From 6c2d613db9d605feb30a52e958bc26e20ac3acc9 Mon Sep 17 00:00:00 2001
From: monsieurleberre <monsieurleberre@users.noreply.github.com>
Date: Fri, 17 Jul 2026 07:40:58 +0200
Subject: [PATCH] fix(ci): grant permissions required by csharp-ci/scala-ci
 v2.4.0

The reusable workflows' matrix-comment job (github-actions#36) requests actions:read and pull-requests:write; a called workflow cannot request a permission the caller does not grant, and GitHub validates this statically at run creation - every CI run since the floating v2 tag moved to 2.4.0 (2026-07-14) ended in startup_failure before any job ran.
---
 .github/workflows/ci.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index d1dbf96..c585169 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -6,6 +6,7 @@ on:
   pull_request:
 
 permissions:
+  actions: read
   contents: read
   packages: read
   pull-requests: write
@@ -67,4 +68,4 @@ jobs:
           csharp="$(jq -c '[.[] + {lang:"csharp"}]' <<<"${CSHARP_STATUS:-[]}")"
           scala="$(jq -c '[.[] + {lang:"scala"}]' <<<"${SCALA_STATUS:-[]}")"
           merged="$(jq -cn --argjson a "$csharp" --argjson b "$scala" '$a + $b')"
-          echo "matrix-data=$merged" >> "$GITHUB_OUTPUT"
+          echo "matrix-data=$merged" >> "$GITHUB_OUTPUT"
\ No newline at end of file