From 353abc6a967d0be94c1e0638a96eed6e9c4a14b9 Mon Sep 17 00:00:00 2001 From: ChrisRackauckas-Claude Date: Sat, 20 Jun 2026 13:26:26 -0400 Subject: [PATCH] Restore contents:write permission for docs deploy (fix gh-pages 403) The Documentation deploy fails on main: the docs build succeeds but deploydocs cannot push to gh-pages (403 / Permission denied). The CI-centralization migration replaced the docs job with a thin caller of SciML/.github/.github/workflows/documentation.yml@v1 and dropped the permissions: block. This repo has no DOCUMENTER_KEY secret, so Documenter deploys via GITHUB_TOKEN. The reusable workflow declares no permissions, so the caller job's (default read-only contents) permissions flow through to the token, which can no longer push to gh-pages. Add permissions: { actions: write, contents: write, statuses: write } to the caller docs job, restoring the token-based deploy mechanism. Mirrors SciML/OrdinaryDiffEqOperatorSplitting.jl#90. Co-Authored-By: Chris Rackauckas Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/Documentation.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/Documentation.yml b/.github/workflows/Documentation.yml index 7135f26..eee550f 100644 --- a/.github/workflows/Documentation.yml +++ b/.github/workflows/Documentation.yml @@ -11,5 +11,9 @@ concurrency: jobs: docs: name: "Documentation" + permissions: + actions: write + contents: write + statuses: write uses: "SciML/.github/.github/workflows/documentation.yml@v1" secrets: "inherit"