Introduces role-based Gitea API token environment variables:
CI_GITEA_API_TOKEN for CI workflows
REVIEWER_GITEA_API_TOKEN for PR approvals (different user from author)
DEVELOPER_GITEA_API_TOKEN for local tooling
Adds devx.tokens helpers with backwards compatibility for legacy names. All devx CI scripts, tools, workflows, Makefile, and .env.example updated to use the role-appropriate token.
Closes DEVX-123.
Introduces role-based Gitea API token environment variables:
- `CI_GITEA_API_TOKEN` for CI workflows
- `REVIEWER_GITEA_API_TOKEN` for PR approvals (different user from author)
- `DEVELOPER_GITEA_API_TOKEN` for local tooling
Adds `devx.tokens` helpers with backwards compatibility for legacy names. All devx CI scripts, tools, workflows, Makefile, and `.env.example` updated to use the role-appropriate token.
Add `devx.tokens` helper module with `get_ci_token()`,
`get_reviewer_token()`, `get_developer_token()`, and `get_vikunja_token()`.
All devx tools, CI scripts, molecule helpers, workflows, Makefile, and
.env.example now use the role-appropriate token:
- `CI_GITEA_API_TOKEN` for CI workflows
- `REVIEWER_GITEA_API_TOKEN` for PR approvals (must be a different user
from the PR author)
- `DEVELOPER_GITEA_API_TOKEN` for local development tooling
Legacy names `CI_GITEA_TOKEN` and `REVIEW_GITEA_TOKEN` remain accepted
for backwards compatibility. Update tests to cover the new helpers and
ensure 100% coverage.
DEVX-123
Generated with [Devin](https://devin.ai)
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Documentation: WARNING — source files changed but no docs updated
Tests: WARNING — source files changed but no test files updated
Commit conventions: OK
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
## Automated PR Review
- Architecture compliance: OK
- Best practices: OK
- Security: OK
- i18n: OK
- Resource management: OK
- Documentation: WARNING — source files changed but no docs updated
- Tests: WARNING — source files changed but no test files updated
- Commit conventions: OK
No issues found by automated checks.
---
**Auto-merge:** If all CI checks pass, this PR will be merged automatically.
Add the translation key for the new error message.
Update unit tests that assert 'no token' behaviour to also clear the
new role-based token environment variables so they remain isolated when
or is set in the
environment.
DEVX-123
Documentation: WARNING — source files changed but no docs updated
Tests: WARNING — source files changed but no test files updated
Commit conventions: OK
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
## Automated PR Review
- Architecture compliance: OK
- Best practices: OK
- Security: OK
- i18n: OK
- Resource management: OK
- Documentation: WARNING — source files changed but no docs updated
- Tests: WARNING — source files changed but no test files updated
- Commit conventions: OK
No issues found by automated checks.
---
**Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto
approved these changes 2026-07-08 19:27:01 +00:00
Documentation: WARNING — source files changed but no docs updated
Tests: WARNING — source files changed but no test files updated
Commit conventions: OK
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
## Automated PR Review
- Architecture compliance: OK
- Best practices: OK
- Security: OK
- i18n: OK
- Resource management: OK
- Documentation: WARNING — source files changed but no docs updated
- Tests: WARNING — source files changed but no test files updated
- Commit conventions: OK
No issues found by automated checks.
---
**Auto-merge:** If all CI checks pass, this PR will be merged automatically.
kireto
approved these changes 2026-07-08 19:30:08 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
emil
kireto
Closes DEVX-123.
Introduces role-based Gitea API token environment variables:
CI_GITEA_API_TOKENfor CI workflowsREVIEWER_GITEA_API_TOKENfor PR approvals (different user from author)DEVELOPER_GITEA_API_TOKENfor local toolingAdds
devx.tokenshelpers with backwards compatibility for legacy names. All devx CI scripts, tools, workflows, Makefile, and.env.exampleupdated to use the role-appropriate token.test
Automated PR Review
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
Automated PR Review
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
Auto-approved: all CI checks passed (quality, pr-review, release-dry-run).
Automated PR Review
No issues found by automated checks.
Auto-merge: If all CI checks pass, this PR will be merged automatically.
Auto-approved: all CI checks passed (quality, pr-review, release-dry-run).