From bcc5b963223cc6d1ebb11eea0bd4e3852452cfd6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Roberto=20Estev=C3=A3o?= <robertode@microsoft.com>
Date: Wed, 31 Jul 2024 21:33:49 +0000
Subject: [PATCH] Fix permissions configuration

---
 .github/workflows/release-to-main.yml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release-to-main.yml b/.github/workflows/release-to-main.yml
index eccc59f5..6fc0d16c 100644
--- a/.github/workflows/release-to-main.yml
+++ b/.github/workflows/release-to-main.yml
@@ -7,7 +7,8 @@ on:
 
 permissions:
   id-token: write
-  contents: read
+  contents: write
+  pull-requests: write
 
 jobs:
   release:
@@ -41,8 +42,6 @@ jobs:
     - name: Commit changes
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      permissions:
-        contents: write
       run: |
         ROOT=$(git rev-parse --show-toplevel)
         CONSTANTS_MODULE="$ROOT"/src/vibe_core/vibe_core/cli/constants.py
@@ -54,8 +53,6 @@ jobs:
     - name: Open PR to main
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      permissions:
-        pull-requests: write
       run: |
         RELEASE_BRANCH=release-main-${{ github.run_id }}
         gh pr create -B $RELEASE_BRANCH -H main --title 'Release ${{ github.run_id}}' --body 'Created by Github action'