From 71db3f4b5b2646a286c98b1e9ed0c062b5d32fa3 Mon Sep 17 00:00:00 2001
From: Ani <aniongithub@users.noreply.github.com>
Date: Mon, 17 Aug 2026 01:56:57 +0000
Subject: [PATCH] CI: fix release asset upload token permission

---
 .github/workflows/release.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e6d32e..d8fa699 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -5,7 +5,7 @@ on:
     types: [published]
 
 permissions:
-  contents: read
+  contents: write
   packages: write
 
 jobs:
@@ -69,5 +69,7 @@ jobs:
       uses: softprops/action-gh-release@v2
       with:
         files: memoryalpha-rag-api-spec.json
-      env:
-        GITHUB_TOKEN: ${{ secrets.MEMORYALPHA_RAG_API_MODIFY_RELEASE_TOKEN }}
+        # Must be passed as the `token` input; a token here overrides the
+        # GITHUB_TOKEN env, whereas the input's default (github.token) would
+        # otherwise win and lacks release-write permission.
+        token: ${{ secrets.MEMORYALPHA_RAG_API_MODIFY_RELEASE_TOKEN }}