From e346d329412d31ca0ceb92620d6c2fb65c7d7a8f Mon Sep 17 00:00:00 2001
From: Maciej Olko <maciej.olko@affirm.com>
Date: Wed, 3 Jun 2026 11:43:37 +0200
Subject: [PATCH 1/4] ci: update push step to use GITHUB_TOKEN for
 authentication

---
 .github/workflows/ci.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index cbdc007b79a..04477c1d95b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -242,5 +242,9 @@ jobs:
       - name: Push changes
         working-directory: cpython/Doc/locales
         if: ${{ contains(fromJSON('["schedule", "workflow_dispatch"]'), github.event_name) }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
-          git push
+          git remote set-url origin \
+            https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
+          git push origin HEAD:${{ matrix.cpython_version }}

From 52dc26195fa9481e92f75ed63c78e722aa5600d8 Mon Sep 17 00:00:00 2001
From: Maciej Olko <maciej.olko@affirm.com>
Date: Wed, 3 Jun 2026 11:47:25 +0200
Subject: [PATCH 2/4] ci: simplify push command in CI configuration

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 04477c1d95b..c0ca3c79ef7 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -247,4 +247,4 @@ jobs:
         run: |
           git remote set-url origin \
             https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
-          git push origin HEAD:${{ matrix.cpython_version }}
+          git push

From a6839b1e3cc451651852dec107286073bba6074e Mon Sep 17 00:00:00 2001
From: Maciej Olko <maciej.olko@affirm.com>
Date: Wed, 3 Jun 2026 11:48:45 +0200
Subject: [PATCH 3/4] ci: quote GITHUB_TOKEN URL in push command

---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c0ca3c79ef7..8c563c3e5f1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -246,5 +246,5 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git remote set-url origin \
-            https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git
+            "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
           git push

From 64b8f4c0c8e94138578f914d91abfc9b970d91aa Mon Sep 17 00:00:00 2001
From: Maciej Olko <maciej.olko@affirm.com>
Date: Wed, 3 Jun 2026 20:01:02 +0200
Subject: [PATCH 4/4] ci[download-glossary]: add GITHUB_TOKEN to push command
 for authentication

---
 .github/workflows/download-glossary.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/download-glossary.yml b/.github/workflows/download-glossary.yml
index f9fa04e2809..f3d043eb264 100644
--- a/.github/workflows/download-glossary.yml
+++ b/.github/workflows/download-glossary.yml
@@ -62,6 +62,8 @@ jobs:
           name: glossary
 
       - name: Commit and push if changed
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config user.name "github-actions"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
@@ -72,5 +74,7 @@ jobs:
             echo "No changes"
           else
             git commit -m "Auto-update glossary as of $(date +'%Y.%m.%d')"
+            git remote set-url origin \
+              "https://x-access-token:${GITHUB_TOKEN}@github.com/${GITHUB_REPOSITORY}.git"
             git push
           fi