From 10b522e62ad397e0be6b93fedd6b90762a4ae507 Mon Sep 17 00:00:00 2001
From: DamienGilliard <127743632+DamienGilliard@users.noreply.github.com>
Date: Fri, 11 Sep 2026 21:49:45 +0200
Subject: [PATCH] feat: update publish-release while I am drunk in a fribourg
 to lausanne train

---
 .github/workflows/publish-release.yml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index c2b12de3..53a41e93 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -11,6 +11,9 @@ jobs:
   ################################################################################
   sync-version:
     runs-on: windows-latest
+    permissions:
+      contents: write
+      id-token: write
 
     steps:
     - uses: actions/checkout@v2
@@ -45,7 +48,7 @@ jobs:
           echo "Branch version-sync-branch does not exist."
         fi
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       shell: bash
       # Create new branch and commit version change
     - run: |
@@ -55,24 +58,24 @@ jobs:
         git commit -am "ACTION_BOT: Sync version for release"
         git push --set-upstream origin version-sync-branch
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       # Close existing pull requests for version-sync-branch
     - run: |
         gh pr list --state open --head version-sync-branch --json number --jq '.[].number' | ForEach-Object { gh pr close $_ }
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       shell: pwsh
       # Create pull request
     - run: |
         gh pr create --title "ACTION_BOT: Sync version for release" --body "Sync version for release" --base main --head version-sync-branch --label ACTION_BOT
       env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       # Merge pull request
     - run: |
         $pr = gh pr list --head version-sync-branch --json number --jq '.[0].number'
         gh pr merge $pr --squash --delete-branch --admin
       env:
-        GITHUB_TOKEN: ${{ secrets.DF_COBOT_PAT_TOKEN }}
+        GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       shell: pwsh
 
   build-ghusers: