From d4bc53189b11acdac5f84465d5c45db8c1f10886 Mon Sep 17 00:00:00 2001
From: copilot-review <copilot-review@users.noreply.github.com>
Date: Mon, 7 Sep 2026 15:46:36 +0000
Subject: [PATCH] Reviewed range: dee13c3..b212452

b212452 ci(release): grant the smoke gate pull-requests: read
---
 .github/workflows/release.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index e91b4991..7393bbf4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -165,9 +165,12 @@ jobs:
   smoke:
     needs: version
     uses: ./.github/workflows/z3-smoke.yml
+    # A called workflow may not request more than the calling job grants;
+    # the smoke gate needs pull-requests: read for paths-filter.
     permissions:
       contents: read
       packages: write
+      pull-requests: read
 
   # 3. Source archives: one ZIP per vendored component (only tracked files).
   source: