From 352774c7091ad5fccc96e913ad004e25f6db2c8e Mon Sep 17 00:00:00 2001
From: Ismo Vuorinen <ismo@ivuorinen.net>
Date: Sun, 16 Nov 2025 11:14:41 +0200
Subject: [PATCH] fix(ci): add missing permission to publish workflow

---
 .github/workflows/publish.yml | 14 +++++++++++---
 1 file changed, 11 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f897205..d276965 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,8 +14,10 @@ jobs:
     timeout-minutes: 15
     permissions:
       statuses: write
-      contents: read
-      packages: read
+      contents: write
+      packages: write
+      issues: write
+      pull-requests: write
 
     steps:
       - name: Run PR Lint
@@ -27,6 +29,12 @@ jobs:
     runs-on: ubuntu-latest
     needs:
       - Linter
+    permissions:
+      statuses: write
+      contents: write
+      packages: write
+      issues: write
+      pull-requests: write
 
     steps:
       - name: Checkout
@@ -57,6 +65,6 @@ jobs:
       - name: Release
         shell: bash
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GH_TOKEN }}
           NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
         run: yarn run semantic-release