From e3531e5bb078e0e118c22ec20fc798a7d1a0504e Mon Sep 17 00:00:00 2001 From: erwan-joly Date: Thu, 23 Apr 2026 23:42:30 +1200 Subject: [PATCH] ci: drop broken REPO_TOKEN, grant contents:write instead The release asset upload was hitting 'Bad credentials' because secrets.REPO_TOKEN is expired / not set. Remove the explicit token override and add job-level contents:write so the default GITHUB_TOKEN has enough scope to create the GitHub release. NuGet push is unaffected and already worked via NUGET_API_KEY. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/dotnet.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/dotnet.yml b/.github/workflows/dotnet.yml index defefb8..d12c9d2 100644 --- a/.github/workflows/dotnet.yml +++ b/.github/workflows/dotnet.yml @@ -11,6 +11,8 @@ on: jobs: build: runs-on: ubuntu-latest + permissions: + contents: write steps: - uses: actions/checkout@v5 - name: Setup .NET @@ -47,5 +49,4 @@ jobs: uses: softprops/action-gh-release@v2 with: files: ${{ steps.build_artifact.outputs.ARTIFACT_PATH }} - token: ${{ secrets.REPO_TOKEN }}