fix: add contents read permission for CI validation workflow#1292
Merged
fix: add contents read permission for CI validation workflow#1292
Conversation
✅ Deploy Preview for doist-typist ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
rfgamaral
added
the
👀 Show PR
doist-release-bot bot
pushed a commit
that referenced
this pull request
Apr 8, 2026
## [10.0.1](v10.0.0...v10.0.1) (2026-04-08) ### Bug Fixes * add contents read permission for CI validation workflow ([#1292](#1292)) ([d3cb224](d3cb224))
doistbot
reviewed
Apr 8, 2026
Member
doistbot
left a comment
doistbot
left a comment
There was a problem hiding this comment.
This PR effectively fixes the release workflow failure by adding the required read permissions for the CI validation step, ensuring the end-to-end pipeline can execute successfully. While the fix is well-targeted, there is a minor opportunity to improve the security posture by scoping the read permission strictly to the CI validation job rather than the entire workflow, keeping the token permissions minimal for the subsequent release steps.
|
🎉 This PR is included in version 10.0.1 🎉 The release is available on: Your semantic-release bot 📦🚀 |
doist-release-bot
bot
added
the
released
1 task
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Overview
Fixes the release workflow failing because the called CI validation workflow requests
contents: read, which requires the caller to grant at least that permission level. Follow-up to #1291.PR Checklist
Test plan
The release workflow should pass after merge. This PR also doubles as the release trigger to validate the full workflow end-to-end (GitHub App token, npm publish, GitHub Packages publish, PR comments).