From e7448e3394aa42906d5fae79d2908f69e2172028 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E5=91=A8=E5=B0=8F=E8=88=9F?= Date: Wed, 3 Jun 2026 20:21:20 +0800 Subject: [PATCH] ci: grant contents:write so desktop release can be published The release step (softprops/action-gh-release) failed with 403 "Resource not accessible by integration" because the default GITHUB_TOKEN is read-only. Add a top-level permissions block so tag builds can create the Release and upload the DMG. This is why v1.1.0/v1.2.0 built the DMG but never published a Release. Co-Authored-By: Claude Opus 4.8 --- .github/workflows/desktop-build.yml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.github/workflows/desktop-build.yml b/.github/workflows/desktop-build.yml index 1eaa0b0d..52f28bd2 100644 --- a/.github/workflows/desktop-build.yml +++ b/.github/workflows/desktop-build.yml @@ -22,6 +22,12 @@ on: tags: - 'v*' +# Needed by softprops/action-gh-release to create the Release and upload the +# DMG. Without this the default GITHUB_TOKEN is read-only and the release step +# fails with "Resource not accessible by integration" (403). +permissions: + contents: write + jobs: build-macos-arm64: runs-on: macos-14 # Apple Silicon runner