Hero: fix title descender clipping (g); CI: rename PR token var so Gitea's auto GITEA_TOKEN doesn't 401 the branch step

2026-06-17 20:54:57 +10:00
parent 18ed7458c3
commit 1c956d6ec4
3 changed files with 12 additions and 4 deletions
@@ -51,9 +51,11 @@ git push origin "${BRANCH}"
 # --- PR (never auto-merge) -------------------------------------------------
 # Default (least-privilege): just push the branch — Jonathon opens+merges the PR (the approval
 # gate + the ArgoCD trigger). Only auto-open a PR if a GITEA_TOKEN is provided.
-if [[ -n "${GITEA_TOKEN:-}" ]]; then
+# NB: use a dedicated var name (NOT GITEA_TOKEN) — Gitea auto-injects GITEA_TOKEN into every job,
+# which would wrongly trigger this against the private instance. Default path just pushes the branch.
+if [[ -n "${HOMEOPS_PR_TOKEN:-}" ]]; then
  curl -fsSL -X POST "${GITEA_API}/repos/jwrong96/home-ops/pulls" \
-    -H "Authorization: token ${GITEA_TOKEN}" \
+    -H "Authorization: token ${HOMEOPS_PR_TOKEN}" \
    -H "Content-Type: application/json" \
    -d "{\"head\":\"${BRANCH}\",\"base\":\"main\",\"title\":\"bztmon-site: deploy ${TAG}\",\"body\":\"Automated digest bump.\\n\\nImage: \`${REF}\`\\n\\nMerge to roll out via ArgoCD.\"}"
  echo ">> PR opened for ${BRANCH}"