From 3b361f8de71d7060387c5b0f671dff6049ac0d2c Mon Sep 17 00:00:00 2001
From: "github-actions[bot]" <github-actions[bot]@users.noreply.github.com>
Date: Thu, 2 Apr 2026 08:13:50 +0200
Subject: [PATCH] ci: use GH_PAT to allow pushing workflow file changes from
 upstream

GITHUB_TOKEN cannot push .github/workflows/ changes (GitHub blocks it).
A PAT with the `workflow` scope is required.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .github/workflows/sync-rebase.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/sync-rebase.yml b/.github/workflows/sync-rebase.yml
index b5a7fa5e5..ab837b7d1 100644
--- a/.github/workflows/sync-rebase.yml
+++ b/.github/workflows/sync-rebase.yml
@@ -14,13 +14,12 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      workflows: write
     steps:
       - name: Checkout
         uses: actions/checkout@v6
         with:
           fetch-depth: 0
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GH_PAT }}
 
       - name: Configure git
         run: |