From ccf1b14994a141d08b993daafb1c8a740959495d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Oliver=20G=C3=BCnther?= <mail@oliverguenther.de>
Date: Mon, 22 Dec 2025 11:14:57 +0100
Subject: [PATCH] Replace CI_GH_TOKEN with OPENPROJECTCI_GH_CORE_PAT

---
 .github/workflows/continuous-delivery.yml                   | 1 -
 .../create-merge-from-previous-release-branch-pr.yml        | 6 +++---
 .github/workflows/create-merge-release-into-dev-pr.yml      | 4 ++--
 3 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/continuous-delivery.yml b/.github/workflows/continuous-delivery.yml
index 6f547ee376f..f59458f4394 100644
--- a/.github/workflows/continuous-delivery.yml
+++ b/.github/workflows/continuous-delivery.yml
@@ -20,7 +20,6 @@ jobs:
           TOKEN: ${{ secrets.OPENPROJECTCI_FLAVOUR_TRIGGER_TOKEN }}
           REPOSITORY: opf/openproject-flavours
           WORKFLOW_ID: ci.yml
-          # Use environment variable to prevent command injection
           REF_NAME: ${{ github.ref_name }}
         run: |
           PAYLOAD=$(jq -n --arg ref "$REF_NAME" '{"ref": "dev", "inputs": {"ref": $ref}}')
diff --git a/.github/workflows/create-merge-from-previous-release-branch-pr.yml b/.github/workflows/create-merge-from-previous-release-branch-pr.yml
index b165621ece6..34df39ea3bd 100644
--- a/.github/workflows/create-merge-from-previous-release-branch-pr.yml
+++ b/.github/workflows/create-merge-from-previous-release-branch-pr.yml
@@ -14,7 +14,7 @@ jobs:
     steps:
     - id: find_previous_release
       env:
-        GITHUB_TOKEN: ${{ secrets.OPENPROJECT_CI_GH_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.OPENPROJECTCI_GH_CORE_PAT }}
         GITHUB_REPOSITORY: ${{ github.repository }}
       run: |
         BRANCH=$(curl -H "Authorization: token $GITHUB_TOKEN" \
@@ -29,7 +29,7 @@ jobs:
         echo "branch=${BRANCH}" >> $GITHUB_OUTPUT
     - id: find_latest_release
       env:
-        GITHUB_TOKEN: ${{ secrets.OPENPROJECT_CI_GH_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.OPENPROJECTCI_GH_CORE_PAT }}
         GITHUB_REPOSITORY: ${{ github.repository }}
       run: |
         BRANCH=$(curl -H "Authorization: token $GITHUB_TOKEN" \
@@ -152,4 +152,4 @@ jobs:
             fi
           fi
         env:
-          GITHUB_TOKEN: ${{ secrets.OPENPROJECT_CI_GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENPROJECTCI_GH_CORE_PAT }}
diff --git a/.github/workflows/create-merge-release-into-dev-pr.yml b/.github/workflows/create-merge-release-into-dev-pr.yml
index 0d2bd49e729..035efc1b0e9 100644
--- a/.github/workflows/create-merge-release-into-dev-pr.yml
+++ b/.github/workflows/create-merge-release-into-dev-pr.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
     - id: find_latest_release
       env:
-        GITHUB_TOKEN: ${{ secrets.OPENPROJECT_CI_GH_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.OPENPROJECTCI_GH_CORE_PAT }}
         GITHUB_REPOSITORY: ${{ github.repository }}
       run: |
         BRANCH=$(curl -H "Authorization: token $GITHUB_TOKEN" \
@@ -107,4 +107,4 @@ jobs:
             fi
           fi
         env:
-          GITHUB_TOKEN: ${{ secrets.OPENPROJECT_CI_GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.OPENPROJECTCI_GH_CORE_PAT }}