From 751fd5638d446783c2359dc8c32ad8737907562e Mon Sep 17 00:00:00 2001 From: Andre Manoel Date: Sat, 18 Apr 2026 03:19:01 +0000 Subject: [PATCH] fix(ci): grant permissions to reusable workflow calls in build-docs and pack-tutorials The top-level `permissions: {}` added in #517 restricts all jobs to zero permissions by default. The `build-notebooks` jobs that call the reusable workflow did not override this, so GitHub Actions refused to start them (startup_failure). Add the required `actions: read` and `contents: write` permissions to both calling jobs. Fixes the v0.5.7 release docs build failure. --- .github/workflows/build-docs.yml | 3 +++ .github/workflows/pack-tutorials.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/build-docs.yml b/.github/workflows/build-docs.yml index 0736dfc8e..73c53ce54 100644 --- a/.github/workflows/build-docs.yml +++ b/.github/workflows/build-docs.yml @@ -15,6 +15,9 @@ permissions: {} jobs: build-notebooks: uses: ./.github/workflows/build-notebooks.yml + permissions: + actions: read + contents: write with: use_cache: ${{ github.event_name == 'workflow_dispatch' && inputs.use_cache || false }} secrets: inherit diff --git a/.github/workflows/pack-tutorials.yml b/.github/workflows/pack-tutorials.yml index a505684c3..4b2c3d57c 100644 --- a/.github/workflows/pack-tutorials.yml +++ b/.github/workflows/pack-tutorials.yml @@ -10,6 +10,9 @@ permissions: {} jobs: build-notebooks: uses: ./.github/workflows/build-notebooks.yml + permissions: + actions: read + contents: write secrets: inherit zip-and-upload: needs: build-notebooks