Skip to content

fix(release): let the Electron workflow start again — grant actions:read to the npm leg (twin of #11973) - #11974

Merged
diegosouzapw merged 1 commit into
release/v3.8.51from
fix/v3851-electron-workflow-actions-read
Aug 29, 2026
Merged

diegosouzapw merged 1 commit into
release/v3.8.51from
fix/v3851-electron-workflow-actions-read

Conversation

@diegosouzapw

Copy link
Copy Markdown
Owner

Gêmeo da #11973 (main) para a cópia mais nova do workflow que vive nesta branch, para a tag v3.8.51 não repetir a release sem assets da v3.8.50.

Mesmas três mudanças: publish-npm.permissions += actions: read (o job publish do npm-publish.yml reutilizado pede; um caller que concede menos é recusado na inicialização e o job release morre junto); input publish_npm (bool, default true) com if no job; ref: needs.validate.outputs.version nos checkouts de web-build/build/release.

actionlint limpo; electron-release-desktop-channel-8949 4/4, electron-release-efficiency 3/3, build-next-isolated-windows-home-2402 6/6, electron-release-latest-yml.repro 2/2, check-workflows 32/32.

…ead to the npm leg (release/v3.8.51 twin of #11973)

Same three changes as #11973 on main, applied to this branch's newer copy of the
workflow so the v3.8.51 tag does not repeat v3.8.50's zero-asset release:
publish-npm grants actions:read (the called publish job requests it — a caller that
grants less is refused at startup and the release job dies with it), a publish_npm
dispatch input gates the npm leg, and web-build/build/release check out the tag
named by the dispatch. actionlint clean; the five workflow-pinning suites pass.
@diegosouzapw
diegosouzapw merged commit 757cc3b into release/v3.8.51 Aug 29, 2026
20 checks passed
@diegosouzapw
diegosouzapw deleted the fix/v3851-electron-workflow-actions-read branch August 29, 2026 05:42
muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026
…ead to the npm leg (release/v3.8.51 twin of diegosouzapw#11973) (diegosouzapw#11974)

Same three changes as diegosouzapw#11973 on main, applied to this branch's newer copy of the
workflow so the v3.8.51 tag does not repeat v3.8.50's zero-asset release:
publish-npm grants actions:read (the called publish job requests it — a caller that
grants less is refused at startup and the release job dies with it), a publish_npm
dispatch input gates the npm leg, and web-build/build/release check out the tag
named by the dispatch. actionlint clean; the five workflow-pinning suites pass.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant