From a2458abd909a3f8a97f0e3831d6ff2ba9176bc50 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 02:10:32 +0300
Subject: [PATCH 01/36] #1 : Publish generic package to gitea + basic skeleton
 for the action

---
 publish/action.yaml | 41 +++++++++++++++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 publish/action.yaml

diff --git a/publish/action.yaml b/publish/action.yaml
new file mode 100644
index 0000000..f6109d4
--- /dev/null
+++ b/publish/action.yaml
@@ -0,0 +1,41 @@
+name: publish generic package
+description: publish generic package into gitea packages
+
+inputs:
+  base_url:
+    description: gitea base url
+    required: false
+  organization:
+    description: gitea organization
+    required: true
+  user:
+    description: gitea user
+    required: true
+  token:
+    description: gitea auth token
+    required: true
+  path:
+    description: local file path
+    required: true
+  package_name:
+    description: package name
+    required: true
+  package_version:
+    description: package version
+    required: true
+  force:
+    description: force package replacement keeping the same version
+    required: false
+
+runs:
+  using: composite
+  steps:
+    - shell: bash
+      env:
+        GITEA_URL: ${{ gitea.server_url }}
+        BASE_URL: ${{ inputs.base_url }}
+      run: |
+        base_url="${BASE_URL:-$GITEA_URL}"
+        curl --user "${{ inputs.user }}:${{ inputs.token }}" \
+          --upload-file ${{ inputs.package_path }} \
+          "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}"/${{ inputs.path }}

From 64fb232d9eaacf1f06a8751c5550e81ff39ca0f5 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 02:52:03 +0300
Subject: [PATCH 02/36] #1 : Publish generic package to gitea + test job added

---
 .gitea/workflows/test.yaml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 .gitea/workflows/test.yaml

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
new file mode 100644
index 0000000..aa4cbb8
--- /dev/null
+++ b/.gitea/workflows/test.yaml
@@ -0,0 +1,20 @@
+name: Core Build (push)
+on:
+  push:
+    branches-ignore:
+      - master
+
+jobs:
+  self-test:
+    runs-on: ubuntu-latest
+    steps:
+      - run: touch text.txt
+      - uses: enarxi/ci-actions/publish
+        with:
+          organization: enarxi
+          user: devastator
+          token: ${{ secrets.PACKAGES_TOKEN }}
+          path: text.txt
+          package_version: v0.1
+          package_name: text-pack
+

From 1dd32c3b265eabe17094ab4c6d992f2acd289f97 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 02:55:12 +0300
Subject: [PATCH 03/36] #1 : Publish generic package to gitea + fixes

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index aa4cbb8..694c230 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: touch text.txt
-      - uses: enarxi/ci-actions/publish
+      - uses: enarxi/ci-actions/publish@feature/1-publish
         with:
           organization: enarxi
           user: devastator

From 724fb75fa8fd506cba58790650d64cd57089155f Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 03:00:12 +0300
Subject: [PATCH 04/36] #1 : Publish generic package to gitea + fixes

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 694c230..f27834b 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: touch text.txt
-      - uses: enarxi/ci-actions/publish@feature/1-publish
+      - uses: https://source.vague.tech/enarxi/ci-actions/publish@feature/1-publish
         with:
           organization: enarxi
           user: devastator

From 67c08f81a12cf3da62dc7140eef13804f4f64aeb Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 03:01:38 +0300
Subject: [PATCH 05/36] #1 : Publish generic package to gitea + fixes

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index f27834b..12ef5c2 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: touch text.txt
-      - uses: https://source.vague.tech/enarxi/ci-actions/publish@feature/1-publish
+      - uses: self:enarxi/ci-actions/publish@feature/1-publish
         with:
           organization: enarxi
           user: devastator

From 2e45ddb2ed1ef9f90847c232ccb15dff9028024a Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 17:22:48 +0300
Subject: [PATCH 06/36] #1 : Publish generic package to gitea + action url

