From 38b7aad463b4b720496b7143b5fd75ce9bfccf3e Mon Sep 17 00:00:00 2001
From: Thomas Jung <thomas.jung@sap.com>
Date: Mon, 3 Aug 2026 17:53:01 -0400
Subject: [PATCH] fix(ci): add GitHub Packages auth to docs-deploy workflow

PR #1457 added the private GitHub Packages dependency
@sap-tutorials/cds-alert-notification (+ .npmrc reading ${NODE_AUTH_TOKEN})
and updated 8 workflows with 'packages: read' + NODE_AUTH_TOKEN, but missed
docs-deploy.yml. Its 'npm ci' now fails with E401 Unauthorized against
npm.pkg.github.com.

Mirror the sibling-workflow pattern: grant 'packages: read' and set
NODE_AUTH_TOKEN on the npm ci step.
---
 .github/workflows/docs-deploy.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/docs-deploy.yml b/.github/workflows/docs-deploy.yml
index c8b6e7581..6aebfff59 100644
--- a/.github/workflows/docs-deploy.yml
+++ b/.github/workflows/docs-deploy.yml
@@ -12,6 +12,7 @@ on:
 
 permissions:
   contents: read
+  packages: read
   pages: write
   id-token: write
 
@@ -29,6 +30,8 @@ jobs:
           node-version: 22
           cache: npm
       - run: npm ci
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.PACKAGES_READ_TOKEN || secrets.GITHUB_TOKEN }}
       - run: npm run docs:build
       - uses: actions/configure-pages@v5
       - uses: actions/upload-pages-artifact@v3