From 8eeab01b6ea984ebae77a330c47b4d4a86e69151 Mon Sep 17 00:00:00 2001 From: Yun Wang Date: Thu, 10 Sep 2026 14:39:36 +0200 Subject: [PATCH] fix(ci): grant contents write to the release job ncipollo/release-action creates the tag and release with GITHUB_TOKEN, which needs contents write. The least-privilege change left it at read, and this workflow uploads to PyPI before that step, so a failure would leave a package without a tag. Co-Authored-By: Claude Fable 5.1 --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 35657dd..a991e46 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,7 +7,7 @@ on: - master permissions: - contents: read + contents: write pull-requests: read jobs: