From 7575a2f807fc166b9709b3d54d828cd09ff4939a Mon Sep 17 00:00:00 2001
From: antior <a@antior.cn>
Date: Fri, 31 Jul 2026 17:04:01 +0800
Subject: [PATCH] Use CI_PACKAGE_TOKEN for PyPI registry uploads

---
 .gitea/workflows/publish-dlp-io.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitea/workflows/publish-dlp-io.yaml b/.gitea/workflows/publish-dlp-io.yaml
index ed59957..abfa559 100644
--- a/.gitea/workflows/publish-dlp-io.yaml
+++ b/.gitea/workflows/publish-dlp-io.yaml
@@ -346,12 +346,12 @@ jobs:
         shell: pwsh
         env:
           TWINE_USERNAME: antior
-          TWINE_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
+          TWINE_PASSWORD: ${{ secrets.CI_PACKAGE_TOKEN }}
           TWINE_REPOSITORY_URL: ${{ gitea.server_url }}/api/packages/antior/pypi
         run: |
           $ErrorActionPreference = "Stop"
           if ([string]::IsNullOrWhiteSpace($env:TWINE_PASSWORD)) {
-            throw "GITHUB_TOKEN is required to publish packages"
+            throw "CI_PACKAGE_TOKEN repository secret (PAT with write:package) is required"
           }
           $headers = @{ Authorization = "token $env:TWINE_PASSWORD" }
           $simpleUrl = "$env:TWINE_REPOSITORY_URL/simple/dlp-io/"