From 27d711301c52719e8704245a0b09316ea9320d05 Mon Sep 17 00:00:00 2001
From: jakeross <jirhiker@gmail.com>
Date: Fri, 13 Feb 2026 11:13:12 -0700
Subject: [PATCH 1/2] chore: update Jira API authentication to use bearer token

---
 .github/workflows/jira_codex_pr.yml | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index a2d0c12d..35f4ff5f 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -95,13 +95,12 @@ jobs:
         id: issue
         env:
           JIRA_BASE_URL: ${{ vars.JIRA_BASE_URL }}
-          JIRA_EMAIL: ${{ secrets.JIRA_EMAIL }}
-          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+          JIRA_BEARER_TOKEN: ${{ secrets.JIRA_BEARER_TOKEN || secrets.JIRA_API_TOKEN }}
           JIRA_KEY: ${{ steps.jira.outputs.JIRA_KEY }}
           MAX_DESC_CHARS: ${{ env.MAX_DESC_CHARS }}
         run: |
           set -euo pipefail
-          for v in JIRA_BASE_URL JIRA_EMAIL JIRA_API_TOKEN JIRA_KEY; do
+          for v in JIRA_BASE_URL JIRA_BEARER_TOKEN JIRA_KEY; do
             if [ -z "${!v:-}" ]; then
               echo "Missing required Jira configuration: $v"
               exit 1
@@ -123,7 +122,8 @@ jobs:
           esac
           ISSUE_URL="$API_BASE_URL/issue/$JIRA_KEY"
 
-          HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 -u "$JIRA_EMAIL:$JIRA_API_TOKEN" \
+          HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 \
+            -H "Authorization: Bearer $JIRA_BEARER_TOKEN" \
             -H "Accept: application/json" \
             -o jira.json \
             -w "%{http_code}" \
@@ -389,13 +389,12 @@ jobs:
       - name: Comment back on Jira with PR link
         env:
           JIRA_BASE_URL: ${{ vars.JIRA_BASE_URL }}
-          JIRA_EMAIL: ${{ secrets.JIRA_EMAIL }}
-          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
+          JIRA_BEARER_TOKEN: ${{ secrets.JIRA_BEARER_TOKEN || secrets.JIRA_API_TOKEN }}
           JIRA_KEY: ${{ steps.jira.outputs.JIRA_KEY }}
           PR_URL: ${{ steps.pr.outputs.PR_URL }}
         run: |
           set -euo pipefail
-          for v in JIRA_BASE_URL JIRA_EMAIL JIRA_API_TOKEN JIRA_KEY; do
+          for v in JIRA_BASE_URL JIRA_BEARER_TOKEN JIRA_KEY; do
             if [ -z "${!v:-}" ]; then
               echo "Missing required Jira configuration: $v"
               exit 1
@@ -438,7 +437,8 @@ jobs:
           }')
 
           COMMENT_URL="$API_BASE_URL/issue/$JIRA_KEY/comment"
-          HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 -u "$JIRA_EMAIL:$JIRA_API_TOKEN" \
+          HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 \
+            -H "Authorization: Bearer $JIRA_BEARER_TOKEN" \
             -H "Accept: application/json" \
             -H "Content-Type: application/json" \
             -X POST \

From c29c0570d5eb1c8d0caa4e9a37b776993b2b7223 Mon Sep 17 00:00:00 2001
From: jakeross <jirhiker@gmail.com>
Date: Fri, 13 Feb 2026 11:19:28 -0700
Subject: [PATCH 2/2] chore: update Jira API authentication to use email and
 API token

---
 .github/workflows/jira_codex_pr.yml | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/jira_codex_pr.yml b/.github/workflows/jira_codex_pr.yml
index 35f4ff5f..412e96cc 100644
--- a/.github/workflows/jira_codex_pr.yml
+++ b/.github/workflows/jira_codex_pr.yml
@@ -95,12 +95,13 @@ jobs:
         id: issue
         env:
           JIRA_BASE_URL: ${{ vars.JIRA_BASE_URL }}
-          JIRA_BEARER_TOKEN: ${{ secrets.JIRA_BEARER_TOKEN || secrets.JIRA_API_TOKEN }}
+          JIRA_EMAIL: ${{ secrets.JIRA_EMAIL }}
+          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
           JIRA_KEY: ${{ steps.jira.outputs.JIRA_KEY }}
           MAX_DESC_CHARS: ${{ env.MAX_DESC_CHARS }}
         run: |
           set -euo pipefail
-          for v in JIRA_BASE_URL JIRA_BEARER_TOKEN JIRA_KEY; do
+          for v in JIRA_BASE_URL JIRA_EMAIL JIRA_API_TOKEN JIRA_KEY; do
             if [ -z "${!v:-}" ]; then
               echo "Missing required Jira configuration: $v"
               exit 1
@@ -123,7 +124,7 @@ jobs:
           ISSUE_URL="$API_BASE_URL/issue/$JIRA_KEY"
 
           HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 \
-            -H "Authorization: Bearer $JIRA_BEARER_TOKEN" \
+            -u "$JIRA_EMAIL:$JIRA_API_TOKEN" \
             -H "Accept: application/json" \
             -o jira.json \
             -w "%{http_code}" \
@@ -389,12 +390,13 @@ jobs:
       - name: Comment back on Jira with PR link
         env:
           JIRA_BASE_URL: ${{ vars.JIRA_BASE_URL }}
-          JIRA_BEARER_TOKEN: ${{ secrets.JIRA_BEARER_TOKEN || secrets.JIRA_API_TOKEN }}
+          JIRA_EMAIL: ${{ secrets.JIRA_EMAIL }}
+          JIRA_API_TOKEN: ${{ secrets.JIRA_API_TOKEN }}
           JIRA_KEY: ${{ steps.jira.outputs.JIRA_KEY }}
           PR_URL: ${{ steps.pr.outputs.PR_URL }}
         run: |
           set -euo pipefail
-          for v in JIRA_BASE_URL JIRA_BEARER_TOKEN JIRA_KEY; do
+          for v in JIRA_BASE_URL JIRA_EMAIL JIRA_API_TOKEN JIRA_KEY; do
             if [ -z "${!v:-}" ]; then
               echo "Missing required Jira configuration: $v"
               exit 1
@@ -438,7 +440,7 @@ jobs:
 
           COMMENT_URL="$API_BASE_URL/issue/$JIRA_KEY/comment"
           HTTP_CODE=$(curl -sS --retry 3 --retry-delay 2 \
-            -H "Authorization: Bearer $JIRA_BEARER_TOKEN" \
+            -u "$JIRA_EMAIL:$JIRA_API_TOKEN" \
             -H "Accept: application/json" \
             -H "Content-Type: application/json" \
             -X POST \