From 1adf3654fc6adb7c133a9beebd450459427b693b Mon Sep 17 00:00:00 2001
From: Reed Krantz <programming@krantz.one>
Date: Wed, 26 Aug 2026 16:02:58 -0500
Subject: [PATCH] ops: add write permissions to the update workflow

---
 .gitea/workflows/flake-update.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.gitea/workflows/flake-update.yaml b/.gitea/workflows/flake-update.yaml
index 6242f5b..b1de596 100644
--- a/.gitea/workflows/flake-update.yaml
+++ b/.gitea/workflows/flake-update.yaml
@@ -1,5 +1,8 @@
 name: "Flake.lock: update Nix dependencies for development environment only"
 
+permissions:
+  contents: write
+
 on:
   workflow_dispatch: # allows manual triggering
   schedule: