From 6aa4f3ce94d1a80174d79c569e93b113f2d1713f Mon Sep 17 00:00:00 2001
From: Kyle Barron <kyle@developmentseed.org>
Date: Thu, 2 Apr 2026 12:41:31 -0400
Subject: [PATCH] ci: Fix docs publish auth

---
 .github/workflows/deploy-mkdocs.yml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.github/workflows/deploy-mkdocs.yml b/.github/workflows/deploy-mkdocs.yml
index 2aef4532..4e4013a0 100644
--- a/.github/workflows/deploy-mkdocs.yml
+++ b/.github/workflows/deploy-mkdocs.yml
@@ -12,10 +12,18 @@ jobs:
     name: Deploy docs
     runs-on: ubuntu-latest
     steps:
+      - uses: actions/create-github-app-token@v3.0.0
+        id: app-token
+        with:
+          app-id: ${{ secrets.DS_RELEASE_BOT_ID }}
+          private-key: ${{ secrets.DS_RELEASE_BOT_PRIVATE_KEY }}
+          permission-contents: write
+
       - uses: actions/checkout@v6
         # We need to additionally fetch the gh-pages branch for mike deploy
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token }}
 
       - name: Install a specific version of uv
         uses: astral-sh/setup-uv@v7