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 12ef5c2..f27834b 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: touch text.txt
-      - uses: self:enarxi/ci-actions/publish@feature/1-publish
+      - uses: https://source.vague.tech/enarxi/ci-actions/publish@feature/1-publish
         with:
           organization: enarxi
           user: devastator

From 57d6779256c9158831bde4b70dbf04b3de145d66 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 17:27:30 +0300
Subject: [PATCH 07/36] #1 : Publish generic package to gitea + action url
 updated

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index f27834b..8468977 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - run: touch text.txt
-      - uses: https://source.vague.tech/enarxi/ci-actions/publish@feature/1-publish
+      - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:
           organization: enarxi
           user: devastator

From 60623dca5ea3492893e0ae2ceeca7e9f2b97308f Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 18:10:13 +0300
Subject: [PATCH 08/36] #1 : Publish generic package to gitea + debug values

---
 publish/action.yaml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index f6109d4..19b93de 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -36,6 +36,8 @@ runs:
         BASE_URL: ${{ inputs.base_url }}
       run: |
         base_url="${BASE_URL:-$GITEA_URL}"
+        echo ${base_url} ${{ gitea.repository }} \
+        echo "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}/${{ inputs.path }}" \
         curl --user "${{ inputs.user }}:${{ inputs.token }}" \
           --upload-file ${{ inputs.package_path }} \
-          "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}"/${{ inputs.path }}
+          "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}/${{ inputs.path }}"

From 3508120728a0536b4d39b48ad785f44dd49a9499 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 18:15:47 +0300
Subject: [PATCH 09/36] #1 : Publish generic package to gitea + debug values

---
 publish/action.yaml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 19b93de..948b36e 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -36,8 +36,4 @@ runs:
         BASE_URL: ${{ inputs.base_url }}
       run: |
         base_url="${BASE_URL:-$GITEA_URL}"
-        echo ${base_url} ${{ gitea.repository }} \
-        echo "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}/${{ inputs.path }}" \
-        curl --user "${{ inputs.user }}:${{ inputs.token }}" \
-          --upload-file ${{ inputs.package_path }} \
-          "${base_url}/api/packages/${{ inputs.organization }}/generic/${{ inputs.package_name }}/${{ inputs.version}}/${{ inputs.path }}"
+        echo ${base_url} ${{ gitea.repository }} ${{ gitea.repository_owner }} ${{ gitea.repositoryUrl }} ${{ gitea.server_url }}

From 0bfc337cfef5078f5b12d586b2d3ae89481c83d9 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 18:22:32 +0300
Subject: [PATCH 10/36] #1 : Publish generic package to gitea + simplified
 param list

---
 .gitea/workflows/test.yaml | 11 ++++-------
 publish/action.yaml        | 22 +++++-----------------
 2 files changed, 9 insertions(+), 24 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 8468977..9112c46 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -11,10 +11,7 @@ jobs:
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:
-          organization: enarxi
-          user: devastator
-          token: ${{ secrets.PACKAGES_TOKEN }}
-          path: text.txt
-          package_version: v0.1
-          package_name: text-pack
-
+          target_file: text.txt
+          package_name: control-room-sdk-godoc
+          package_version: master
+          force: false
diff --git a/publish/action.yaml b/publish/action.yaml
index 948b36e..91a3ed8 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -2,26 +2,14 @@ name: publish generic package
 description: publish generic package into gitea packages
 
 inputs:
-  base_url:
-    description: gitea base url
-    required: false
-  organization:
-    description: gitea organization
-    required: true
-  user:
-    description: gitea user
-    required: true
-  token:
-    description: gitea auth token
-    required: true
-  path:
-    description: local file path
+  target_file:
+    description: file to upload as package
     required: true
   package_name:
-    description: package name
+    description: gitea package name
     required: true
   package_version:
-    description: package version
+    description: gitea package version
     required: true
   force:
     description: force package replacement keeping the same version
@@ -36,4 +24,4 @@ runs:
         BASE_URL: ${{ inputs.base_url }}
       run: |
         base_url="${BASE_URL:-$GITEA_URL}"
-        echo ${base_url} ${{ gitea.repository }} ${{ gitea.repository_owner }} ${{ gitea.repositoryUrl }} ${{ gitea.server_url }}
+        echo "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package_name }}/${{ inputs.version }}/${{ inputs.target_file }}"
\ No newline at end of file

