From 01f65059bf03df606ddd01275c1e6d88d98c1a50 Mon Sep 17 00:00:00 2001
From: Sviatoslav Sydorenko <wk@sydorenko.org.ua>
Date: Wed, 10 Apr 2024 00:23:07 +0200
Subject: [PATCH] =?UTF-8?q?=F0=9F=A7=AA=F0=9F=90=9B=20Fix=20post-publish?=
 =?UTF-8?q?=20job=20permissions=20@=20CI/CD?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Declaring permissions explicitly takes away all the unlisted ones.
This patch fixes `git push` in the post-publish job by declaring
`contents: write` in it.
---
 .github/workflows/ci-cd.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 38e5709d27..56fc99e173 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -1239,6 +1239,7 @@ jobs:
       pull_request_url: ${{ steps.pr.outputs.pull_request_url }}
 
     permissions:
+      contents: write  # Mandatory for `git push` to work
       pull-requests: write
 
     steps: