Skip to content

ci: include workflow write permission for changelog steps#2501

Closed
zimeg wants to merge 2 commits intomainfrom
zimeg-ci-changsets-permission
Closed

ci: include workflow write permission for changelog steps#2501
zimeg wants to merge 2 commits intomainfrom
zimeg-ci-changsets-permission

Conversation

@zimeg
Copy link
Member

@zimeg zimeg commented Feb 4, 2026

Summary

This PR fixes an issue with workflow permissions create a new changeset:

/usr/bin/git push origin HEAD:changeset-release/main --force
To https://github.com/slackapi/node-slack-sdk
 ! [remote rejected]   HEAD -> changeset-release/main (refusing to allow a GitHub App to create or update workflow `.github/workflows/release.yml` without `workflows` permission)
error: failed to push some refs to 'https://github.com/slackapi/node-slack-sdk'

🔗 https://github.com/slackapi/node-slack-sdk/actions/runs/21659570314/job/62442776234#step:5:39

Requirements

@zimeg zimeg self-assigned this Feb 4, 2026
@zimeg zimeg requested a review from a team as a code owner February 4, 2026 06:00
@zimeg zimeg added the docs M-T: Documentation work only label Feb 4, 2026
@changeset-bot
Copy link

changeset-bot bot commented Feb 4, 2026

⚠️ No Changeset found

Latest commit: a43f3a8

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@codecov
Copy link

codecov bot commented Feb 4, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.10%. Comparing base (8962739) to head (a43f3a8).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2501   +/-   ##
=======================================
  Coverage   93.10%   93.10%           
=======================================
  Files          40       40           
  Lines       11250    11250           
  Branches      713      713           
=======================================
  Hits        10474    10474           
  Misses        764      764           
  Partials       12       12           
Flag Coverage Δ
cli-hooks 95.30% <ø> (ø)
cli-test 94.79% <ø> (ø)
oauth 77.39% <ø> (ø)
socket-mode 61.87% <ø> (ø)
web-api 98.11% <ø> (ø)
webhook 96.66% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@zimeg zimeg enabled auto-merge (squash) February 4, 2026 06:14
@zimeg zimeg marked this pull request as draft February 4, 2026 06:16
auto-merge was automatically disabled February 4, 2026 06:16

Pull request was converted to draft

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
@zimeg
Copy link
Member Author

zimeg commented Feb 4, 2026

🤔 Related to changesets/action#179 - I'm not certain what the right scopes are for updating version is at the moment...

@zimeg
Copy link
Member Author

zimeg commented Feb 4, 2026

🗣️ No scopes need to be changed from the following!

contents: write
pull-requests: write

The order of PRs beforehand caused this - a changesets PR didn't exist since our most recent release in 39949d1 and a @dependabot merge to workflows updated a workflow step version in 0de0777 after.

To fix this, I created the changeset branch from a local machine:

$ git checkout -b changeset-release/main
$ npm run changeset -- version
$ git add .changeset/ packages/
$ git commit -m "chore: release"
$ git push -u origin changeset-release/main

And a workflow reattempt worked - #2503! We we're hoping to bring the latest changes of main to this branch ourselves to avoid updating workflow permissions for now 🔏

@zimeg zimeg closed this Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs M-T: Documentation work only

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant