From eea409178cd68a6d2a61daef231afa969ca6d199 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Agust=C3=ADn=20Borgna?=
 <121866228+aborgna-q@users.noreply.github.com>
Date: Fri, 16 Aug 2024 11:28:20 +0100
Subject: [PATCH] ci: Ensure release-plz always pushes as @hugrbot (#1436)

This should solve the issue where CI checks wouldn't run in release PRs
unless a human triggered an update.

See
https://github.com/MarcoIeni/release-plz/blob/main/website/docs/github/token.md#use-a-personal-access-token
---
 .github/workflows/release-plz.yml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 0552da80f..4edd7602b 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -1,10 +1,6 @@
 # Automatic changelog, version bumping, and semver-checks with release-plz for rust projects
 name: Release-plz 🦀
 
-permissions:
-  pull-requests: write
-  contents: write
-
 on:
   push:
     branches:
@@ -19,6 +15,7 @@ jobs:
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
+          token: ${{ secrets.HUGRBOT_PAT }}
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
       - name: Run release-plz