From 84e5c01305ac338a80256947c718f271b94419d5 Mon Sep 17 00:00:00 2001
From: JeffreyChen <zenxcvwait@gmail.com>
Date: Tue, 21 Apr 2026 18:41:38 +0800
Subject: [PATCH] Grant pull-requests:write to stable publish job

gh pr create uses the GraphQL createPullRequest mutation, which needs
pull-requests:write on GITHUB_TOKEN. Without it the workflow fails with
'Resource not accessible by integration'.
---
 .github/workflows/ci-stable.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci-stable.yml b/.github/workflows/ci-stable.yml
index b2d5c36..80d1200 100644
--- a/.github/workflows/ci-stable.yml
+++ b/.github/workflows/ci-stable.yml
@@ -65,6 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       contents: write
+      pull-requests: write
     steps:
       - uses: actions/checkout@v4
         with: