ci!: set pr write perms on release-labels (#16380)

ethanndickson · web-flow · commit 8815b38c8847 · 2025-02-03T20:49:37.000+11:00
I'm pretty sure this is the fix, but I can't test it without merging it, as `pull_request_target` causes the workflow to run using the workflow on `main` (where the permissions aren't set). This comment would seem to indicate that `pull_request_target` with PR write perms does the trick: actions/labeler#136 (comment) From what I can tell this job has been broken since ~nov '24, which leads me to believe it was the permissions change made that month: https://github.com/coder/coder/actions/runs/11915659159/job/33206435274
diff --git a/.github/workflows/contrib.yaml b/.github/workflows/contrib.yaml
@@ -46,6 +46,8 @@ jobs:
 
   release-labels:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     # Skip tagging for draft PRs.
     if: ${{ github.event_name == 'pull_request_target' && !github.event.pull_request.draft }}
     steps:
