From ae39a7e1ea23422da1f08eca193e5cc7e9988746 Mon Sep 17 00:00:00 2001
From: Tim Grelka <tim@grelka.net>
Date: Wed, 4 Feb 2026 13:10:10 +0100
Subject: [PATCH 1/2] fix: update token usage for pytest report workflow

---
 .github/workflows/pytest-report.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pytest-report.yml b/.github/workflows/pytest-report.yml
index 6dcac0c..b2fde3a 100644
--- a/.github/workflows/pytest-report.yml
+++ b/.github/workflows/pytest-report.yml
@@ -5,6 +5,7 @@ on:
     types: [completed]
 permissions:
     checks: write
+    actions: read
 jobs:
   checks:
     runs-on: ubuntu-latest
@@ -13,7 +14,7 @@ jobs:
         uses: actions/download-artifact@v6
         with:
           name: pytest-report
-          github-token: ${{ secrets.GH_PAT }}
+          github-token: ${{ github.token }}
           run-id: ${{ github.event.workflow_run.id }}
       - name: Publish Test Report
         uses: mikepenz/action-junit-report@v6
@@ -21,4 +22,4 @@ jobs:
           commit: ${{github.event.workflow_run.head_sha}}
           report_paths: pytest.xml
           comment: true
-          pr_id: ${{ github.event.workflow_run.pull_requests[0].number }}
\ No newline at end of file
+          pr_id: ${{ github.event.workflow_run.pull_requests[0].number }}

From 58535658a530b5812ac4f9f87ee804af99942e83 Mon Sep 17 00:00:00 2001
From: Tim Grelka <tim@grelka.net>
Date: Wed, 4 Feb 2026 13:46:20 +0100
Subject: [PATCH 2/2] fix: allow writing of pull request comments

---
 .github/workflows/pytest-report.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pytest-report.yml b/.github/workflows/pytest-report.yml
index b2fde3a..8205b1b 100644
--- a/.github/workflows/pytest-report.yml
+++ b/.github/workflows/pytest-report.yml
@@ -4,8 +4,9 @@ on:
     workflows: [Pytest]
     types: [completed]
 permissions:
-    checks: write
     actions: read
+    checks: write
+    pull-requests: write
 jobs:
   checks:
     runs-on: ubuntu-latest