Skip to content

fix(ci): grant prerelease publish pull request read permission - #4747

Merged
SDAChess merged 1 commit into
mainfrom
fix/prerelease-publish-permissions/SDAChess
Oct 20, 2026
Merged

SDAChess merged 1 commit into
mainfrom
fix/prerelease-publish-permissions/SDAChess

Conversation

@SDAChess

Copy link
Copy Markdown
Member

Summary

Fix prerelease workflow validation by granting pull-requests: read to the job calling release-publish.yml. GitHub validates the nested release-notes job's permissions even though that job is skipped for prereleases.

Related Issue

No issue, as requested by the maintainer.

Changes

  • Add pull-requests: read to release-prerelease.yml's publish job.

Release Notes

Testing

  • Checks appropriate to the affected code and behavior pass
    • actionlint passed for release-prerelease.yml, release-publish.yml, and release-notes.yml.
    • git diff --check passed.
  • Unit and E2E tests are not applicable to this permission-only change.
  • The local pre-commit hook could not run because mise is unavailable; the commit bypassed that hook after the focused checks passed.

Checklist

  • Follows Conventional Commits
  • Commits are signed off (DCO)

Signed-off-by: Simon Scatton <sscatton@nvidia.com>
@github-actions

Copy link
Copy Markdown

@SDAChess
SDAChess enabled auto-merge October 20, 2026 12:36
@SDAChess
SDAChess disabled auto-merge October 20, 2026 12:36
@SDAChess
SDAChess merged commit bdb956f into main Oct 20, 2026
80 of 81 checks passed
@SDAChess
SDAChess deleted the fix/prerelease-publish-permissions/SDAChess branch October 20, 2026 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants