From 115a6c263838ee2c8155d5c87a41f1972e5858ed Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Thu, 23 Jul 2026 08:02:13 +0000 Subject: [PATCH] ci(release): grant packages: write to satisfy buildspace reusable workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit buildspace commit 2535977 (Jul 17) added a github-packages-publish job with 'permissions: packages: write' to typescript-service-release.yaml. GitHub validates called-workflow job permissions against the caller's grant when the workflow graph is compiled — even for jobs skipped via 'if:' — so every push to main since then died with startup_failure (runs for #79, #81, #82) and no release was published. Co-authored-by: Ryan Zhu --- .github/workflows/release.yaml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 746f73f..b83ac88 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -35,6 +35,11 @@ jobs: contents: write pull-requests: read id-token: write + # buildspace's typescript-service-release.yaml declares `packages: write` on its + # (opt-in, skipped) github-packages-publish job. GitHub validates called-workflow + # job permissions against this grant at startup — before evaluating `if:` — so + # omitting this fails every run with startup_failure. + packages: write with: service-name: "@photon-ai/cli" build-command: "bun run build"