From 6798d1dbc99e879f36a7d2eb2231104dc7e78e77 Mon Sep 17 00:00:00 2001
From: Jordan Harband <ljharb@gmail.com>
Date: Mon, 17 Aug 2026 23:33:17 -0700
Subject: [PATCH] [actions] `release.yml`: provide `GH_TOKEN` so release-notes
 PR lookup can run

In GitHub Actions, `gh` refuses to run without a token,
and `release-notes.sh` fails closed on `gh` errors,
so the `make release` dry run died once the script was checked in.
The workflow already permits `api.github.com` egress and only needs the default read-only token.
---
 .github/workflows/release.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 3b190a0e..f031fd78 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -35,5 +35,6 @@ jobs:
         run: echo proceed | make TAG=99.99.99 release
         env:
           GIT_EDITOR: "sed -i '1 s/^/99.99.99 make release test/'"
+          GH_TOKEN: ${{ github.token }}
       - name: Ensure tag is created
         run: git tag | grep v99.99.99