ci(release): grant contents:write to the release workflow

The workflow creates a GitHub release and uploads assets, which needs the contents:write token scope. Declaring it per-workflow (matching release-launcher.yml on main) lets the repo keep a read-only default GITHUB_TOKEN.
2026-10-25 23:18:44 -07:00 · 2026-06-16 11:56:17 +03:00
1 changed files with 3 additions and 0 deletions
@@ -11,6 +11,9 @@ on:
    tags:
      - 'v1-march-*'
 permissions:
  contents: write   # create the GitHub release + upload assets
 jobs:
  release:
    runs-on: windows-latest