From 39ac4100e3ef87e35059d28e4042f2f95fbf99a1 Mon Sep 17 00:00:00 2001
From: Philipp Horstenkamp <philipp@horstenkamp.de>
Date: Fri, 4 Sep 2026 22:35:15 +0200
Subject: [PATCH] chore: explicitly pass GITHUB_TOKEN to checkout and document
 repository-level write permissions

---
 .gitea/workflows/recompile-dist.yaml | 1 +
 GEMINI.md                            | 5 +++++
 2 files changed, 6 insertions(+)

diff --git a/.gitea/workflows/recompile-dist.yaml b/.gitea/workflows/recompile-dist.yaml
index 4107b1f..3532bc3 100644
--- a/.gitea/workflows/recompile-dist.yaml
+++ b/.gitea/workflows/recompile-dist.yaml
@@ -22,6 +22,7 @@ jobs:
     - name: Checkout PR Branch
       uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1   # v7.0.1
       with:
+        token: ${{ secrets.GITHUB_TOKEN }}
         ref: ${{ github.head_ref }}
         fetch-depth: 0
 
diff --git a/GEMINI.md b/GEMINI.md
index 13e1be7..d623961 100644
--- a/GEMINI.md
+++ b/GEMINI.md
@@ -33,3 +33,8 @@ The Gitea workflow does the following:
 2.  Sets up Node.js and pnpm.
 3.  Installs the dependencies using `pnpm install`.
 4.  Runs the tests using `pnpm test`.
+
+### Automated Recompilation & Permissions
+
+*   The automated recompilation workflow (`.gitea/workflows/recompile-dist.yaml`) recompiles `dist/index.js` on Renovate PRs and requires `contents: write` permissions to push back to the branch.
+*   Ensure that the Gitea repository workflow settings have write permissions enabled (**Settings** ➔ **Actions** ➔ **General** ➔ **Workflow permissions** ➔ **Read and write permissions**).