fix(ci): add auth header when access GitHub CI

Author: cxw620

.github/workflows/beta_release.yml

@@ -92,6 +92,8 @@ jobs:
 
       - name: Setup web
         run: bash build.sh dev web
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         uses: OpenListTeam/cgo-actions@v1.1.2
@@ -111,6 +113,8 @@ jobs:
       - name: Compress
         run: |
           bash build.sh zip ${{ matrix.hash }}
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       # See above           
       - name: Upload assets to beta release

.github/workflows/build.yml

@@ -40,6 +40,8 @@ jobs:
 
       - name: Setup web
         run: bash build.sh dev web
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build
         uses: OpenListTeam/cgo-actions@v1.1.2

.github/workflows/release.yml

@@ -57,6 +57,8 @@ jobs:
       - name: Build
         run: |
           bash build.sh release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload assets
         uses: softprops/action-gh-release@v2

.github/workflows/release_android.yml

@@ -27,6 +27,8 @@ jobs:
       - name: Build
         run: |
           bash build.sh release android
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload assets
         uses: softprops/action-gh-release@v2

.github/workflows/release_docker.yml

@@ -44,14 +44,20 @@ jobs:
       - name: Download Musl Library
         if: steps.cache-musl.outputs.cache-hit != 'true'
         run: bash build.sh prepare docker-multiplatform
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build go binary (beta)
         if: env.IMAGE_IS_PROD != 'true'
         run: bash build.sh beta docker-multiplatform
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build go binary (release)
         if: env.IMAGE_IS_PROD == 'true'
         run: bash build.sh release docker-multiplatform
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload artifacts
         uses: actions/upload-artifact@v4

.github/workflows/release_freebsd.yml

@@ -27,6 +27,8 @@ jobs:
       - name: Build
         run: |
           bash build.sh release freebsd
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload assets
         uses: softprops/action-gh-release@v2

.github/workflows/release_linux_musl.yml

@@ -27,6 +27,8 @@ jobs:
       - name: Build
         run: |
           bash build.sh release linux_musl
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload assets
         uses: softprops/action-gh-release@v2

.github/workflows/release_linux_musl_arm.yml

@@ -27,6 +27,8 @@ jobs:
       - name: Build
         run: |
           bash build.sh release linux_musl_arm
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload assets
         uses: softprops/action-gh-release@v2

.github/workflows/test_docker.yml

@@ -47,9 +47,13 @@ jobs:
       - name: Download Musl Library
         if: steps.cache-musl.outputs.cache-hit != 'true'
         run: bash build.sh prepare docker-multiplatform
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build go binary (beta)
         run: bash build.sh beta docker-multiplatform
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload artifacts
         uses: actions/upload-artifact@v4

build.sh

@@ -4,6 +4,13 @@ builtAt="$(date +'%F %T %z')"
 gitAuthor="The OpenList Projects Contributors <noreply@openlist.team>"
 gitCommit=$(git log --pretty=format:"%h" -1)
 
+githubAuthHeader=""
+githubAuthValue=""
+if [ -n "$GITHUB_TOKEN" ]; then
+  githubAuthHeader="--header"
+  githubAuthValue="Authorization: Bearer $GITHUB_TOKEN"
+fi
+
 if [ "$1" = "dev" ]; then
   version="dev"
   webVersion="dev"
@@ -14,7 +21,7 @@ else
   git tag -d beta || true
   # Always true if there's no tag
   version=$(git describe --abbrev=0 --tags 2>/dev/null || echo "v0.0.0")
-  webVersion=$(wget -qO- -t1 -T2 "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest" | grep "tag_name" | head -n 1 | awk -F ":" '{print $2}' | sed 's/\"//g;s/,//g;s/ //g')
+  webVersion=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest" | grep "tag_name" | head -n 1 | awk -F ":" '{print $2}' | sed 's/\"//g;s/,//g;s/ //g')
 fi
 
 echo "backend version: $version"
@@ -30,12 +37,12 @@ ldflags="\
 "
 
 FetchWebDev() {
-  pre_release_tag=$(curl -fsSL https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases | jq -r 'map(select(.prerelease)) | first | .tag_name')
+  pre_release_tag=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases | jq -r 'map(select(.prerelease)) | first | .tag_name')
   if [ -z "$pre_release_tag" ] || [ "$pre_release_tag" == "null" ]; then
     # fall back to latest release
-    pre_release_json=$(curl -fsSL -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest")
+    pre_release_json=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest")
   else
-    pre_release_json=$(curl -fsSL -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/tags/$pre_release_tag")
+    pre_release_json=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/tags/$pre_release_tag")
   fi
   pre_release_assets=$(echo "$pre_release_json" | jq -r '.assets[].browser_download_url')
   pre_release_tar_url=$(echo "$pre_release_assets" | grep "openlist-frontend-dist" | grep "\.tar\.gz$")
@@ -46,7 +53,7 @@ FetchWebDev() {
 }
 
 FetchWebRelease() {
-  release_json=$(curl -fsSL -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest")
+  release_json=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue -H "Accept: application/vnd.github.v3+json" "https://api.github.com/repos/OpenListTeam/OpenList-Frontend/releases/latest")
   release_assets=$(echo "$release_json" | jq -r '.assets[].browser_download_url')
   release_tar_url=$(echo "$release_assets" | grep "openlist-frontend-dist" | grep "\.tar\.gz$")
   curl -fsSL "$release_tar_url" -o dist.tar.gz
@@ -246,13 +253,8 @@ BuildReleaseFreeBSD() {
   rm -rf .git/
   mkdir -p "build/freebsd"
 
-  # Get latest FreeBSD 14.x release version from GitHub
-  github_auth=""
-  if [ -n "$GITHUB_TOKEN" ]; then
-    github_auth="--header 'Authorization: Bearer $GITHUB_TOKEN'"
-  fi
-  
-  freebsd_version=$(curl -fsSL $github_auth "https://api.github.com/repos/freebsd/freebsd-src/tags" | \
+  # Get latest FreeBSD 14.x release version from GitHub 
+  freebsd_version=$(curl -fsSL --max-time 2 $githubAuthHeader $githubAuthValue "https://api.github.com/repos/freebsd/freebsd-src/tags" | \
     jq -r '.[].name' | \
     grep '^release/14\.' | \
     sort -V | \