accordproject / markdown-transform / 26910015399 / 2

79%

main: 79%

push

github

fix(publish): grant token contents+PR write so the bump PR step can run

The v1.0.1 release published all 8 npm packages successfully but the
follow-up `Create PR to increment version` step failed with a 403:

    fatal: unable to access 'https://github.com/.../': The requested
    URL returned error: 403

`peter-evans/create-pull-request@v7` uses the workflow's
`GITHUB_TOKEN` to push a branch and open a PR; the workflow's
top-level `permissions:` block only granted `id-token: write` (for
npm OIDC trusted publishing), so the action had read-only repo
access. Add `contents: write` and `pull-requests: write` so the
post-publish housekeeping branch can be pushed and the PR opened.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Signed-off-by: dselman <danscode@selman.org>

1249 of 1712 branches covered (72.96%)

Branch coverage included in aggregate %.

3872 of 4778 relevant lines covered (81.04%)

185.4 hits per line