From 686a6f7bbf4ca062470fa75b638669df4156e384 Mon Sep 17 00:00:00 2001
From: "github-agentic-autofix[bot]"
 <314318003+GitHub Agentic Autofix@users.noreply.github.com>
Date: Tue, 27 Oct 2026 01:18:11 +0000
Subject: [PATCH 1/2] Initial plan


From 4c0aa58fd4edc2d58fa6dd19c4a4914aea3035b5 Mon Sep 17 00:00:00 2001
From: "github-agentic-autofix[bot]"
 <314318003+GitHub Agentic Autofix@users.noreply.github.com>
Date: Tue, 27 Oct 2026 01:19:41 +0000
Subject: [PATCH 2/2] Limit release job token permissions

Co-authored-by: runceel <79868+runceel@users.noreply.github.com>
---
 .github/workflows/build-and-publish.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/build-and-publish.yml b/.github/workflows/build-and-publish.yml
index cd7a6967..d0637017 100644
--- a/.github/workflows/build-and-publish.yml
+++ b/.github/workflows/build-and-publish.yml
@@ -71,6 +71,8 @@ jobs:
   create-release:
     runs-on: windows-latest
     needs: build
+    permissions:
+      contents: write
     steps:
       - name: Download archives
         uses: actions/download-artifact@v4