From a029b43fc45535828dd29bfd03f7d9b96adce549 Mon Sep 17 00:00:00 2001
From: Harvey Zuccon <hzuccon@gmail.com>
Date: Thu, 15 Jan 2026 08:50:57 +0000
Subject: [PATCH] Resolve "Fix CI using expired Gitlab token"

---
 .gitlab-ci.yml    | 6 ++++--
 package-lock.json | 6 +++---
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index e1861de..474b758 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -97,8 +97,10 @@ publish:development:
     - git config --global user.email "${GITLAB_USER_EMAIL}"
     - git config --global user.name "${GITLAB_USER_NAME}"
 
-    # Configure git to push with CI token
-    - git remote set-url origin "https://gitlab-ci-token:$GL_TOKEN@$CI_SERVER_HOST/$CI_PROJECT_PATH.git"
+    # Configure git to push with CI token.
+    # CI_REPOSITORY_URL uses the CI_JOB_TOKEN to form the repository URL, in the format "https://gitlab-ci-token:$CI_JOB_TOKEN@gitlab.example.com/my-group/my-project.git"
+    # The CI_JOB_TOKEN is short lived and only valid for the duration of the CI/CD job.
+    - git remote set-url origin "${CI_REPOSITORY_URL}"
 
     # Ensure full Git history so Lerna can detect changes
     - git fetch --unshallow
diff --git a/package-lock.json b/package-lock.json
index 19c63d0..3908ce8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12955,9 +12955,9 @@
       }
     },
     "node_modules/preact": {
-      "version": "10.27.2",
-      "resolved": "https://registry.npmjs.org/preact/-/preact-10.27.2.tgz",
-      "integrity": "sha512-5SYSgFKSyhCbk6SrXyMpqjb5+MQBgfvEKE/OC+PujcY34sOpqtr+0AZQtPYx5IA6VxynQ7rUPCtKzyovpj9Bpg==",
+      "version": "10.28.2",
+      "resolved": "https://registry.npmjs.org/preact/-/preact-10.28.2.tgz",
+      "integrity": "sha512-lbteaWGzGHdlIuiJ0l2Jq454m6kcpI1zNje6d8MlGAFlYvP2GO4ibnat7P74Esfz4sPTdM6UxtTwh/d3pwM9JA==",
       "dev": true,
       "license": "MIT",
       "funding": {