From 2ae98048c5e692ca563329730c0c1d23d25ece61 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 18:33:10 +0300
Subject: [PATCH 11/36] #1 : Publish generic package to gitea + typo fixes +
 more debug values

---
 publish/action.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 91a3ed8..59a29b6 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -24,4 +24,5 @@ runs:
         BASE_URL: ${{ inputs.base_url }}
       run: |
         base_url="${BASE_URL:-$GITEA_URL}"
-        echo "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package_name }}/${{ inputs.version }}/${{ inputs.target_file }}"
\ No newline at end of file
+        echo ${{ gitea.actor }} ${{ gitea.event.sender.login }}
+        echo "${base_url}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package_name }}/${{ inputs.package_version }}/${{ inputs.target_file }}"
\ No newline at end of file

From 85927f45bae5372380d3ea47202fd4dacb2d2367 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 19:43:52 +0300
Subject: [PATCH 12/36] #1 : Publish generic package to gitea + gitea token +
 shorten input names

---
 .gitea/workflows/test.yaml |  6 +++---
 publish/action.yaml        | 11 ++++++-----
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 9112c46..9032314 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -11,7 +11,7 @@ jobs:
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:
-          target_file: text.txt
-          package_name: control-room-sdk-godoc
-          package_version: master
+          file: text.txt
+          package: control-room-sdk-godoc
+          version: master
           force: false
diff --git a/publish/action.yaml b/publish/action.yaml
index 59a29b6..5725731 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -2,13 +2,13 @@ name: publish generic package
 description: publish generic package into gitea packages
 
 inputs:
-  target_file:
+  file:
     description: file to upload as package
     required: true
-  package_name:
+  package:
     description: gitea package name
     required: true
-  package_version:
+  version:
     description: gitea package version
     required: true
   force:
@@ -24,5 +24,6 @@ runs:
         BASE_URL: ${{ inputs.base_url }}
       run: |
         base_url="${BASE_URL:-$GITEA_URL}"
-        echo ${{ gitea.actor }} ${{ gitea.event.sender.login }}
-        echo "${base_url}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package_name }}/${{ inputs.package_version }}/${{ inputs.target_file }}"
\ No newline at end of file
+        curl -H "Authorization: token ${{ gitea.token}}" \
+           --upload-file ${{ inputs.file }} \
+           "${base_url}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"
\ No newline at end of file

From c660eca23f2f08bc7f5a44a955d5ac8f673c0d3b Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 19:48:46 +0300
Subject: [PATCH 13/36] #1 : Publish generic package to gitea + permissions
 fixed

---
 .gitea/workflows/test.yaml | 2 ++
 publish/action.yaml        | 6 +-----
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 9032314..dff6c04 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -7,6 +7,8 @@ on:
 jobs:
   self-test:
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
     steps:
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
diff --git a/publish/action.yaml b/publish/action.yaml
index 5725731..f93042c 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -19,11 +19,7 @@ runs:
   using: composite
   steps:
     - shell: bash
-      env:
-        GITEA_URL: ${{ gitea.server_url }}
-        BASE_URL: ${{ inputs.base_url }}
       run: |
-        base_url="${BASE_URL:-$GITEA_URL}"
         curl -H "Authorization: token ${{ gitea.token}}" \
            --upload-file ${{ inputs.file }} \
-           "${base_url}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"
\ No newline at end of file
+           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From 7692281f5f07834cf6920bf031359db75cb1329f Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 19:54:31 +0300
Subject: [PATCH 14/36] #1 : Publish generic package to gitea + curl options
 improved

