use token: workaround

Author: zardoy

.github/workflows/ci.yml

@@ -4,7 +4,9 @@ on:
 jobs:
   build-and-deploy:
     runs-on: ubuntu-latest
-    permissions: write-all
+    permissions:
+      contents: write
+      gists: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@master
@@ -36,21 +38,6 @@ jobs:
       - run: pnpm build-storybook
       - run: pnpm test-unit
       - run: pnpm lint
-      # - run: pnpm tsx scripts/buildNpmReact.ts
-      - run: nohup pnpm prod-start &
-      - run: nohup pnpm test-mc-server &
-      - uses: cypress-io/github-action@v5
-        with:
-          install: false
-      - uses: actions/upload-artifact@v4
-        if: failure()
-        with:
-          name: cypress-images
-          path: cypress/screenshots/
-      # - run: node scripts/outdatedGitPackages.mjs
-      #   if: ${{ github.event.pull_request.base.ref == 'release' }}
-      #   env:
-      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Parse Bundle Stats
         run: |
@@ -62,12 +49,19 @@ jobs:
       - name: Compare Bundle Stats
         id: compare
         uses: actions/github-script@v6
+        env:
+          GIST_TOKEN: ${{ secrets.GIST_TOKEN }}
         with:
           script: |
             const gistId = '${{ secrets.BUNDLE_STATS_GIST_ID }}';
 
             async function getGistContent() {
-              const { data } = await github.rest.gists.get({ gist_id: gistId });
+              const { data } = await github.rest.gists.get({
+                gist_id: gistId,
+                headers: {
+                  authorization: `token ${process.env.GIST_TOKEN}`
+                }
+              });
               return JSON.parse(data.files['bundle-stats.json'].content || '{}');
             }
 
@@ -78,21 +72,47 @@ jobs:
             const comparison = `minecraft.html (normal build gzip)\n${baseStats.total}MB (${baseStats.gzipped}MB compressed) -> ${newStats.total}MB (${newStats.gzipped}MB compressed)`;
             core.setOutput('stats', comparison);
 
+      # - run: pnpm tsx scripts/buildNpmReact.ts
+      - run: nohup pnpm prod-start &
+      - run: nohup pnpm test-mc-server &
+      - uses: cypress-io/github-action@v5
+        with:
+          install: false
+      - uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: cypress-images
+          path: cypress/screenshots/
+      # - run: node scripts/outdatedGitPackages.mjs
+      #   if: ${{ github.event.pull_request.base.ref == 'release' }}
+      #   env:
+      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
       - name: Store Bundle Stats
         if: github.event.pull_request.base.ref == 'next'
         uses: actions/github-script@v6
+        env:
+          GIST_TOKEN: ${{ secrets.GIST_TOKEN }}
         with:
           script: |
             const gistId = '${{ secrets.BUNDLE_STATS_GIST_ID }}';
 
             async function getGistContent() {
-              const { data } = await github.rest.gists.get({ gist_id: gistId });
+              const { data } = await github.rest.gists.get({
+                gist_id: gistId,
+                headers: {
+                  authorization: `token ${process.env.GIST_TOKEN}`
+                }
+              });
               return JSON.parse(data.files['bundle-stats.json'].content || '{}');
             }
 
             async function updateGistContent(content) {
               await github.rest.gists.update({
                 gist_id: gistId,
+                headers: {
+                  authorization: `token ${process.env.GIST_TOKEN}`
+                },
                 files: {
                   'bundle-stats.json': {
                     content: JSON.stringify(content, null, 2)