From 5009cbf6dad04bbf8cf5bed31efe14f0c43b4e4e Mon Sep 17 00:00:00 2001
From: Damien Retzinger <damienwebdev@gmail.com>
Date: Mon, 27 Apr 2026 11:56:02 -0400
Subject: [PATCH] ci: replace pinback PAT with custom PAT

---
 .github/workflows/release-pinback.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-pinback.yml b/.github/workflows/release-pinback.yml
index 188bd03..cf40731 100644
--- a/.github/workflows/release-pinback.yml
+++ b/.github/workflows/release-pinback.yml
@@ -11,12 +11,11 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
-      pull-requests: write
     steps:
       - uses: actions/checkout@v6
         with:
           ref: main
-          token: ${{ secrets.GRAYCORE_GITHUB_TOKEN }}
+          token: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
 
       - name: Extract version
         id: version
@@ -60,7 +59,7 @@ jobs:
       - name: Open PR
         if: ${{ steps.local-changes.outputs.HAS_LOCAL_CHANGES == 'true' }}
         env:
-          GH_TOKEN: ${{ secrets.GRAYCORE_GITHUB_TOKEN }}
+          GH_TOKEN: ${{ secrets.GRAYBOT_PIN_BACK_PAT }}
         run: |
           gh pr create \
             --base main \