---
 publish/action.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index f93042c..932f8a0 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,6 +20,7 @@ runs:
   steps:
     - shell: bash
       run: |
-        curl -H "Authorization: token ${{ gitea.token}}" \
-           --upload-file ${{ inputs.file }} \
-           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"
+        curl -i --fail-with-body \
+          -H "Authorization: token ${{ gitea.token}}" \
+          --upload-file ${{ inputs.file }} \
+          "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From 02f94ac4fef8d9decabd749e0ee6f1c2aa7aae39 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 19:54:55 +0300
Subject: [PATCH 15/36] #1 : Publish generic package to gitea + attempt more
 permissive mode

---
 .gitea/workflows/test.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index dff6c04..2b502c2 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -7,8 +7,7 @@ on:
 jobs:
   self-test:
     runs-on: ubuntu-latest
-    permissions:
-      packages: write
+    permissions: write-all
     steps:
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish

From a6666a480696c35a04c3b16c565b1909a97caeda Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:18:23 +0300
Subject: [PATCH 16/36] #1 : Publish generic package to gitea + dedicated token
 for auth

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 932f8a0..e9d00a5 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -21,6 +21,6 @@ runs:
     - shell: bash
       run: |
         curl -i --fail-with-body \
-          -H "Authorization: token ${{ gitea.token}}" \
+          -H "Authorization: token ${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From e3ad8866cab0c41aad83819391233302fe22705d Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:18:44 +0300
Subject: [PATCH 17/36] #1 : Publish generic package to gitea + job permissions
 cleared

---
 .gitea/workflows/test.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 2b502c2..9032314 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -7,7 +7,6 @@ on:
 jobs:
   self-test:
     runs-on: ubuntu-latest
-    permissions: write-all
     steps:
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish

From 0aacb616b95116f0deab19c848e54ed10a7d586c Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:20:17 +0300
Subject: [PATCH 18/36] #1 : Publish generic package to gitea + curl auth
 updated

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index e9d00a5..c26b0bb 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -21,6 +21,6 @@ runs:
     - shell: bash
       run: |
         curl -i --fail-with-body \
-          -H "Authorization: token ${{ secrets.ACTI_BOT_TOKEN }}" \
+          --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From c65bcfb9b14168f28b05cd90828331140c6736a9 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:30:36 +0300
Subject: [PATCH 19/36] #1 : Publish generic package to gitea + more test

---
 publish/action.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index c26b0bb..40d6f7f 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -19,8 +19,11 @@ runs:
   using: composite
   steps:
     - shell: bash
+      env:
+        GITEA_TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
       run: |
+        test -n "$GITEA_TOKEN"
         curl -i --fail-with-body \
-          --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
+          --user "acti-bot:${GITEA_TOKEN}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From 34d6b0e4136036cc1f9ebebb73911d418c3c198e Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:32:28 +0300
Subject: [PATCH 20/36] #1 : Publish generic package to gitea + more tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 40d6f7f..518fc81 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -22,7 +22,7 @@ runs:
       env:
         GITEA_TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
       run: |
-        test -n "$GITEA_TOKEN"
+        printf "${#GITEA_TOKEN}"
         curl -i --fail-with-body \
           --user "acti-bot:${GITEA_TOKEN}" \
           --upload-file ${{ inputs.file }} \

From b7488672deb8c9de6116e13cfd1fa0d8ee345e46 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:43:49 +0300
Subject: [PATCH 21/36] #1 : Publish generic package to gitea + more tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 518fc81..dab970d 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -22,7 +22,7 @@ runs:
       env:
         GITEA_TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
       run: |
-        printf "${#GITEA_TOKEN}"
+        echo "!${GITEA_TOKEN}?"
         curl -i --fail-with-body \
           --user "acti-bot:${GITEA_TOKEN}" \
           --upload-file ${{ inputs.file }} \

From 9708e7416574a6514044de85ee16e296e09db6b5 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 20:48:28 +0300
Subject: [PATCH 22/36] #1 : Publish generic package to gitea + more tests

