From 5dc43f1928dc22c1a3498313a667956cba69eebc Mon Sep 17 00:00:00 2001
From: Fabien Potencier <fabien@potencier.org>
Date: Fri, 29 May 2026 23:17:31 +0200
Subject: [PATCH] [ci] Fix BOT_TOKEN auth for the Flex endpoint update push

---
 .github/workflows/callable-flex-update.yml | 6 +++++-
 .github/workflows/flex-update.yml          | 2 ++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/callable-flex-update.yml b/.github/workflows/callable-flex-update.yml
index 338bb3b0..c6a65f6b 100644
--- a/.github/workflows/callable-flex-update.yml
+++ b/.github/workflows/callable-flex-update.yml
@@ -13,6 +13,9 @@ on:
             versions_json:
                 required: false
                 type: string
+        secrets:
+            token:
+                required: true
 
 jobs:
     flex-update:
@@ -52,4 +55,5 @@ jobs:
                     php .github/recipes-checker-main/run generate:recipes-readme index.json ${{ inputs.contrib && '--contrib' || '' }} > RECIPES.md
                     git add RECIPES.md
                     git commit -m 'Update Flex endpoint' || true
-                    git push origin -f flex/main
+                    git config --local --unset-all http.https://github.com/.extraheader || true
+                    git push -f "https://x-access-token:${{ secrets.token }}@github.com/${{ github.repository }}" "flex/main"
diff --git a/.github/workflows/flex-update.yml b/.github/workflows/flex-update.yml
index d57d0f97..eecea714 100644
--- a/.github/workflows/flex-update.yml
+++ b/.github/workflows/flex-update.yml
@@ -14,3 +14,5 @@ jobs:
         uses: symfony/recipes/.github/workflows/callable-flex-update.yml@main
         with:
             versions_json: .github/versions.json
+        secrets:
+            token: ${{ secrets.BOT_TOKEN }}