From c21c9696c2e3b34c2e95b8d1c2a0fed006628eb4 Mon Sep 17 00:00:00 2001 From: ChrisRackauckas-Claude Date: Sat, 20 Jun 2026 07:36:14 -0400 Subject: [PATCH] Grant contents: write to docs deploy job The centralized SciML documentation reusable workflow (SciML/.github documentation.yml@v1) deploys to gh-pages via `GITHUB_TOKEN || DOCUMENTER_KEY`. The reusable workflow declares no `permissions:` block, so the GITHUB_TOKEN inherits the caller's permissions. The caller had none, so the token defaulted to read-only (Contents: read) and `deploydocs` failed with: remote: Permission to SciML/LightweightStats.jl.git denied to github-actions[bot]. fatal: ... The requested URL returned error: 403 This repo has no DOCUMENTER_KEY secret, so deployment relies on the GITHUB_TOKEN. The pre-migration CI.yml docs job granted `contents: write` (last successful gh-pages deploy 2026-05-30); the centralized-workflow migration dropped that, so every push-to-main docs deploy has failed since. Restore the write permission at the caller job level, which propagates to the reusable workflow's token. Co-Authored-By: Chris Rackauckas Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/Documentation.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/Documentation.yml b/.github/workflows/Documentation.yml index 8b710fb..c65d3c2 100644 --- a/.github/workflows/Documentation.yml +++ b/.github/workflows/Documentation.yml @@ -15,6 +15,9 @@ concurrency: jobs: documentation: name: "Documentation" + permissions: + contents: write + statuses: write uses: "SciML/.github/.github/workflows/documentation.yml@v1" with: julia-version: "1"