From df9c68dee2f7035e19df7d41930e327306016cb6 Mon Sep 17 00:00:00 2001
From: argszero <argszero@gmail.com>
Date: Wed, 5 Aug 2026 03:41:03 +0800
Subject: [PATCH] =?UTF-8?q?emrg:=20build-release=20=E4=BA=8C=E5=8D=81?=
 =?UTF-8?q?=E4=BA=8C=E6=AC=A1=E4=BF=AE=E5=A4=8D=20=E2=80=94=20release=20jo?=
 =?UTF-8?q?b=20=E5=8A=A0=20contents:write=20=E6=9D=83=E9=99=90=EF=BC=88ran?=
 =?UTF-8?q?t=20#13=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

第 22 次实跑（1c8b256）：4 平台 build 首次全绿（Windows HOME 同步生效），
但 release job 失败：softprops/action-gh-release 创建 release 时 403
"Resource not accessible by integration" —— workflow 无顶层 permissions，
GITHUB_TOKEN 默认缺 contents:write，generate_release_notes 的 REST 调用被拒。

修复：release job 声明 permissions: contents: write（最小权限，仅 release job）。
---
 .github/workflows/build-release.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml
index 2e65ce9f..66ea4ec8 100644
--- a/.github/workflows/build-release.yml
+++ b/.github/workflows/build-release.yml
@@ -124,6 +124,10 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     if: startsWith(github.ref, 'refs/tags/')
+    # R115: GITHUB_TOKEN 默认无 contents:write → softprops/action-gh-release
+    # 创建 release 403（Resource not accessible by integration）。
+    permissions:
+      contents: write
     steps:
       - uses: actions/download-artifact@v4
         with: