From bc7bfe7151c8a9c68180606ce81ed0270f546a83 Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 11 Aug 2026 22:53:07 +0000 Subject: [PATCH 1/2] ci: grant contents write so feature releases get tagged devcontainers/action creates the `feature__` tag through the git refs API using GITHUB_TOKEN. With `contents: read` the call is rejected and the action downgrades the failure to a warning, so releases succeeded while silently skipping every tag. Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_017wvd5GPvBZVEU8QgkPkNQb --- .github/workflows/release.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c569191..ffbae13 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,11 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 permissions: - contents: read + # devcontainers/action tags the released commit as + # `feature__` through the git refs API with GITHUB_TOKEN, so + # a read-only token turns every release into a "Failed to automatically + # add repo tag" warning without failing the job. + contents: write packages: write steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 From b937aff49a4976a9056bcb615cdb1fe89e111f4c Mon Sep 17 00:00:00 2001 From: Claude Date: Tue, 11 Aug 2026 22:55:12 +0000 Subject: [PATCH 2/2] ci: drop comment from release permissions block Co-Authored-By: Claude Opus 5 Claude-Session: https://claude.ai/code/session_017wvd5GPvBZVEU8QgkPkNQb --- .github/workflows/release.yml | 4 ---- 1 file changed, 4 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ffbae13..41e5de6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,10 +20,6 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 30 permissions: - # devcontainers/action tags the released commit as - # `feature__` through the git refs API with GITHUB_TOKEN, so - # a read-only token turns every release into a "Failed to automatically - # add repo tag" warning without failing the job. contents: write packages: write steps: