From 46d37efe5add41e96c9244c6c73c1f7cfd13ced2 Mon Sep 17 00:00:00 2001 From: Ray Walker Date: Sun, 4 Oct 2026 09:27:49 +1100 Subject: [PATCH] ci(release): request only the permissions the release App has (LAB-5117) The release App is granted contents and pull-requests write. Asking for issues write as well makes the token request fail, so the release-please job could never run. --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4fc6570..54dcda4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,10 +47,10 @@ jobs: with: app-id: ${{ secrets.APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} - # Only what release-please and the assignee step use. + # What release-please and the assignee step use, and all the + # release App is granted: asking for more fails the token request. permission-contents: write permission-pull-requests: write - permission-issues: write - uses: googleapis/release-please-action@16a9c90856f42705d54a6fda1823352bdc62cf38 # v4 if: github.event_name == 'push'