Skip to content

fix(ci): grant release workflow write permissions - #139

Merged
Donny/강동윤 (kdy1) merged 1 commit into
mainfrom
kdy1/fix-release-token-permissions
Oct 28, 2026
Merged

Donny/강동윤 (kdy1) merged 1 commit into
mainfrom
kdy1/fix-release-token-permissions

Conversation

@kdy1

Copy link
Copy Markdown
Member

The release branch push still fails with HTTP 403 after #138. The latest run authenticates as swc-bot, and the repository collaborator API reports that account has only read permission (push: false).

Use the repository's GITHUB_TOKEN through the Changesets github-token input, grant contents: write and pull-requests: write, and remove the BOT_GH_TOKEN environment override. Keep persist-credentials: false so Changesets configures Git authentication. Keep the existing OIDC permission for npm publishing.

The repository currently allows GitHub Actions to create pull requests. Release PRs created with GITHUB_TOKEN do not automatically trigger ordinary pull_request workflows.

Failed run: https://github.com/swc-project/pkgs/actions/runs/40670827614

Validation of the workflow change before commit 6a98e5c:

  • actionlint .github/workflows/publish.yml passed.
  • git diff --check passed.
  • Read the repository workflow permissions and swc-bot collaborator permissions through the GitHub API.

Authenticated release pushes, release PR creation, and npm publishing remain unverified. They require a workflow run with the changed permissions.

@changeset-bot

changeset-bot Bot commented Oct 28, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 6a98e5c

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 28, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-28T10:20:21.348855Z 6a98e5c PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@kdy1
Donny/강동윤 (kdy1) merged commit 0f56afc into main Oct 28, 2026
13 checks passed
@kdy1
Donny/강동윤 (kdy1) deleted the kdy1/fix-release-token-permissions branch October 28, 2026 10:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant