ci(github): improve release-please security

2026-08-29 08:34:50 +08:00 · 2026-04-04 02:47:10 +03:00
parent 458b8c28d0
commit 20f2916c31
2 changed files with 3 additions and 1 deletions
@@ -20,6 +20,8 @@ jobs:
        with:
          app-id: ${{ secrets.CI_APP_ID }}
          private-key: ${{ secrets.CI_APP_PRIVATE_KEY }}
+          permission-contents: write
+          permission-pull-requests: write

      - uses: googleapis/release-please-action@v4
        with:
@@ -3,7 +3,7 @@
  "release-type": "go",
  "skip-changelog": true,
  "bump-minor-pre-major": true,
-  "bump-patch-for-minor-pre-major": false,
+  "bump-patch-for-minor-pre-major": true,
  "draft": true,
  "force-tag-creation": true,
  "include-v-in-tag": true,