From 7d1a90b2828522ec111f7cee55421a45577aa9e0 Mon Sep 17 00:00:00 2001
From: hangyu <jhy03261997@gmail.com>
Date: Tue, 31 Mar 2026 10:29:33 -0700
Subject: [PATCH 1/4] update permission again

---
 .github/workflows/release_from_branches.yml | 23 ++++++++++++++++++---
 1 file changed, 20 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release_from_branches.yml b/.github/workflows/release_from_branches.yml
index afce74d51c34..ea480cd24bfa 100644
--- a/.github/workflows/release_from_branches.yml
+++ b/.github/workflows/release_from_branches.yml
@@ -3,11 +3,28 @@ on:
   push:
     branches:
       - 'release-go_router'
-permissions:
-  # Release needs to push a tag back to the repo.
-  contents: write
 jobs:
   release:
+    permissions:
+      # Release needs to push a tag back to the repo.
+      contents: write
+      # the reusable workflow has "read-all" permissions:
+      actions: read
+      artifact-metadata: read
+      attestations: read
+      checks: read
+      deployments: read
+      discussions: read
+      issues: read
+      models: read
+      packages: read
+      pages: read
+      pull-requests: read
+      repository-projects: read
+      statuses: read
+      security-events: read
+      id-token: read
+
     uses: ./.github/workflows/reusable_release.yml
     with:
       is-batch-release: true

From 18b25f5fafac534b81d4128f4a291f917b2151b8 Mon Sep 17 00:00:00 2001
From: hangyu <jhy03261997@gmail.com>
Date: Tue, 31 Mar 2026 10:40:17 -0700
Subject: [PATCH 2/4] update permission again

---
 .github/workflows/release_from_branches.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release_from_branches.yml b/.github/workflows/release_from_branches.yml
index ea480cd24bfa..0cda32b7288f 100644
--- a/.github/workflows/release_from_branches.yml
+++ b/.github/workflows/release_from_branches.yml
@@ -8,7 +8,7 @@ jobs:
     permissions:
       # Release needs to push a tag back to the repo.
       contents: write
-      # the reusable workflow has "read-all" permissions:
+      # The reusable workflow has "read-all" permissions:
       actions: read
       artifact-metadata: read
       attestations: read

From 01ba4cfd1c9e37cecfb838edb7a8a335d4e9864f Mon Sep 17 00:00:00 2001
From: hangyu <jhy03261997@gmail.com>
Date: Tue, 31 Mar 2026 11:51:58 -0700
Subject: [PATCH 3/4] update permission again

---
 .github/workflows/release_from_branches.yml | 23 +++------------------
 .github/workflows/reusable_release.yml      |  3 +--
 2 files changed, 4 insertions(+), 22 deletions(-)

diff --git a/.github/workflows/release_from_branches.yml b/.github/workflows/release_from_branches.yml
index 0cda32b7288f..afce74d51c34 100644
--- a/.github/workflows/release_from_branches.yml
+++ b/.github/workflows/release_from_branches.yml
@@ -3,28 +3,11 @@ on:
   push:
     branches:
       - 'release-go_router'
+permissions:
+  # Release needs to push a tag back to the repo.
+  contents: write
 jobs:
   release:
-    permissions:
-      # Release needs to push a tag back to the repo.
-      contents: write
-      # The reusable workflow has "read-all" permissions:
-      actions: read
-      artifact-metadata: read
-      attestations: read
-      checks: read
-      deployments: read
-      discussions: read
-      issues: read
-      models: read
-      packages: read
-      pages: read
-      pull-requests: read
-      repository-projects: read
-      statuses: read
-      security-events: read
-      id-token: read
-
     uses: ./.github/workflows/reusable_release.yml
     with:
       is-batch-release: true
diff --git a/.github/workflows/reusable_release.yml b/.github/workflows/reusable_release.yml
index e6fc6f2d1c4c..c62d2ee4d8b8 100644
--- a/.github/workflows/reusable_release.yml
+++ b/.github/workflows/reusable_release.yml
@@ -8,8 +8,7 @@ on:
       branch-name:
         required: true
         type: string
-# Declare default permissions as read only.
-permissions: read-all
+
 jobs:
   release:
     if: github.repository_owner == 'flutter'

From d0df91a2e846f2025d71aa5e808db7b10c262e65 Mon Sep 17 00:00:00 2001
From: hangyu <jhy03261997@gmail.com>
Date: Tue, 31 Mar 2026 11:53:26 -0700
Subject: [PATCH 4/4] lint

---
 .github/workflows/reusable_release.yml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/.github/workflows/reusable_release.yml b/.github/workflows/reusable_release.yml
index c62d2ee4d8b8..bf7f9b21f4df 100644
--- a/.github/workflows/reusable_release.yml
+++ b/.github/workflows/reusable_release.yml
@@ -8,7 +8,6 @@ on:
       branch-name:
         required: true
         type: string
-
 jobs:
   release:
     if: github.repository_owner == 'flutter'