#49 added actions: write to the review job in .github/workflows/review-pr.yml (review-lock cache delete, feedback artifact cleanup). Callers of the reusable workflow that grant only actions: read now fail every run at parse time with startup_failure ("workflow file issue"), since GitHub rejects a called workflow requesting more permissions than the caller grants.
This broke docker/gordon for ~3 days after the automated version bump (docker/gordon#1574); fixed by docker/gordon#1620.
Suggested:
- Document the required caller permissions (including
actions: write) in the README's review-pr section.
- Call out caller-permission changes as breaking in release notes so downstream auto-bumps don't merge them silently.
#49 added
actions: writeto thereviewjob in.github/workflows/review-pr.yml(review-lock cache delete, feedback artifact cleanup). Callers of the reusable workflow that grant onlyactions: readnow fail every run at parse time withstartup_failure("workflow file issue"), since GitHub rejects a called workflow requesting more permissions than the caller grants.This broke docker/gordon for ~3 days after the automated version bump (docker/gordon#1574); fixed by docker/gordon#1620.
Suggested:
actions: write) in the README's review-pr section.