---
 publish/action.yaml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index dab970d..d746ca6 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -19,11 +19,9 @@ runs:
   using: composite
   steps:
     - shell: bash
-      env:
-        GITEA_TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
       run: |
-        echo "!${GITEA_TOKEN}?"
+        echo "Token: ${{ secrets.ACTI_BOT_TOKEN }}"
         curl -i --fail-with-body \
-          --user "acti-bot:${GITEA_TOKEN}" \
+          --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From 57ad4479ddb4d658d0b9f931394fa32d8ffd1928 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 21:37:23 +0300
Subject: [PATCH 23/36] #1 : Publish generic package to gitea + more tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index d746ca6..c79e0b3 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,7 +20,7 @@ runs:
   steps:
     - shell: bash
       run: |
-        echo "Token: ${{ secrets.ACTI_BOT_TOKEN }}"
+        echo "Token: ${{ secrets.ACTI_BOT_TOKEN }}!"
         curl -i --fail-with-body \
           --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \

From b8fc18fe982d814cd4f2070d8e3edb292d5a2e87 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 21:40:24 +0300
Subject: [PATCH 24/36] #1 : Publish generic package to gitea + more tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index c79e0b3..c86c8af 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,7 +20,7 @@ runs:
   steps:
     - shell: bash
       run: |
-        echo "Token: ${{ secrets.ACTI_BOT_TOKEN }}!"
+        echo "Token: ${{ secrets.SECRET_TEST }}, ${{ vars.VAR_TEST }}! ${{ secrets.SECRET_SOME }}, ${{ vars.VAR_SOME }}?"
         curl -i --fail-with-body \
           --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \

From 675d737ef15f7398dc6e112fe3a21bb0dbe565a9 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 22:55:48 +0300
Subject: [PATCH 25/36] #1 : Publish generic package to gitea + debugging
 missing secrets

---
 .gitea/workflows/test.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 9032314..45f4afe 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -8,6 +8,13 @@ jobs:
   self-test:
     runs-on: ubuntu-latest
     steps:
+      - name: Debug actions context
+        run: |
+          echo "secret source: ${{ gitea.secret_source }}"
+          echo "secret length: ${SECRET_TEST}"
+          echo "variable: ${{ vars.VAR_TEST }}"
+        env:
+          TEST_SECRET: ${{ secrets.SECRET_TEST }}
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:

From c730588d4be26886196921b7c976b167bd42f32b Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 22:56:35 +0300
Subject: [PATCH 26/36] #1 : Publish generic package to gitea + debugging
 missing secrets

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 45f4afe..70e52e9 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -11,7 +11,7 @@ jobs:
       - name: Debug actions context
         run: |
           echo "secret source: ${{ gitea.secret_source }}"
-          echo "secret length: ${SECRET_TEST}"
+          echo "secret length: ${TEST_SECRET}"
           echo "variable: ${{ vars.VAR_TEST }}"
         env:
           TEST_SECRET: ${{ secrets.SECRET_TEST }}

From 108a667c77c556985e16df8bf1e22123737e5006 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 22:57:17 +0300
Subject: [PATCH 27/36] #1 : Publish generic package to gitea + debugging
 missing secrets

---
 .gitea/workflows/test.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 70e52e9..fb2ab81 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -11,7 +11,7 @@ jobs:
       - name: Debug actions context
         run: |
           echo "secret source: ${{ gitea.secret_source }}"
-          echo "secret length: ${TEST_SECRET}"
+          echo "secret length: ${#TEST_SECRET}"
           echo "variable: ${{ vars.VAR_TEST }}"
         env:
           TEST_SECRET: ${{ secrets.SECRET_TEST }}

From 559683cb4f07bf13fd94a70cf8ebf9b0df05d3dc Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 23:13:12 +0300
Subject: [PATCH 28/36] #1 : Publish generic package to gitea + cleanup,
 finalized configuration

---
 .gitea/workflows/test.yaml | 11 ++---------
 publish/action.yaml        |  3 +--
 2 files changed, 3 insertions(+), 11 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index fb2ab81..b3bacfd 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -8,17 +8,10 @@ jobs:
   self-test:
     runs-on: ubuntu-latest
     steps:
-      - name: Debug actions context
-        run: |
-          echo "secret source: ${{ gitea.secret_source }}"
-          echo "secret length: ${#TEST_SECRET}"
-          echo "variable: ${{ vars.VAR_TEST }}"
-        env:
-          TEST_SECRET: ${{ secrets.SECRET_TEST }}
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:
           file: text.txt
-          package: control-room-sdk-godoc
+          package: a-proper-test-package
           version: master
-          force: false
+          force: false
\ No newline at end of file
diff --git a/publish/action.yaml b/publish/action.yaml
index c86c8af..f1ecefe 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,8 +20,7 @@ runs:
   steps:
     - shell: bash
       run: |
-        echo "Token: ${{ secrets.SECRET_TEST }}, ${{ vars.VAR_TEST }}! ${{ secrets.SECRET_SOME }}, ${{ vars.VAR_SOME }}?"
-        curl -i --fail-with-body \
+        curl --fail-with-body \
           --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From de8ccc6fcbebd4e53d8f0375f5627cbcf56a2a71 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 23:22:04 +0300
Subject: [PATCH 29/36] #1 : Publish generic package to gitea + docs + more
 auth tests

---
 README.md           | 7 +++++++
 publish/action.yaml | 5 ++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/README.md b/README.md
index 68d6d12..2e6a5a6 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,9 @@
 # gitea-actions
 
+## Setup
+
+For these actions to work properly one needs a bot account for the token. So, once the bot account is created, generate a token for it with `repository:write` and `package:write` permissions. However that's not enough, even making the bot a repository collaborator is not enough. The bot needs to have permissions on the organization level.
+
+The recommended way is to create a team in the organization that has access to all repositories and set `Releases:Write` and `Packages:Write` permissions and `Read` for all the rest (yet, strictly speaking that's not necessary) and add the bot to the team.
+
+Add an organization level secret called `ACTI_BOT_TOKEN` with the bot's token as value.
\ No newline at end of file
diff --git a/publish/action.yaml b/publish/action.yaml
index f1ecefe..e7d25b4 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -19,8 +19,11 @@ runs:
   using: composite
   steps:
     - shell: bash
+      env:
+        TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
       run: |
+        echo 'Len: ' ${#TOKEN}
         curl --fail-with-body \
-          --user "acti-bot:${{ secrets.ACTI_BOT_TOKEN }}" \
+          --user "acti-bot:${TOKEN}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From f87658c5d5fda4d7f471bde3d49f0ec593d2d4fe Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 23:24:24 +0300
Subject: [PATCH 30/36] #1 : Publish generic package to gitea + more auth tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index e7d25b4..72c2203 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,7 +20,7 @@ runs:
   steps:
     - shell: bash
       env:
-        TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
+        TOKEN: ${{ secrets.BOT_SECRET }}
       run: |
         echo 'Len: ' ${#TOKEN}
         curl --fail-with-body \

From 2ab68df82b9ab014c703b3c00e09e1bf73a2f1b3 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 23:27:50 +0300
Subject: [PATCH 31/36] #1 : Publish generic package to gitea + more auth tests

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index 72c2203..ca55266 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -20,7 +20,7 @@ runs:
   steps:
     - shell: bash
       env:
-        TOKEN: ${{ secrets.BOT_SECRET }}
+        TOKEN: ${{ secrets.TEST_SECRET }}
       run: |
         echo 'Len: ' ${#TOKEN}
         curl --fail-with-body \

From 13a880b198a6c55c204a70c95e2ecb692783b197 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Sun, 27 Sep 2026 23:54:05 +0300
Subject: [PATCH 32/36] #1 : Publish generic package to gitea + more auth tests

---
 .gitea/workflows/test.yaml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index b3bacfd..b912c46 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -8,6 +8,28 @@ jobs:
   self-test:
     runs-on: ubuntu-latest
     steps:
+      - name: Test local
+        env:
+          LOCAL: ${{ secrets.TEST_SECRET }}
+        run: |
+          if [ -z "$LOCAL" ]; then
+            echo "EMPTY"
+            exit 1
+          fi
+
+          echo "PRESENT"
+          echo "length=${#LOCAL}"
+      - name: Test org
+        env:
+          GLOBAL: ${{ secrets.BOT_SECRET }}
+        run: |
+          if [ -z "$GLOBAL" ]; then
+            echo "EMPTY"
+            exit 1
+          fi
+
+          echo "PRESENT"
+          echo "length=${#GLOBAL}"
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:

From 524eafb9e2f3258462c87cd0c9c5f12d7ece0a35 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Mon, 28 Sep 2026 00:04:09 +0300
Subject: [PATCH 33/36] #1 : Publish generic package to gitea + token move to
 env

---
 .gitea/workflows/test.yaml | 25 +++----------------------
 publish/action.yaml        |  5 +----
 2 files changed, 4 insertions(+), 26 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index b912c46..7190ac8 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -4,32 +4,13 @@ on:
     branches-ignore:
       - master
 
+env:
+  ACTI_BOT_TOKEN: ${{ secrets.ACTI_BOT_TOKEN }}
+
 jobs:
   self-test:
     runs-on: ubuntu-latest
     steps:
-      - name: Test local
-        env:
-          LOCAL: ${{ secrets.TEST_SECRET }}
-        run: |
-          if [ -z "$LOCAL" ]; then
-            echo "EMPTY"
-            exit 1
-          fi
-
-          echo "PRESENT"
-          echo "length=${#LOCAL}"
-      - name: Test org
-        env:
-          GLOBAL: ${{ secrets.BOT_SECRET }}
-        run: |
-          if [ -z "$GLOBAL" ]; then
-            echo "EMPTY"
-            exit 1
-          fi
-
-          echo "PRESENT"
-          echo "length=${#GLOBAL}"
       - run: touch text.txt
       - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
         with:
diff --git a/publish/action.yaml b/publish/action.yaml
index ca55266..2595058 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -19,11 +19,8 @@ runs:
   using: composite
   steps:
     - shell: bash
-      env:
-        TOKEN: ${{ secrets.TEST_SECRET }}
       run: |
-        echo 'Len: ' ${#TOKEN}
         curl --fail-with-body \
-          --user "acti-bot:${TOKEN}" \
+          --user "acti-bot:${ACTI_BOT_TOKEN}" \
           --upload-file ${{ inputs.file }} \
           "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}/${{ inputs.file }}"

From a3dadea932df6f8904546c09c6502717cb8df8ea Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Mon, 28 Sep 2026 00:57:46 +0300
Subject: [PATCH 34/36] #1 : Publish generic package to gitea + force flag
 handling + test case for force

---
 .gitea/workflows/test.yaml | 12 +++++++++++-
 publish/action.yaml        | 18 ++++++++++++++++++
 2 files changed, 29 insertions(+), 1 deletion(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 7190ac8..5873a2a 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -17,4 +17,14 @@ jobs:
           file: text.txt
           package: a-proper-test-package
           version: master
-          force: false
\ No newline at end of file
+      - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
+        with:
+          file: text.txt
+          package: a-proper-test-package
+          version: master
+          force: true
+      - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
+        with:
+          file: text.txt
+          package: a-proper-test-package
+          version: master
\ No newline at end of file
diff --git a/publish/action.yaml b/publish/action.yaml
index 2595058..a226dc7 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -14,12 +14,30 @@ inputs:
   force:
     description: force package replacement keeping the same version
     required: false
+    default: "false"
 
