From 485002532e20e18b0c6fe94b9334e202f4079e5e Mon Sep 17 00:00:00 2001
From: Johnny Hausman <johnny.hausman@cru.org>
Date: Thu, 15 Jan 2026 14:20:55 -0600
Subject: [PATCH] [wip] increase permissions of pr-merge-release.yml

---
 .editorconfig                          | 15 +++++++++++++++
 .github/workflows/pr-merge-release.yml |  9 +++++----
 2 files changed, 20 insertions(+), 4 deletions(-)
 create mode 100644 .editorconfig

diff --git a/.editorconfig b/.editorconfig
new file mode 100644
index 0000000..f25695d
--- /dev/null
+++ b/.editorconfig
@@ -0,0 +1,15 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 3
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false
+
+[*.{yml,yaml}]
+indent_size = 2
diff --git a/.github/workflows/pr-merge-release.yml b/.github/workflows/pr-merge-release.yml
index becdaee..7c2036c 100644
--- a/.github/workflows/pr-merge-release.yml
+++ b/.github/workflows/pr-merge-release.yml
@@ -5,6 +5,8 @@ on:
     branches: [v2]
 permissions:
   contents: write
+  pages: write
+  id-token: write
 jobs:
   call-get-label:
     name: Label
@@ -18,8 +20,8 @@ jobs:
     uses: ./.github/workflows/e2e-tests.yml
   call-bump-version:
     name: Version
-    # Only run if tests pass 
-    needs: [ call-get-label, call-e2e-tests ]
+    # Only run if tests pass
+    needs: [call-get-label, call-e2e-tests]
     uses: ./.github/workflows/bump-version.yml
     with:
       ref: ${{ github.ref }}
@@ -31,7 +33,7 @@ jobs:
     with:
       tag: v${{ needs.call-bump-version.outputs.new_version }}
   call-dispatch-updates:
-    needs: [ call-bump-version, call-get-label ]
+    needs: [call-bump-version, call-get-label]
     uses: CruGlobal/.github/.github/workflows/dispatch-update.yml@main
     with:
       dispatch_repos: '["ab_platform_web","appbuilder_platform_service"]'
@@ -41,4 +43,3 @@ jobs:
       app_id: ${{ vars.GS_DEV_APP_ID }}
     secrets:
       app_secret: ${{ secrets.GS_DEV_APP_PK }}
-