?fix(ci):=20=F0=9F=94=92=20Limit=20release=20pus?=
 =?UTF-8?q?h=20credentials?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/workflows/ci.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d0f276a..23d3e46 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -82,6 +82,7 @@ jobs:
         with:
           fetch-depth: 0
           ref: ${{ github.event.pull_request.base.ref }}
+          persist-credentials: false
 
       - name: Setup Node.js
         uses: actions/setup-node@v4
@@ -221,9 +222,11 @@ jobs:
             git tag -a "v${NEXT_VERSION}" -m "Release v${NEXT_VERSION} for #${PR_NUMBER}"
           fi
 
-          git push origin "HEAD:${BASE_BRANCH}"
-          git push origin "v${NEXT_VERSION}"
+          auth_header="AUTHORIZATION: bearer ${GITHUB_TOKEN}"
+          git -c http.https://github.com/.extraheader="$auth_header" push origin "HEAD:${BASE_BRANCH}"
+          git -c http.https://github.com/.extraheader="$auth_header" push origin "v${NEXT_VERSION}"
         env:
           BASE_BRANCH: ${{ github.event.pull_request.base.ref }}
           NEXT_VERSION: ${{ steps.release.outputs.next_version }}
           PR_NUMBER: ${{ github.event.pull_request.number }}
+          GITHUB_TOKEN: ${{ github.token }}