diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ed0799ac52..8ba5efcad7 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,6 +18,8 @@ on: jobs: release: + permissions: + contents: write runs-on: ubuntu-latest env: BAZELISK_SKIP_VERSION_CHECK: "1" @@ -31,7 +33,7 @@ jobs: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: - token: ${{ secrets.PAT_TOKEN }} + token: ${{ github.token }} - name: Check Actor run: | # Release actor should be in the OWNER list @@ -108,20 +110,10 @@ jobs: git push https://${{ github.token }}@github.com/${{ github.repository }}.git \ automated-release-${{ github.event.inputs.releaseVersion }}:automated-release-${{ github.event.inputs.releaseVersion }} git push https://${{ github.token }}@github.com/${{ github.repository }}.git v${{ github.event.inputs.releaseVersion }} - - name: Pull Request - if: ${{ github.event.inputs.dry-run != 'true' }} - env: - GH_TOKEN: ${{ secrets.PAT_TOKEN }} - run: | - gh pr create \ - --base ${{ github.ref_name }} \ - --head automated-release-${{ github.event.inputs.releaseVersion }} \ - --title "Automated Release: ${{ github.event.inputs.releaseVersion }}" \ - --body "" - name: Publish Release if: ${{ github.event.inputs.dry-run != 'true' }} env: - GH_TOKEN: ${{ secrets.PAT_TOKEN }} + GH_TOKEN: ${{ github.token }} run: | gh release create v${{ github.event.inputs.releaseVersion }} \ --title "v${{ github.event.inputs.releaseVersion }}" \