Fix AltStore source push rejected by branch protection

The update_altstore job pushed with the default GITHUB_TOKEN, which
cannot bypass the changes-through-PR ruleset on main. Check out with
REPO_TOKEN like the release and appcast jobs, and forward secrets to
the reusable workflow with secrets: inherit.
This commit is contained in:
Arkadiusz Fal
2026-07-18 18:40:09 +02:00
parent 447f593950
commit 02707ddd6a
2 changed files with 4 additions and 0 deletions

View File

@@ -349,5 +349,6 @@ jobs:
if: ${{ inputs.build_ios && success() }} if: ${{ inputs.build_ios && success() }}
needs: [release] needs: [release]
uses: ./.github/workflows/update-altstore.yml uses: ./.github/workflows/update-altstore.yml
secrets: inherit
with: with:
tag: ${{ needs.release.outputs.tag }} tag: ${{ needs.release.outputs.tag }}

View File

@@ -22,6 +22,9 @@ jobs:
- uses: actions/checkout@v4 - uses: actions/checkout@v4
with: with:
ref: main ref: main
# Default GITHUB_TOKEN cannot bypass the "changes through PR only"
# branch ruleset; REPO_TOKEN can (same as the release workflow).
token: ${{ secrets.REPO_TOKEN }}
- name: Get version info from release - name: Get version info from release
run: | run: |
TAG="${{ inputs.tag }}" TAG="${{ inputs.tag }}"