From 74a7a3c7908798b73672c6703d55ef8b486e8173 Mon Sep 17 00:00:00 2001 From: Neil <4138956+nwparker@users.noreply.github.com> Date: Fri, 1 May 2026 22:34:26 -0700 Subject: [PATCH] fix(release): grant actions:write on callers of release.yml (#1341) release.yml's publish-release job got `actions: write` in f6cc2aee so it can dispatch homebrew-bump.yml, but reusable-workflow permissions are capped by the caller. release-cut.yml and release-rc.yml only listed `contents: write`, so the first cut after f6cc2aee died with startup_failure (run 25244518794) before any job could start. Grant `actions: write` on both callers to match what release.yml needs. Co-authored-by: Orca --- .github/workflows/release-cut.yml | 7 +++++++ .github/workflows/release-rc.yml | 5 +++++ 2 files changed, 12 insertions(+) diff --git a/.github/workflows/release-cut.yml b/.github/workflows/release-cut.yml index 20d62e6e8..7389ddc66 100644 --- a/.github/workflows/release-cut.yml +++ b/.github/workflows/release-cut.yml @@ -39,6 +39,13 @@ on: permissions: contents: write + # Why: this workflow calls release.yml, whose publish-release job needs + # actions: write to dispatch homebrew-bump.yml. Reusable workflows are + # capped by the caller's permissions, so the caller must list every + # scope the callee needs. Omitting this produced a startup_failure on + # run 25244518794 immediately after actions:write was added to + # release.yml in f6cc2aee. + actions: write concurrency: group: release-cut diff --git a/.github/workflows/release-rc.yml b/.github/workflows/release-rc.yml index 3ebdc8c2b..a97aba35b 100644 --- a/.github/workflows/release-rc.yml +++ b/.github/workflows/release-rc.yml @@ -17,6 +17,11 @@ on: permissions: contents: write + # Why: this workflow calls release.yml, whose publish-release job needs + # actions: write to dispatch homebrew-bump.yml. Reusable workflows are + # capped by the caller's permissions, so the caller must list every + # scope the callee needs. Mirrors the fix in release-cut.yml. + actions: write concurrency: group: release-rc