From a38c8d4f7ca851bf797ebea97af9575cc52e365c Mon Sep 17 00:00:00 2001
From: Reed Krantz <programming@krantz.one>
Date: Wed, 26 Aug 2026 16:01:31 -0500
Subject: [PATCH] ops: add write permissions to the update workflow

---
 .gitea/workflows/flake-update.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/flake-update.yaml b/.gitea/workflows/flake-update.yaml
index e7438ac..a5a179a 100644
--- a/.gitea/workflows/flake-update.yaml
+++ b/.gitea/workflows/flake-update.yaml
@@ -1,5 +1,8 @@
 name: "Flake.lock: update Nix dependencies for development environment only"
 
+permissions:
+  contents: write
+
 on:
   workflow_dispatch: # allows manual triggering
   schedule: