eifinger-bot 4919ec5cf1 fix: persist credentials for git push in update-major-minor-tags workflow (#312) ...

## Problem

After upgrading to `actions/checkout@v6`, the `update-major-minor-tags`
workflow fails with:

```
fatal: could not read Username for 'https://github.com': No such device or address
```

Example:
https://github.com/astral-sh/ruff-action/actions/runs/21509988231/job/61974754475

## Root Cause

`actions/checkout@v6` changed the behavior of `persist-credentials:
false`. In v6, credentials are immediately cleaned up after checkout,
whereas in v5 they remained available during the job.

The workflow sets `persist-credentials: false` and then tries to `git
push` — but the auth credentials are already gone.

## Fix

Explicitly set `persist-credentials: true` (removing the `false` value).
The workflow already has minimal permissions (`contents: write`) scoped
only to this job, so this is safe.

Added a `zizmor: ignore[artipacked]` comment in case the security linter
flags this pattern.

2026-01-30 19:43:42 +01:00

..

codeql-analysis.yml

Bump dependencies and actions (#311)

2026-01-30 09:31:31 +01:00

release-drafter.yml

Bump dependencies and actions (#311)

2026-01-30 09:31:31 +01:00

test.yml

ci: add zizmor security linting (#313)

2026-01-30 18:37:28 +00:00

update-known-checksums.yml

Bump dependencies and actions (#311)

2026-01-30 09:31:31 +01:00

update-major-minor-tags.yml

fix: persist credentials for git push in update-major-minor-tags workflow (#312)

2026-01-30 19:43:42 +01:00