larvit/plainpages
3
0
Fork 0
Code Issues 1 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

README: note GITHUB_ secret-name prefix is rejected too
CI / full-gate (push) Successful in 2m41s
Details
Mirror / github-mirror (push) Successful in 5s
Details

Browse Source
This commit was merged in pull request #38.
This commit is contained in:
Lilleman auf Larv
2026-08-02 15:48:04 +02:00
parent ae1479f55b
commit 3f30f889c3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -2
View File
@@ -1249,8 +1249,8 @@ Renovate merges it once `CI / full-gate (push)` is green (rebasing stale branche
fast-forward-only merge still holds) — routine bumps land untouched; only a red gate needs a fast-forward-only merge still holds) — routine bumps land untouched; only a red gate needs a
human. One-time setup: reuse the shared `renovate@larvit.se` bot — give it write access to human. One-time setup: reuse the shared `renovate@larvit.se` bot — give it write access to
this repo and store its Gitea PAT as the Actions **secret** `RENOVATE_TOKEN`. Until it this repo and store its Gitea PAT as the Actions **secret** `RENOVATE_TOKEN`. Until it
exists, the nightly job fails loud (and, like the other secrets, a `GITEA_` prefix is exists, the nightly job fails loud (and, like the other secrets, a `GITEA_`/`GITHUB_`
rejected). Also store a **scopeless** (read-only) github.com PAT as the secret prefix is rejected). Also store a **scopeless** (read-only) github.com PAT as the secret
`RENOVATE_GITHUB_TOKEN` — the workflow hands it to Renovate as `GITHUB_COM_TOKEN`, so `RENOVATE_GITHUB_TOKEN` — the workflow hands it to Renovate as `GITHUB_COM_TOKEN`, so
lookups of github.com-hosted deps (actions, Playwright, changelogs) run authenticated lookups of github.com-hosted deps (actions, Playwright, changelogs) run authenticated
instead of tripping the anonymous 60-requests/hour limit. instead of tripping the anonymous 60-requests/hour limit.