From 95dc97563e5ee1fbac0102773b98e8e36169331e Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 13 Aug 2026 04:11:34 +0000
Subject: [PATCH 1/2] Initial plan


From d25d1f77021c60bfdedc63ef64210d0937a09348 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 13 Aug 2026 04:13:29 +0000
Subject: [PATCH 2/2] fix(actions): scope GITHUB_TOKEN permissions in conda
 release job

Co-authored-by: JarryShaw <15666417+JarryShaw@users.noreply.github.com>
---
 .github/workflows/create-release.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index ed78b67eb..53b75438f 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -213,6 +213,8 @@ jobs:
   conda:
     name: Conda deployment of package for platform ${{ matrix.os }} with Python ${{ matrix.python-version }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: write
     needs: [ tag, github, version_check ]
     if: ${{ startsWith(github.ref_name, 'v') || needs.version_check.outputs.PCAPKIT_TAG_EXISTS == 'false' }}
     strategy: