diff --git a/.forgejo/kcl-ci/kcl.mod.lock b/.forgejo/kcl-ci/kcl.mod.lock
index d263986..d0575bb 100644
--- a/.forgejo/kcl-ci/kcl.mod.lock
+++ b/.forgejo/kcl-ci/kcl.mod.lock
@@ -4,4 +4,4 @@
     full_name = "kcl-ci_0.0.1"
     version = "0.0.1"
     url = "https://git.wxs.ro/actions/kcl-ci"
-    git_tag = "v1.40.2"
+    git_tag = "v1.43.0"
diff --git a/.forgejo/workflows/ci.yml b/.forgejo/workflows/ci.yml
index febc4fb..fa1a2b4 100644
--- a/.forgejo/workflows/ci.yml
+++ b/.forgejo/workflows/ci.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
diff --git a/.forgejo/workflows/claude.yml b/.forgejo/workflows/claude.yml
index 1ca56ee..6d701d0 100644
--- a/.forgejo/workflows/claude.yml
+++ b/.forgejo/workflows/claude.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
diff --git a/.forgejo/workflows/kcl-ci-build.yml b/.forgejo/workflows/kcl-ci-build.yml
index 2e66cf7..0f60ee6 100644
--- a/.forgejo/workflows/kcl-ci-build.yml
+++ b/.forgejo/workflows/kcl-ci-build.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -21,9 +21,10 @@ jobs:
     runs-on: grunt
     steps:
     - name: Build KCL workflows
-      uses: https://${{ secrets.READ_REPO_TOKEN }}@git.wxs.ro/actions/kcl-ci@v1.42.0
+      uses: https://${{ secrets.READ_REPO_TOKEN }}@git.wxs.ro/actions/kcl-ci@v1.43.0
       with:
         read-repo-token: ${{ secrets.READ_REPO_TOKEN }}
+        ci-bot-token: ${{ secrets.CI_BOT_TOKEN }}
         working-dir: '.forgejo/kcl-ci'
         commit-changes: 'true'
         file-pattern: '.forgejo/workflows/*.yml'
diff --git a/.forgejo/workflows/mirror-branch.yml b/.forgejo/workflows/mirror-branch.yml
index eea9a01..c68aeec 100644
--- a/.forgejo/workflows/mirror-branch.yml
+++ b/.forgejo/workflows/mirror-branch.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
@@ -26,7 +26,7 @@ jobs:
       uses: https://${{ secrets.READ_REPO_TOKEN }}@git.wxs.ro/xternal/checkout@v6.0.2
       with:
         fetch-depth: '0'
-        token: ${{ github.token }}
+        token: ${{ secrets.CI_BOT_TOKEN }}
     - name: Configure SSH for mirror
       run: |-
         mkdir -p ~/.ssh
diff --git a/.forgejo/workflows/test-action.yml b/.forgejo/workflows/test-action.yml
index eda276a..e754fe6 100644
--- a/.forgejo/workflows/test-action.yml
+++ b/.forgejo/workflows/test-action.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci
diff --git a/.forgejo/workflows/upstream-sync.yml b/.forgejo/workflows/upstream-sync.yml
index c17a03e..c3976b4 100644
--- a/.forgejo/workflows/upstream-sync.yml
+++ b/.forgejo/workflows/upstream-sync.yml
@@ -1,4 +1,4 @@
-# Generated by KCL v1.42.0 - DO NOT EDIT
+# Generated by KCL v1.43.0 - DO NOT EDIT
 # Source: .forgejo/kcl-ci/main.k
 # kcl-ci local: ~/stuff/gitrepos/wxs/actions/kcl-ci
 # kcl-ci remote: https://git.wxs.ro/actions/kcl-ci