From dd218655e8aa824ecd46fb4e397b7a9f7a68db15 Mon Sep 17 00:00:00 2001
From: Pedro Nauck <pedronauck@gmail.com>
Date: Fri, 24 Jan 2025 02:26:31 -0300
Subject: [PATCH] ci(repo): Fix permissions on Github actions for release

---
 .github/workflows/ci.yaml              | 3 +--
 .github/workflows/prepare_release.yaml | 5 ++++-
 .github/workflows/publish_release.yaml | 1 -
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index eb4c6dc9..bffb9e85 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -361,7 +361,6 @@ jobs:
 
   release:
     name: Create Release with Knope
-    environment: npm-deploy
     if: >-
       (github.event_name == 'push' &&
       github.ref == 'refs/heads/main' &&
@@ -373,7 +372,7 @@ jobs:
       - build
     runs-on: ubuntu-latest
     permissions:
-      contents: read
+      contents: write
       actions: write
     steps:
       - name: Checkout Repository
diff --git a/.github/workflows/prepare_release.yaml b/.github/workflows/prepare_release.yaml
index a3025adb..e124ab24 100644
--- a/.github/workflows/prepare_release.yaml
+++ b/.github/workflows/prepare_release.yaml
@@ -17,6 +17,10 @@ env:
   RUST_VERSION: 1.81.0
   RUST_NIGHTLY_VERSION: nightly-2024-11-06
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   setup:
     if: "!startsWith(github.event.head_commit.message, 'ci(release)')"
@@ -33,7 +37,6 @@ jobs:
           echo "branch=changeset/release-main" >> $GITHUB_OUTPUT
 
   prepare-release:
-    environment: npm-deploy
     if: "!startsWith(github.event.head_commit.message, 'ci(release)')"
     needs: setup
     runs-on: ubuntu-latest
diff --git a/.github/workflows/publish_release.yaml b/.github/workflows/publish_release.yaml
index f7c1c2f5..bd4edc6a 100644
--- a/.github/workflows/publish_release.yaml
+++ b/.github/workflows/publish_release.yaml
@@ -17,7 +17,6 @@ jobs:
   publish-crates:
     name: Publish on Crates.io
     runs-on: ubuntu-latest
-    environment: npm-deploy
     steps:
       - uses: actions/checkout@v4