From ed4fcff293dabb77435eced58f066ee49e4dc7a4 Mon Sep 17 00:00:00 2001 From: Joel Hawksley Date: Tue, 25 Aug 2026 15:28:06 -0600 Subject: [PATCH] Grant actions: write to publish job The publish job runs `gh workflow run push_gem.yml` at the end of script/publish to kick off the gem push, but that dispatch was failing with HTTP 403 "Resource not accessible by integration" because the job's GITHUB_TOKEN lacked `actions: write`. The error was swallowed by `|| true`, so the job showed green while the gem never got pushed. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> Copilot-Session: d016fc4d-0414-434d-a7c2-44ad6afc54f4 --- .github/workflows/publish-release.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml index 9c3a4e9b6..3c86757eb 100644 --- a/.github/workflows/publish-release.yml +++ b/.github/workflows/publish-release.yml @@ -17,6 +17,7 @@ jobs: permissions: contents: write pull-requests: read + actions: write # Only run if this is a release commit created by script/release. # Match either the direct commit message from script/release # ("release X.Y.Z") or the merge-commit body containing the release