.forgejo/workflows/release.yml

@@ -5,11 +5,9 @@
 # Requirements:
 #   - A Forgejo Actions runner on the instance. Adjust `runs-on` to a label
 #     your runner actually advertises (common: docker, ubuntu-latest).
-#   - A repository/org secret RELEASE_TOKEN: a token with read:user,
+#   - A repository/org secret RELEASE_TOKEN: a token with package:write and
-#     write:package and write:repository scopes for an account allowed to
+#     repository:write scopes for an account allowed to publish packages
-#     publish packages under the heavy-duty org. read:user is required because
+#     under the heavy-duty org.
-#     publish-release.sh runs `stoke auth login`, which validates the token
-#     against /user.
 
 name: release
 on:

changelog.d/60.md

@@ -1 +0,0 @@
-- Correct the release workflow's documented token scopes to include the identity check required before publishing. (#60).