- Fine-grained PATs need no explicit permissions for public repo
read-only access — correct the how-to doc
- Add mirror-update-pats to mise-tasks reference
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
GitHub tightened unauthenticated rate limits in May 2025. Add a
GitHub fine-grained PAT (stored in 1Password) to all mirror fetches:
- mirror-create: auto-includes PAT for GitHub upstreams at creation
- mirror-update-pats: new task to push PAT to all existing mirrors
via SSH git config rewrite on indri
- app.ini.j2: explicit [mirror] section (8h default, 10m minimum)
- manage-forgejo-mirrors how-to: full PAT rotation procedure
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>