ci(release): grant contents:write to the release workflow

The workflow creates a GitHub release and uploads assets, which needs the contents:write token scope. Declaring it per-workflow (matching release-launcher.yml on main) lets the repo keep a read-only default GITHUB_TOKEN.
2026-10-26 07:28:45 -07:00 · 2026-06-16 11:56:17 +03:00
parent ecaf17b764
commit a07360ee3f
1 changed files with 3 additions and 0 deletions
@@ -11,6 +11,9 @@ on:
    tags:
      - 'v1-march-*'

+permissions:
+  contents: write   # create the GitHub release + upload assets
+
 jobs:
  release:
    runs-on: windows-latest