From 64291128938b78910bd8cfcb168104acc49aaefe Mon Sep 17 00:00:00 2001
From: fa-sharp <farshadkt@gmail.com>
Date: Fri, 20 Feb 2026 00:21:12 -0500
Subject: [PATCH] ci: permissions

---
 .github/workflows/dependency-check.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml
index 4406de1..f2d7e7e 100644
--- a/.github/workflows/dependency-check.yml
+++ b/.github/workflows/dependency-check.yml
@@ -193,9 +193,11 @@ jobs:
       - name: Create Pull Request with dependency updates
         if: steps.upgrade.outputs.has_updates == 'true'
         uses: infinilabs/gitea-pr@v0
+        permissions:
+          contents: write
         with:
-          url: ${{ secrets.GITEA_URL }}
-          token: ${{ secrets.GITEA_TOKEN }}
+          url: ${{ github.server_url }}
+          token: ${{ secrets.GITHUB_TOKEN }}
           path: ${{ github.workspace }}/axum-template
           commit-message: "chore: upgrade dependencies"
           committer: "Dependency Bot <bot@github.actions>"