diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 3bd90b5..4cc14f9 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -1,5 +1,9 @@
 name: TubeArchivistMetadata
 
+permissions:
+  code: read
+  releases: write
+
 on:
   push:
     branches:
@@ -124,12 +128,12 @@ jobs:
 
       - name: Create Gitea release
         env:
-          GITEA_SERVER_TOKEN: ${{ secrets.GITEA_SERVER_TOKEN }}
+          GITEA_SERVER_TOKEN: ${{ secrets.GITEA_TOKEN }}
         run: |
           set -euo pipefail
 
           if [ -z "${GITEA_SERVER_TOKEN:-}" ]; then
-            echo "Missing GITEA_SERVER_TOKEN secret" >&2
+            echo "Missing built-in GITEA_TOKEN" >&2
             exit 1
           fi
 
diff --git a/Directory.Build.props b/Directory.Build.props
index c4d6a62..c6d3a85 100644
--- a/Directory.Build.props
+++ b/Directory.Build.props
@@ -3,5 +3,6 @@
         <Version>1.4.5.0</Version>
         <AssemblyVersion>1.4.5.0</AssemblyVersion>
         <FileVersion>1.4.5.0</FileVersion>
+        <IncludeSourceRevisionInInformationalVersion>false</IncludeSourceRevisionInInformationalVersion>
     </PropertyGroup>
 </Project>
diff --git a/manifest.json b/manifest.json
index 4014be2..c7bcf46 100644
--- a/manifest.json
+++ b/manifest.json
@@ -13,7 +13,7 @@
                 "changelog": "Limit providers to TubeArchivist paths, skip empty image URLs, and fix playlist sync intervals\n",
                 "targetAbi": "10.11.0.0",
                 "sourceUrl": "https://git.felixfoertsch.de/felixfoertsch/tubearchivist-jf-plugin/releases/download/v1.4.5/tubearchivistmetadata_1.4.5.0.zip",
-                "checksum": "2c0632e30631925b7f42b30dc567819f",
+                "checksum": "2b3c47c6468fac2c6e42a005f66630c6",
                 "timestamp": "2026-07-01T06:20:00Z"
             },
             {