From 4a5c9c632dcd51860473b818928bc6fbe4e9de94 Mon Sep 17 00:00:00 2001
From: Julian Pollinger <julian@pollinger.dev>
Date: Thu, 22 Jan 2026 11:07:03 +0100
Subject: [PATCH 1/2] ci: update permissions and fix token name in workflow

---
 .dockerignore            |  1 +
 .github/workflows/ci.yml | 12 ++++++++++--
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/.dockerignore b/.dockerignore
index fd4fd83b..7f0c5761 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -13,3 +13,4 @@
 dev-dist
 .tsbuildinfo
 Dockerfile
+**/*.tsbuildinfo
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e30d722d..b04226d9 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,14 @@ on:
   merge_group:
     branches: [ develop ]
 
+permissions:
+  id-token: write  # Required for OIDC
+  pages: write
+  contents: write
+  issues: write
+  pull-requests: write
+  packages: write
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -61,7 +69,7 @@ jobs:
         name: Release Server
         working-directory: ./server
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - run: yarn up
       - name: Generate license file for client
@@ -71,7 +79,7 @@ jobs:
         name: Release Client
         working-directory: ./client
         env:
-          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
       - run: yarn up
       - name: Git Settings

From c99ecefe19dadb311e83a2dcff2c6ef42a0ed460 Mon Sep 17 00:00:00 2001
From: Julian Pollinger <julian@pollinger.dev>
Date: Thu, 22 Jan 2026 11:07:24 +0100
Subject: [PATCH 2/2] build: update server image to version 3-latest

---
 docker-compose.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 13bb7430..35569c38 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -13,7 +13,7 @@ services:
     volumes:
       - ./postgres-data:/var/lib/postgresql/data
   server:
-    image: ghcr.io/educorvi/timeclicker:2-latest
+    image: ghcr.io/educorvi/timeclicker:3-latest
     restart: always
     depends_on:
       - db