From 71399ec0f37b60866ae285ad2c96740a62a19f1c Mon Sep 17 00:00:00 2001
From: RocketQuack <202538874+Rocket-Quack@users.noreply.github.com>
Date: Fri, 24 Apr 2026 17:29:39 +0200
Subject: [PATCH] fix(workflows): allow stable env update push

---
 .github/workflows/build_stable.yml      | 2 +-
 .github/workflows/core-build-stable.yml | 2 ++
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build_stable.yml b/.github/workflows/build_stable.yml
index 15438f00..c00f89f6 100644
--- a/.github/workflows/build_stable.yml
+++ b/.github/workflows/build_stable.yml
@@ -7,6 +7,6 @@ jobs:
   delegate:
     uses: ./.github/workflows/core-build-stable.yml
     permissions:
-      contents: read
+      contents: write
       packages: write
     secrets: inherit
diff --git a/.github/workflows/core-build-stable.yml b/.github/workflows/core-build-stable.yml
index e6cdb951..e5fe663b 100644
--- a/.github/workflows/core-build-stable.yml
+++ b/.github/workflows/core-build-stable.yml
@@ -89,6 +89,8 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ github.repository == 'frappe/frappe_docker' && github.event_name != 'pull_request' }}
     needs: v16_publish
+    permissions:
+      contents: write
 
     steps:
       - name: Checkout