diff --git a/.forgejo/workflows/integration.yml b/.forgejo/workflows/integration.yml
index 70e21fc..5f23aa3 100644
--- a/.forgejo/workflows/integration.yml
+++ b/.forgejo/workflows/integration.yml
@@ -6,7 +6,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - id: forgejo
-        uses: https://code.forgejo.org/actions/setup-forgejo@v3.0.1
+        uses: https://code.forgejo.org/actions/setup-forgejo@v3.0.2
         with:
           user: testuser
           password: admin1234
@@ -40,12 +40,12 @@ jobs:
 
           test $(cat /tmp/v1.json | jq -r .hide_archive_links) = true
 
-      # - name: testdata/upload-download-private
-      #   run: |
-      #     export LOOP_DELAY=30
-      #     export FORGEJO_RUNNER_LOGS="${{ steps.forgejo.outputs.runner-logs }}"
-      #     curl -X 'POST' 'http://testuser:admin1234@${{ steps.forgejo.outputs.host-port }}/api/v1/user/repos' -H 'accept: application/json' -H 'Content-Type: application/json' -d '{"name": "upload-download-private","private": true}'
-      #     forgejo-test-helper.sh run_workflow testdata/upload-download http://testuser:admin1234@${{ steps.forgejo.outputs.host-port }} testuser upload-download-private forgejo-release "${{ steps.forgejo.outputs.token }}"
+      - name: testdata/upload-download-private
+        run: |
+          export LOOP_DELAY=30
+          export FORGEJO_RUNNER_LOGS="${{ steps.forgejo.outputs.runner-logs }}"
+          curl -X 'POST' 'http://testuser:admin1234@${{ steps.forgejo.outputs.host-port }}/api/v1/user/repos' -H 'accept: application/json' -H 'Content-Type: application/json' -d '{"name": "upload-download-private","private": true}'
+          forgejo-test-helper.sh run_workflow testdata/upload-download http://testuser:admin1234@${{ steps.forgejo.outputs.host-port }} testuser upload-download-private forgejo-release "${{ steps.forgejo.outputs.token }}"
 
       - name: testdata/nested-upload-download
         run: |
diff --git a/README.md b/README.md
index 0f3d3ce..9ff302a 100644
--- a/README.md
+++ b/README.md
@@ -42,7 +42,7 @@ jobs:
     runs-on: docker
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/forgejo-release@v2.7.0
+      - uses: actions/forgejo-release@v2.7.2
         with:
           direction: upload
           url: https://my-forgejo-instance.net
@@ -63,7 +63,7 @@ jobs:
     runs-on: docker
     steps:
       - uses: actions/checkout@v4
-      - uses: actions/forgejo-release@v2.7.0
+      - uses: actions/forgejo-release@v2.7.2
         with:
           direction: download
           url: https://my-forgejo-instance.net
diff --git a/action.yml b/action.yml
index 2c70085..f6725c7 100644
--- a/action.yml
+++ b/action.yml
@@ -88,7 +88,7 @@ runs:
 
         export HIDE_ARCHIVE_LINK="${{ inputs.hide-archive-link }}"
 
-        export TOKEN="${{ inputs.token }}"
+        export TOKEN=${{ inputs.token }}
 
         export RELEASE_DIR="${{ inputs.release-dir }}"
 
diff --git a/forgejo-release.sh b/forgejo-release.sh
index 21c3dbc..041d1c4 100755
--- a/forgejo-release.sh
+++ b/forgejo-release.sh
@@ -19,7 +19,7 @@ if ${VERBOSE:-false}; then set -x; fi
 : ${RETRY:=1}
 : ${DELAY:=10}
 
-RELEASE_NOTES_ASSISTANT_VERSION=v1.3.6 # renovate: datasource=forgejo-releases depName=forgejo/release-notes-assistant registryUrl=https://code.forgejo.org
+RELEASE_NOTES_ASSISTANT_VERSION=v1.4.0 # renovate: datasource=forgejo-releases depName=forgejo/release-notes-assistant registryUrl=https://code.forgejo.org
 
 TAG_FILE="$TMP_DIR/tag$$.json"
 TAG_URL=$(echo "$TAG" | sed 's/\//%2F/g')
diff --git a/testdata/nested-upload-download/.forgejo/workflows/test.yml b/testdata/nested-upload-download/.forgejo/workflows/test.yml
index ff6806a..c6939b5 100644
--- a/testdata/nested-upload-download/.forgejo/workflows/test.yml
+++ b/testdata/nested-upload-download/.forgejo/workflows/test.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
       - id: forgejo
-        uses: https://code.forgejo.org/actions/setup-forgejo@v3.0.1
+        uses: https://code.forgejo.org/actions/setup-forgejo@v3.0.2
         with:
           user: testuser
           password: admin1234