From f2fbfd088c76c9826946eca3651dde23dd9f3342 Mon Sep 17 00:00:00 2001 From: Yos Riady Date: Fri, 24 Jul 2026 21:33:31 +0700 Subject: [PATCH] Grant contents: write to the publish job so it can create GitHub releases The softprops/action-gh-release step fails with "Resource not accessible by integration" because the job token only had contents: read. Creating or updating a release requires contents: write. Co-Authored-By: Claude Fable 5 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9fad192..55578f4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,7 +13,7 @@ jobs: # Keep this job on ubuntu-latest unless npm adds self-hosted provenance support. runs-on: ubuntu-latest permissions: - contents: read + contents: write # Required to create the GitHub release id-token: write # Required for OIDC trusted publishing # Workflow-context values are bound to env here and referenced as # shell variables ($TAG/$REPO/$COMMIT_SHA) in run: blocks instead of