From aed54c7ab610b670c8a4c348fc16a95b676f9b87 Mon Sep 17 00:00:00 2001
From: Reed Krantz <programming@krantz.one>
Date: Wed, 26 Aug 2026 16:00:24 -0500
Subject: [PATCH] ops: add write permissions to the update workflow

---
 .gitea/workflows/flake-update.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/flake-update.yaml b/.gitea/workflows/flake-update.yaml
index e109afb..274be24 100644
--- a/.gitea/workflows/flake-update.yaml
+++ b/.gitea/workflows/flake-update.yaml
@@ -1,5 +1,8 @@
 name: "Flake.lock: update Nix dependencies for development environment only"
 
+permissions:
+  contents: write
+
 on:
   workflow_dispatch: # allows manual triggering
   schedule: