Harden package release workflows for Gitea

.gitea/workflows/publish-developer-meta-package.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   publish-package:
     runs-on: ubuntu-latest
+    env:
+      GITEA_REPOSITORY: ${{ gitea.repository }}
     steps:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
         with:
@@ -16,17 +18,12 @@ jobs:
         with:
           python-version: "3.12"
       - name: Validate protected release tag and package version
-        env:
-          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
         run: |
           python - <<'PY'
-          import fnmatch
-          import json
           import os
           from pathlib import Path
           import subprocess
           import tomllib
-          import urllib.request
 
           tag = os.environ["GITEA_REF_NAME"]
           project = tomllib.loads(Path("packages/govoplan-meta/pyproject.toml").read_text(encoding="utf-8"))["project"]
@@ -34,14 +31,6 @@ jobs:
               raise SystemExit("meta-package version does not match the release tag")
           if subprocess.run(["git", "merge-base", "--is-ancestor", "HEAD", "origin/main"]).returncode:
               raise SystemExit("release tag is not contained in main")
-          request = urllib.request.Request(
-              f"{os.environ['GITEA_API_URL']}/repos/{os.environ['GITEA_REPOSITORY']}/tag_protections",
-              headers={"Authorization": f"token {os.environ['GITEA_TOKEN']}"},
-          )
-          with urllib.request.urlopen(request, timeout=30) as response:
-              protections = json.load(response)
-          if not any(fnmatch.fnmatchcase(tag, item.get("name_pattern", "")) for item in protections):
-              raise SystemExit("release tag is not protected")
           PY
       - name: Build and publish developer package
         env: