From cbdda309704f8858e5460673b9197e03d42f3065 Mon Sep 17 00:00:00 2001 From: Roberto Cella Date: Thu, 19 Mar 2026 20:46:22 +0100 Subject: [PATCH 1/3] Add write permissions for contents in bump workflow --- .github/workflows/bump.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/bump.yaml b/.github/workflows/bump.yaml index 92240bfe..9973f47c 100644 --- a/.github/workflows/bump.yaml +++ b/.github/workflows/bump.yaml @@ -5,6 +5,9 @@ on: schedule: - cron: '0 8 * * *' +permissions: + contents: write + jobs: bump: name: Search for dependency updates From 06d1be878eb923fd97570548b09e73985ebdcfa6 Mon Sep 17 00:00:00 2001 From: Roberto Cella Date: Thu, 19 Mar 2026 20:54:34 +0100 Subject: [PATCH 2/3] Configure BUMP_TOKEN in bump.yaml --- .github/workflows/bump.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/bump.yaml b/.github/workflows/bump.yaml index 9973f47c..064c6f52 100644 --- a/.github/workflows/bump.yaml +++ b/.github/workflows/bump.yaml @@ -15,6 +15,8 @@ jobs: steps: - name: Checkout code changes uses: actions/checkout@v6 + with: + token: ${{ secrets.BUMP_TOKEN }} - name: Update dependencies uses: wader/bump/action@master From 3269a22a02f95e4ca7a4dc646ac3da639d00a9f6 Mon Sep 17 00:00:00 2001 From: Roberto Cella Date: Thu, 19 Mar 2026 20:57:37 +0100 Subject: [PATCH 3/3] Remove permissions from bump.yaml Removed permissions section from the workflow. --- .github/workflows/bump.yaml | 3 --- 1 file changed, 3 deletions(-) diff --git a/.github/workflows/bump.yaml b/.github/workflows/bump.yaml index 064c6f52..361cfdcf 100644 --- a/.github/workflows/bump.yaml +++ b/.github/workflows/bump.yaml @@ -5,9 +5,6 @@ on: schedule: - cron: '0 8 * * *' -permissions: - contents: write - jobs: bump: name: Search for dependency updates