From 67c7db4f63d5ce7999ddc6a45574c4a7e02b1c95 Mon Sep 17 00:00:00 2001 From: Muhammad Abdullah Shahid <108458621+abdollahShahid@users.noreply.github.com> Date: Fri, 2 Jan 2026 16:20:01 +0500 Subject: [PATCH 1/2] fix(ci): improve semantic-release workflow permissions and concurrency --- .github/workflows/semantic-release.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml index 456af53..9da7881 100644 --- a/.github/workflows/semantic-release.yml +++ b/.github/workflows/semantic-release.yml @@ -8,11 +8,18 @@ on: jobs: release: runs-on: ubuntu-latest - concurrency: release + # ✅ Improved concurrency: ensure only one release runs at a time + concurrency: + group: semantic-release + cancel-in-progress: false + + # ✅ Expanded permissions: required for many semantic-release operations permissions: id-token: write contents: write + issues: write + pull-requests: write environment: name: pypi @@ -34,7 +41,6 @@ jobs: - name: Action | Semantic Version Release id: release - # Adjust tag with desired version if applicable. uses: python-semantic-release/python-semantic-release@v10.2.0 with: build: true @@ -42,7 +48,7 @@ jobs: git_committer_name: "github-actions" git_committer_email: "actions@users.noreply.github.com" changelog: "true" - + - name: Publish | Upload package to PyPI uses: pypa/gh-action-pypi-publish@release/v1 if: steps.release.outputs.released == 'true' @@ -52,4 +58,4 @@ jobs: if: steps.release.outputs.released == 'true' with: github_token: ${{ secrets.GITHUB_TOKEN }} - tag: ${{ steps.release.outputs.tag }} \ No newline at end of file + tag: ${{ steps.release.outputs.tag }} From 682fe6dc38e353e80f1934aa0ee9e94d70b94484 Mon Sep 17 00:00:00 2001 From: Muhammad Abdullah Shahid <108458621+abdollahShahid@users.noreply.github.com> Date: Fri, 9 Jan 2026 02:18:25 +0500 Subject: [PATCH 2/2] chore(ci): remove redundant workflow comment --- .github/workflows/semantic-release.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/semantic-release.yml b/.github/workflows/semantic-release.yml index 9da7881..1b1dd08 100644 --- a/.github/workflows/semantic-release.yml +++ b/.github/workflows/semantic-release.yml @@ -9,12 +9,10 @@ jobs: release: runs-on: ubuntu-latest - # ✅ Improved concurrency: ensure only one release runs at a time concurrency: group: semantic-release cancel-in-progress: false - # ✅ Expanded permissions: required for many semantic-release operations permissions: id-token: write contents: write