chore: Release spectrust version 0.2.9

The ephemeral GITHUB_TOKEN isn't accepted for package upload; use a
dedicated write:package secret instead. Skip cleanly when unset and
continue-on-error so the registry mirror never blocks the AUR push/release.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GLUwWE2KmFPzhKaf67tWbx

.gitea/workflows/release.yml

@@ -132,19 +132,27 @@ jobs:
       # (docs.gitea.com/usage/packages/arch). The PKGBUILD only repacks the
       # release tarballs, so CARCH can produce both architectures from this
       # one host. Consumers: see the infrastructure README.
+      # Best-effort mirror to the instance Arch registry. The ephemeral
+      # GITHUB_TOKEN is not accepted as a package-write credential, so this
+      # uses a dedicated REGISTRY_TOKEN secret (a write:package token for bl);
+      # if it is unset the step is skipped, and continue-on-error keeps a
+      # registry hiccup from failing the release or the AUR push.
       - name: Publish to the Arch package registry
+        continue-on-error: true
         run: |
           set -euo pipefail
+          if [ -z "${{ secrets.REGISTRY_TOKEN }}" ]; then
+            echo "::warning::REGISTRY_TOKEN not set — skipping Arch registry publish"
+            exit 0
+          fi
           cd aur
-          # Build both arches here (repackaging the released binaries) and
-          # push each to the instance Arch registry. Use --packagelist for
-          # the exact filename (honours the runner's PKGEXT/PKGDEST) rather
-          # than globbing, and !strip (in the PKGBUILD) so packaging the
-          # foreign-arch binary on this host does not try to strip it.
+          # --packagelist gives the exact filename (honours the runner's
+          # PKGEXT); !strip (in the PKGBUILD) lets the foreign-arch binary be
+          # packaged on this host without stripping.
           for carch in aarch64 x86_64; do
             pkgfile=$(CARCH="$carch" makepkg --packagelist | tail -1)
             CARCH="$carch" makepkg -f --nodeps --noconfirm --skipinteg
-            curl --fail-with-body --user "${{ gitea.actor }}:${{ secrets.GITHUB_TOKEN }}" \
+            curl --fail-with-body --user "bl:${{ secrets.REGISTRY_TOKEN }}" \
               --upload-file "$pkgfile" \
               "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/arch/uhhm"
           done

Cargo.lock

@@ -737,7 +737,7 @@ checksum = "8ed6a63f02c8539c91a8685a86f4099661ba3da017932f6ebbea6de3f0fa7c90"
 
 [[package]]
 name = "spectrust"
-version = "0.2.8"
+version = "0.2.9"
 dependencies = [
  "byteorder",
  "clap",

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "spectrust"
-version = "0.2.8"
+version = "0.2.9"
 edition = "2021"
 
 [profile.release]

aur/PKGBUILD

@@ -1,6 +1,6 @@
 # Maintainer: Bendik Aagaard Lynghaug <bendik.lynghaug@gmail.com>
 pkgname=spectrust
-pkgver=0.2.8
+pkgver=0.2.9
 pkgrel=1
 pkgdesc="Terminal audio spectrum analyzer"
 arch=('x86_64' 'aarch64')