[workflows] Fix release-drafter permission error

[Copilot]

Description

The release-drafter workflow was failing with HttpError: Resource not accessible by integration due to missing permissions for the default GITHUB_TOKEN.

Added explicit permissions block to .github/workflows/release-drafter.yml:

• contents: write - create/update draft releases
• pull-requests: write - read PR metadata for release notes

permissions:
  contents: write
  pull-requests: write

Organization repositories often restrict default token permissions. Explicit grants resolve the access error.

Notes for Reviewers

Similar workflows (e.g., label-commenter.yml) already follow this pattern.

Signed commits

• Yes, I signed my commits.

Original prompt

update_release_draft
HttpError: Resource not accessible by integration
at /home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:8462:21
at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
at async Job.doExecute (/home/runner/work/_actions/release-drafter/release-drafter/v5/dist/index.js:30793:18)
{
name: 'AggregateError',
event: {
id: '20046244419',
name: 'push',
payload: {
after: 'f910b7bd42e866e82425920dc80bd5a4a1b39694',
base_ref: 'refs/heads/update-release-drafter-config',
before: '8213c9b9a42195a7685f4ed99b018b4872b992f3',
commits: [
{
author: {
email: 'lee.calcote@layer5.io',
name: 'Lee Calcote',
username: 'leecalcote'
},
committer: {
email: 'lee.calcote@layer5.io',
name: 'Lee Calcote',
username: 'leecalcote'
},
distinct: false,
id: 'f910b7bd42e866e82425920dc80bd5a4a1b39694',
message: 'Add no-duplicate-categories to prevent duplicate PR entries in release notes\n' +
'\n' +
"- Added 'no-duplicate-categories: true' to prevent PRs from appearing in multiple categories\n" +
'\n' +
"- Standardized label format to use 'labels:' array format for consistency\n" +
'\n' +
'When a PR has multiple labels matching different categories, it will now appear only in the first matching category.',
timestamp: '2025-12-08T17:17:46-06:00',
tree_id: '6cb28d27ef2b173a80d0fb88df943cb0726c399a',
url: 'https://github.com/meshery-extensions/meshery-traefik-mesh/commit/f910b7bd42e866e82425920dc80bd5a4a1b39694'
}
],
compare: '8213c9b...f910b7b',
created: false,
deleted: false,
enterprise: {
avatar_url: 'https://avatars.githubusercontent.com/b/9995?v=4',
created_at: '2021-11-03T14:57:36Z',
description: '',
html_url: 'https://github.com/enterprises/cncf',
id: 9995,
name: 'Cloud Native Computing Foundation',
node_id: 'E_kgDNJws',
slug: 'cncf',
updated_at: '2025-11-07T20:07:41Z',
website_url: 'https://cncf.io'
},
forced: false,
head_commit: {
author: {
email: 'lee.calcote@layer5.io',
name: 'Lee Calcote',
username: 'leecalcote'
},
committer: {
email: 'lee.calcote@layer5.io',
name: 'Lee Calcote',
username: 'leecalcote'
},
distinct: false,
id: 'f910b7bd42e866e82425920dc80bd5a4a1b39694',
message: 'Add no-duplicate-categories to prevent duplicate PR entries in release notes\n' +
'\n' +
"- Added 'no-duplicate-categories: true' to prevent PRs from appearing in multiple categories\n" +
'\n' +
"- Standardized label format to use 'labels:' array format for consistency\n" +
'\n' +
'When a PR has multiple labels matching different categories, it will now appear only in the first matching category.',
timestamp: '2025-12-08T17:17:46-06:00',
tree_id: '6cb28d27ef2b173a80d0fb88df943cb0726c399a',
url: 'f910b7b'
},
organization: {
avatar_url: 'https://avatars.githubusercontent.com/u/200984402?v=4',
description: 'Extensions of Meshery',
events_url: 'https://api.github.com/orgs/meshery-extensions/events',
hooks_url: 'https://api.github.com/orgs/meshery-extensions/hooks',
id: 200984402,
issues_url: 'https://api.github.com/orgs/meshery-extensions/issues',
login: 'meshery-extensions',
members_url: 'https://api.github.com/orgs/meshery-extensions/members{/member}',
node_id: 'O_kgDOC_rHUg',
public_members_url: 'https://api.github.com/orgs/mesher

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.