@@ -1,12 +1,37 @@
-name: Maintenance branch sanity
+name: Apply maintenance unblock
 
 on:
   push:
     branches:
       - automation/maintenance-unblock-2026-09-10-z
 
+permissions:
+  contents: write
+
 jobs:
-  sanity:
+  apply:
     runs-on: ubuntu-24.04
+    timeout-minutes: 30
     steps:
-      - run: echo ok
+      - uses: actions/checkout@v7
+        with:
+          ref: automation/maintenance-unblock-2026-09-10-z
+
+      - name: Apply source changes
+        run: python3 .github/maintenance-unblock.py
+
+      - name: Refresh lockfile and check changed crates
+        run: |
+          rustup toolchain install 1.98.1 --profile minimal --component rustfmt
+          cargo +1.98.1 update
+          cargo +1.98.1 fmt --all
+          cargo +1.98.1 check --locked -p gateway-example -p e2e-tests --lib
+
+      - name: Commit maintenance result
+        run: |
+          git rm .github/maintenance-unblock.py .github/workflows/maintenance-unblock-apply.yml
+          git config user.name github-actions[bot]
+          git config user.email 41898282+github-actions[bot]@users.noreply.github.com
+          git add Cargo.toml Cargo.lock gateway/Cargo.toml gateway/src/auth/handlers.rs e2e-tests/Cargo.toml e2e-tests/src/common/db.rs
+          git commit -m "chore: unblock queued dependency upgrades"
+          git push origin HEAD:automation/maintenance-unblock-2026-09-10-z