Skip to content

Conversation

@schmidtw
Copy link
Member

@schmidtw schmidtw commented Feb 9, 2026

No description provided.

@codecov
Copy link

codecov bot commented Feb 9, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (38e66de) to head (ef490d2).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##              main      #389   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            1         1           
  Lines            2         2           
=========================================
  Hits             2         2           
Flag Coverage Δ
unittests 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the scheduled/dispatch auto-release workflow to grant additional permissions to the job that invokes the reusable auto-releaser workflow, enabling the called workflow to perform release/tag operations.

Changes:

  • Adds a job-level permissions: write-all to the release job in .github/workflows/auto-release.yml.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.


jobs:
release:
permissions: write-all
Copy link

Copilot AI Feb 9, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

permissions: write-all grants the reusable release job full write access to all permission scopes, which is broader than needed and increases blast radius (especially since secrets: inherit is used). Based on the called workflow steps (tag/release creation), this likely only requires contents: write (and keep other scopes as read/unset). Prefer specifying the minimal explicit permissions map here instead of write-all.

Suggested change
permissions: write-all
permissions:
contents: write

Copilot uses AI. Check for mistakes.
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.


💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@schmidtw schmidtw merged commit dfa7996 into main Feb 10, 2026
79 checks passed
@schmidtw schmidtw deleted the fix-perms branch February 10, 2026 03:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant