From 74a809a1cd14a99c4fc91d91cb2a541e76c937b1 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Wed, 13 May 2026 11:38:30 +0100
Subject: [PATCH] ci: grant dependency awareness pull request writes

---
 .github/workflows/dependency-change-awareness.yml         | 2 +-
 test/scripts/dependency-change-awareness-workflow.test.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/dependency-change-awareness.yml b/.github/workflows/dependency-change-awareness.yml
index 0680eaee44d..2779da2f373 100644
--- a/.github/workflows/dependency-change-awareness.yml
+++ b/.github/workflows/dependency-change-awareness.yml
@@ -5,7 +5,7 @@ on:
     types: [opened, reopened, synchronize, ready_for_review]
 
 permissions:
-  pull-requests: read
+  pull-requests: write
   issues: write
 
 concurrency:
diff --git a/test/scripts/dependency-change-awareness-workflow.test.ts b/test/scripts/dependency-change-awareness-workflow.test.ts
index 6e3dd323d79..f6f65e7ff72 100644
--- a/test/scripts/dependency-change-awareness-workflow.test.ts
+++ b/test/scripts/dependency-change-awareness-workflow.test.ts
@@ -33,7 +33,7 @@ describe("dependency change awareness workflow", () => {
     expect(workflow).toContain("pull_request_target:");
     expect(workflow).toContain("metadata-only workflow; no checkout or untrusted code execution");
     expect(parsed.permissions).toEqual({
-      "pull-requests": "read",
+      "pull-requests": "write",
       issues: "write",
     });
   });