From d16b2ec417fdae7c08c0b1d6ef22eb00b851cc8d Mon Sep 17 00:00:00 2001
From: Peter Polacik <peter@wundergraph.com>
Date: Thu, 4 Jun 2026 09:42:09 +0200
Subject: [PATCH] chore: remove use of pat

---
 .github/workflows/release-preview.yaml | 1 -
 .github/workflows/release.yaml         | 5 +++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-preview.yaml b/.github/workflows/release-preview.yaml
index 031e862..ad01896 100644
--- a/.github/workflows/release-preview.yaml
+++ b/.github/workflows/release-preview.yaml
@@ -25,7 +25,6 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GH_PAT_TOKEN }}
 
       - uses: ./.github/actions/node
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index f9a1524..5d47b74 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -19,13 +19,14 @@ jobs:
     # https://docs.npmjs.com/generating-provenance-statements#publishing-packages-with-provenance-via-github-actions
     permissions:
       id-token: write
+      contents: write
+      actions: write
     timeout-minutes: 30
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-          token: ${{ secrets.GH_PAT_TOKEN }}
 
       - uses: ./.github/actions/node
 
@@ -47,5 +48,5 @@ jobs:
           pnpm whoami
           pnpm release
         env:
-          GH_TOKEN: ${{ secrets.GH_PAT_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}