From 6c70e34613b400d5207b45ee9b4efb4fe18918c6 Mon Sep 17 00:00:00 2001 From: Taewoon Kim Date: Thu, 5 Nov 2026 11:16:55 +0900 Subject: [PATCH] CI: assign-milestone needs pull-requests: write to set a PR's milestone The workflow from #252 failed on the merges of #252 and #256 with 403 Resource not accessible by integration when it set the pull request's milestone; issues: write covers issues only. The workflow still checks out no pull request code (pull_request_target), so the wider token stays safe. Closes #259 Co-Authored-By: Claude Opus 5.5 --- .github/workflows/assign-milestone.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/assign-milestone.yml b/.github/workflows/assign-milestone.yml index f41bc33b..256dbedd 100644 --- a/.github/workflows/assign-milestone.yml +++ b/.github/workflows/assign-milestone.yml @@ -20,7 +20,9 @@ on: permissions: issues: write - pull-requests: read + # setting the milestone of a pull request needs pull-requests: write (issues: write covers issues only; + # with read the PR update got 403 Resource not accessible by integration on the merges of #252 and #256) + pull-requests: write contents: read jobs: