Skip to content

Grant write-all permission for auto-bump workflow#966

Merged
dahlia merged 1 commit into
dahlia:mainfrom
Goooler:grand-permissions
Jan 21, 2026
Merged

Grant write-all permission for auto-bump workflow#966
dahlia merged 1 commit into
dahlia:mainfrom
Goooler:grand-permissions

Conversation

@Goooler
Copy link
Copy Markdown
Collaborator

@Goooler Goooler commented Jan 21, 2026

Fixes errors like:

remote: Permission to dahlia/homebrew-jetbrains-eap.git denied to hong-bot.
fatal: unable to access 'https://github.com/dahlia/homebrew-jetbrains-eap/': The requested URL returned error: 403
Error: Failure while executing; `/usr/bin/env git push --set-upstream ***github.com/dahlia/homebrew-jetbrains-eap bump-intellij-idea-eap-2026.1-261.17801.55:bump-intellij-idea-eap-2026.1-261.17801.55` exited with 128. Here's the output:
remote: Permission to dahlia/homebrew-jetbrains-eap.git denied to hong-bot.
fatal: unable to access 'https://github.com/dahlia/homebrew-jetbrains-eap/': The requested URL returned error: 403

Copied from https://github.com/Goooler/homebrew-repo/blob/3048e83471efa2c806e92e74c91633cbfcc4c18e/.github/workflows/autobump.yml#L21

bump:
runs-on: macos-latest
if: github.event.repository.fork == false
permissions: write-all
Copy link
Copy Markdown
Collaborator Author

@Goooler Goooler Jan 21, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I tested the bump workflow without this permission at Goooler#3, using secrets.GITHUB_TOKEN instead of secrets.GH_TOKEN. This should explain the failures.

Fixes errors like:

```
remote: Permission to dahlia/homebrew-jetbrains-eap.git denied to hong-bot.
fatal: unable to access 'https://github.com/dahlia/homebrew-jetbrains-eap/': The requested URL returned error: 403
Error: Failure while executing; `/usr/bin/env git push --set-upstream ***github.com/dahlia/homebrew-jetbrains-eap bump-intellij-idea-eap-2026.1-261.17801.55:bump-intellij-idea-eap-2026.1-261.17801.55` exited with 128. Here's the output:
remote: Permission to dahlia/homebrew-jetbrains-eap.git denied to hong-bot.
fatal: unable to access 'https://github.com/dahlia/homebrew-jetbrains-eap/': The requested URL returned error: 403
```

Copied from https://github.com/Goooler/homebrew-repo/blob/3048e83471efa2c806e92e74c91633cbfcc4c18e/.github/workflows/autobump.yml#L21
@Goooler Goooler changed the title Grand write-all permission for auto-bump workflow Grant write-all permission for auto-bump workflow Jan 21, 2026
@Goooler
Copy link
Copy Markdown
Collaborator Author

Goooler commented Jan 21, 2026

https://github.com/dahlia/homebrew-jetbrains-eap/actions/runs/21194123634/job/60966417771?pr=966

fatal: could not read Username for 'https://github.com/': Device not configured
Error: Failure while executing; `/usr/bin/env git push --set-upstream https://github.com/dahlia/homebrew-jetbrains-eap bump-intellij-idea-eap-2026.1-261.17801.55:bump-intellij-idea-eap-2026.1-261.17801.55` exited with 128. Here's the output:
fatal: could not read Username for 'https://github.com/': Device not configured

The failure is related to the limitations of forked repos, we can ignore it.

@dahlia dahlia merged commit a081911 into dahlia:main Jan 21, 2026
2 of 4 checks passed
@Goooler Goooler deleted the grand-permissions branch January 21, 2026 02:33
@Goooler
Copy link
Copy Markdown
Collaborator Author

Goooler commented Jan 21, 2026

Still failed. See https://github.com/dahlia/homebrew-jetbrains-eap/actions/runs/21195084271/job/60969156650

@dahlia Would you mind grant your bot @hong-bot write access to this repo? Otherwise we have to change the --no-fork flag

brew bump --no-fork --open-pr --casks --tap=$GITHUB_REPOSITORY

@dahlia
Copy link
Copy Markdown
Owner

dahlia commented Jan 21, 2026

@Goooler Granted, thanks!

@Goooler
Copy link
Copy Markdown
Collaborator Author

Goooler commented Jan 21, 2026

Right, everything works in

Goooler added a commit that referenced this pull request Jan 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants