chore: update token

Author: arcnmx

.github/workflows/taimihud-datasources.yml

@@ -108,6 +108,8 @@ jobs:
       with:
         files: .ci/artifacts/share/taimihud/sources.toml
   updates:
+    env:
+      CI_GITHUB_TOKEN: ${{ github.token }}
     if: github.event_name != 'push'
     name: taimihud-datasources-updates
     runs-on: ubuntu-latest

ci/config.nix

@@ -34,6 +34,7 @@ in
         };
       };
       updates = {
+        gh-actions.env.CI_GITHUB_TOKEN = "\${{ github.token }}";
         tasks = {
           build.inputs = legacyPackages.updateChecks ++ [
             legacyPackages.allIncompleteSrcs

modules/github/update-check.nix

@@ -15,7 +15,8 @@
   outputHashMode = "flat";
   preferLocalBuild = true;
   allowSubstitutes = false;
-  impureEnvVars = lib.fetchers.proxyImpureEnvVars ++ [ "NIX_CURL_FLAGS" ];
+  impureEnvVars = lib.fetchers.proxyImpureEnvVars ++ [ "NIX_CURL_FLAGS" "NIX_GITHUB_TOKEN" "CI_GITHUB_TOKEN" ];
+  ghTokenEval = builtins.getEnv "CI_GITHUB_TOKEN";
   nativeBuildInputs = [ curl jq ];
   #queryRelease = "sort_by(.tag_name) | [.[]|select(.prerelease==false and .draft==false)] | .[-1].tag_name";
   queryTag = "sort_by(.name) | .[-1].name";
@@ -25,19 +26,28 @@
   #RELEASE_URL="https://api.github.com/repos/$owner/$repo/releases"
   RELEASE_URL="https://api.github.com/repos/$owner/$repo/releases/latest"
   TAGS_URL="https://api.github.com/repos/$owner/$repo/tags"
+  GH_CURL_FLAGS=(
+    --insecure
+    --location-trusted
+    -fSsL
+    -H "X-GitHub-Api-Version: 2022-11-28"
+    $NIX_CURL_FLAGS
+  )
+  if [[ -z ''${NIX_GITHUB_TOKEN:-} ]]; then
+    NIX_GITHUB_TOKEN=''${CI_GITHUB_TOKEN:-''${ghTokenEval-}}
+  fi
+  if [[ -n ''${NIX_GITHUB_TOKEN-} ]]; then
+    GH_CURL_FLAGS+=(
+      -H "Authorization: $NIX_GITHUB_TOKEN"
+    )
+  fi
   if REPO_RELEASES=$(curl \
-    --insecure \
-    -fSsL \
-    -H "X-GitHub-Api-Version: 2022-11-28" \
-    $NIX_CURL_FLAGS \
+    "''${GH_CURL_FLAGS[@]}" \
     "$RELEASE_URL"
   ); then
     REPO_LATEST=$(jq -r "$queryReleaseLatest" - <<< "$REPO_RELEASES")
   elif REPO_TAGS=$(curl \
-    --insecure \
-    -fSsL \
-    -H "X-GitHub-Api-Version: 2022-11-28" \
-    $NIX_CURL_FLAGS \
+    "''${GH_CURL_FLAGS[@]}" \
     "$TAGS_URL"
   ); then
     REPO_LATEST=$(jq -r "$queryTag" - <<< "$REPO_TAGS")