`up.yml` workflow fails due to lack of `permissions` block leading to insufficient token permissions

[sdghsdkjlas27-dotcom]

up.yml will fail under restrictive permissions defaults because it needs write access

DESCRIPTION:
The up.yml workflow uses peter-evans/create-pull-request@v8 which requires contents: write (to push commits) and pull-requests: write (to create PRs). The workflow has no permissions block and depends entirely on the repository's default token permissions. Under GitHub's recommended restrictive defaults (read-only), this workflow will hard-fail when it attempts to push or create a PR.

REPRODUCTION:
.github/workflows/up.yml (full file, 30 lines):

jobs:
  up:
    timeout-minutes: 15
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@v7
      - run: |
          git fetch --tags --force
          latest=$(git tag --sort=creatordate | tail -1)
          sed -E -i "s/pages-action@.+$/pages-action@${latest}/g" README.md
      - uses: peter-evans/create-pull-request@v8
        with:
          sign-commits: true
          branch: version-up
          commit-message: 'new version in README'
          delete-branch: true
          title: 'New version in README'
          assignees: yegor256
          base: master

No permissions block exists. Without contents: write and pull-requests: write, this workflow will fail.

IMPACT:
High — correctness. The workflow will break under recommended repository security settings.

RELATED FILES:

• .github/workflows/up.yml (entire file)

[VasilevNStas]

This is already addressed by PR #705, which adds permissions: contents: write, pull-requests: write to up.yml. Once #705 is merged, this issue will be resolved.

[0crat]

@sdghsdkjlas27-dotcom Thanks for reporting a new bug! You've earned +18 points. By reporting bugs, you help our project improve its quality. If you find anything else in the repository that doesn't look as good as you might expect, do not hesitate to report it. Your running score is -70; don't forget to check your Zerocracy account too).