ci: grant contents:write so desktop release can be published

The release step (softprops/action-gh-release) failed with 403 "Resource not
accessible by integration" because the default GITHUB_TOKEN is read-only. Add a
top-level permissions block so tag builds can create the Release and upload the
DMG. This is why v1.1.0/v1.2.0 built the DMG but never published a Release.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
周小舟
2026-06-03 20:21:20 +08:00
parent 38a2385c0c
commit e7448e3394

View File

@@ -22,6 +22,12 @@ on:
tags:
- 'v*'
# Needed by softprops/action-gh-release to create the Release and upload the
# DMG. Without this the default GITHUB_TOKEN is read-only and the release step
# fails with "Resource not accessible by integration" (403).
permissions:
contents: write
jobs:
build-macos-arm64:
runs-on: macos-14 # Apple Silicon runner