Configuration of GitLab fine-grained access token

[Backspaze]

I got a notification from GitLab that one of my access tokens were about to expire, and when I went to renew it, I noticed that GitLab had added a new kind of personal access token called Fine-grained token. They've also renamed the old token to Legacy token, which indicates that tokens of that type will be deprecated somewhere down the line.

My old token had full API access, as described in How to create a static website using GitLab Pages, but with this new fine-grained access token, I figured I would configure it to have minimum resource and permissions. GitLab's documentation for this can be found here.

I've tried different permissions, but thus far I've been unable to find the correct permissions for the token to work with Publii, and instead I get the message in the screenshot below.

I first tried with only allowing Code: Push and Read. As that didn't work, I added Commit: Create. That didn't work either, and I remembered that the branch is protected, so I added Protected Branch: Read and Update, and when that didn't work, I decided to post this to see if someone has figured this out.