From 4222ef9967e9250c861c22cd5604db69cc0726c3 Mon Sep 17 00:00:00 2001
From: Cal Corum <calcorum@users.noreply.github.com>
Date: Wed, 18 Feb 2026 13:32:17 -0600
Subject: [PATCH] Fix act_runner auth: short-form local actions + full GitHub
 URLs

DEFAULT_ACTIONS_URL=self requires local actions use short form
(cal/gitea-actions/...) so the runner passes its auth token, and
GitHub actions use full URLs (https://github.com/...) to bypass
local resolution.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 .gitea/workflows/deploy.yml | 37 ++++++++++---------------------------
 1 file changed, 10 insertions(+), 27 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index 5f2b21a..06b1d46 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -9,29 +9,16 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: https://github.com/actions/checkout@v4
         with:
           fetch-depth: 0  # Full history for tag counting
 
-      # Generate CalVer: YYYY.MM.BUILD
-      # BUILD = count of tags matching current month + 1
       - name: Generate CalVer version
-        id: meta
-        run: |
-          YEAR=$(date -u +%Y)
-          MONTH=$(date -u +%-m)
-          PREFIX="${YEAR}.${MONTH}."
-
-          git fetch --tags
-          BUILD=$(git tag -l "${PREFIX}*" | wc -l)
-          BUILD=$((BUILD + 1))
-
-          VERSION="${PREFIX}${BUILD}"
-          echo "version=${VERSION}" >> $GITHUB_OUTPUT
-          echo "CalVer version: ${VERSION}"
+        id: calver
+        uses: cal/gitea-actions/calver@main
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: https://github.com/actions/setup-node@v4
         with:
           node-version: '20'
           cache: 'npm'
@@ -43,7 +30,7 @@ jobs:
         run: npm run build
 
       - name: Deploy to Foundry server
-        uses: burnett01/rsync-deployments@7.0.1
+        uses: https://github.com/burnett01/rsync-deployments@7.0.1
         with:
           switches: -avz --delete --exclude='.git' --exclude='node_modules' --exclude='foundrydata' --exclude='.env' --exclude='.env.example' --exclude='.gitea' --exclude='.github' --exclude='.claude' --exclude='.husky' --exclude='docs' --exclude='docker-compose.yml' --exclude='test_results'
           path: ./
@@ -53,7 +40,7 @@ jobs:
           remote_key: ${{ secrets.DEPLOY_SSH_KEY }}
 
       - name: Fix ownership and restart Foundry
-        uses: appleboy/ssh-action@v1
+        uses: https://github.com/appleboy/ssh-action@v1
         with:
           host: ${{ secrets.DEPLOY_HOST }}
           username: root
@@ -62,13 +49,9 @@ jobs:
             chown -R 1000:1000 /opt/foundry/data/Data/systems/vagabond/
             cd /opt/foundry && docker compose restart foundry
 
-      # Create git tag via Gitea API (avoids branch protection issues)
       - name: Tag release
         if: success()
-        run: |
-          curl -s -X POST \
-            -H "Authorization: token ${{ github.token }}" \
-            -H "Content-Type: application/json" \
-            -d "{\"tag_name\": \"${{ steps.meta.outputs.version }}\", \"target\": \"${{ github.sha }}\", \"name\": \"${{ steps.meta.outputs.version }}\"}" \
-            "${{ github.server_url }}/api/v1/repos/${{ github.repository }}/tags"
-          echo "Created tag ${{ steps.meta.outputs.version }}"
+        uses: cal/gitea-actions/gitea-tag@main
+        with:
+          version: ${{ steps.calver.outputs.version }}
+          token: ${{ github.token }}