 runs:
   using: composite
   steps:
     - shell: bash
       run: |
+        set -euo pipefail
+        if [[ "${INPUT_FORCE,,}" == "true" ]]; then
+          status="$(
+            curl --silent --show-error --output /dev/null --write-out '%{http_code}' \
+            --user "acti-bot:${ACTI_BOT_TOKEN}" \
+            --request DELETE \
+            "${{ gitea.server_url }}/api/packages/${{ gitea.repository_owner }}/generic/${{ inputs.package }}/${{ inputs.version }}"
+          )"
+
+          case "$status" in
+            204|404) ;;
+            *)
+                echo "Failed to delete existing package version (HTTP ${status})" >&2
+                exit 1
+                ;;
+          esac
+        fi
         curl --fail-with-body \
           --user "acti-bot:${ACTI_BOT_TOKEN}" \
           --upload-file ${{ inputs.file }} \

From 0d5ba064f4bda9f4424f21ebf8f23f4dadf989ab Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Mon, 28 Sep 2026 00:58:59 +0300
Subject: [PATCH 35/36] #1 : Publish generic package to gitea + minor fix

---
 publish/action.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/publish/action.yaml b/publish/action.yaml
index a226dc7..5fd5685 100644
--- a/publish/action.yaml
+++ b/publish/action.yaml
@@ -22,7 +22,7 @@ runs:
     - shell: bash
       run: |
         set -euo pipefail
-        if [[ "${INPUT_FORCE,,}" == "true" ]]; then
+        if [[ "${{ inputs.force }}" == "true" ]]; then
           status="$(
             curl --silent --show-error --output /dev/null --write-out '%{http_code}' \
             --user "acti-bot:${ACTI_BOT_TOKEN}" \

From 68d92069c58ab913c3c67a6577e6318accf6d8e3 Mon Sep 17 00:00:00 2001
From: Dan Haman <dan@vague.tech>
Date: Mon, 28 Sep 2026 01:07:21 +0300
Subject: [PATCH 36/36] #1 : Publish generic package to gitea + documentation
 updated

---
 .gitea/workflows/test.yaml | 12 +-----------
 README.md                  | 20 +++++++++++++++++++-
 2 files changed, 20 insertions(+), 12 deletions(-)

diff --git a/.gitea/workflows/test.yaml b/.gitea/workflows/test.yaml
index 5873a2a..c99af0f 100644
--- a/.gitea/workflows/test.yaml
+++ b/.gitea/workflows/test.yaml
@@ -17,14 +17,4 @@ jobs:
           file: text.txt
           package: a-proper-test-package
           version: master
-      - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
-        with:
-          file: text.txt
-          package: a-proper-test-package
-          version: master
-          force: true
-      - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
-        with:
-          file: text.txt
-          package: a-proper-test-package
-          version: master
\ No newline at end of file
+          force: true
\ No newline at end of file
diff --git a/README.md b/README.md
index 2e6a5a6..a7132b6 100644
--- a/README.md
+++ b/README.md
@@ -6,4 +6,22 @@ For these actions to work properly one needs a bot account for the token. So, on
 
 The recommended way is to create a team in the organization that has access to all repositories and set `Releases:Write` and `Packages:Write` permissions and `Read` for all the rest (yet, strictly speaking that's not necessary) and add the bot to the team.
 
-Add an organization level secret called `ACTI_BOT_TOKEN` with the bot's token as value.
\ No newline at end of file
+The workflow (or jobs individually) needs to define an env variable `ACTI_BOT_TOKEN` with the bots token (as secrets do not automatically propagate into composite action context, at least it didn't work while testing).
+
+## Publish
+
+Publishes a `generic` package to current Gitea instance. Example:
+
+```yaml
+  - uses: https://source.vague.tech/open-vague/ci-actions/publish@feature/1-publish
+    with:
+      file: some-content.json
+      package: the-package
+      version: master
+      force: true
+```
+
+* `file` - path to the file to upload (used as uploaded file name within the package)
+* `package` - the package name
+* `version` - the package version, need to be unique (unless force flag is set)
+* `force` - false by default; if set **deletes the whole version** of the package (all files) and then publishes instead with the same version
\ No newline at end of file