From d89ff0b2f27ed59fd89e7cac8712eed2a60a8ca8 Mon Sep 17 00:00:00 2001
From: Kjeld Schouten <info@kjeldschouten.nl>
Date: Tue, 9 Jun 2026 08:37:19 +0200
Subject: [PATCH] fix(ci): ensure forgetool fetch is authenticated

---
 .github/workflows/charts-release.yaml | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/charts-release.yaml b/.github/workflows/charts-release.yaml
index c4f99deb1ad..eb2799a8a43 100644
--- a/.github/workflows/charts-release.yaml
+++ b/.github/workflows/charts-release.yaml
@@ -62,10 +62,16 @@ jobs:
 
       - name: Setup Forgetool
         shell: bash
+        env:
+          GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
         run: |-
-          TAG="$(curl -fsSL \
-            https://api.github.com/repos/trueforge-org/forgetool/releases/latest \
-            | jq -r '.tag_name')"
+          TAG=""
+          if RELEASES_JSON="$(curl -fsSL \
+            -H "Authorization: Bearer ${GITHUB_TOKEN}" \
+            -H "Accept: application/vnd.github+json" \
+            https://api.github.com/repos/trueforge-org/forgetool/releases/latest)"; then
+            TAG="$(jq -r '.tag_name // empty' <<< "${RELEASES_JSON}")"
+          fi
           [ -n "${TAG}" ] && [ "${TAG}" != "null" ] || { echo "Failed to determine latest stable forgetool release tag"; exit 1; }
           VERSION="${TAG#v}"
           VERSION="${VERSION#forgetool-v}"