ci(release): grant contents:write to the release workflow (#16)

The workflow creates a GitHub release and uploads assets, which needs the contents:write token scope. Declaring it per-workflow (matching release-launcher.yml on main) lets the repo keep a read-only default GITHUB_TOKEN.
2026-10-25 23:18:44 -07:00 · 2026-06-16 11:56:31 +03:00
parent 1727e62376
commit 29df11a45a
1 changed files with 3 additions and 0 deletions
@@ -11,6 +11,9 @@ on:
    tags:
      - 'v1-december-*'

+permissions:
+  contents: write   # create the GitHub release + upload assets
+
 jobs:
  release:
    runs-on: windows-latest