From 55b6f848fc7d978fc13007a9d1cfb797083ab6ce Mon Sep 17 00:00:00 2001
From: matt korwel <matt.korwel@gmail.com>
Date: Thu, 18 Sep 2025 23:56:09 -0700
Subject: [PATCH] trying to fix logging and permissions (#8854)

Co-authored-by: gemini-cli-robot <gemini-cli-robot@google.com>
---
 .github/workflows/release-patch-1-create-pr.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-patch-1-create-pr.yml b/.github/workflows/release-patch-1-create-pr.yml
index f3656649a3..2766f9f68f 100644
--- a/.github/workflows/release-patch-1-create-pr.yml
+++ b/.github/workflows/release-patch-1-create-pr.yml
@@ -59,6 +59,8 @@ jobs:
           private-key: '${{ secrets.PRIVATE_KEY }}'
           permission-pull-requests: 'write'
           permission-contents: 'write'
+          permission-metadata: 'read'
+          permission-actions: 'read'
 
       - name: 'Configure Git User'
         run: |-
@@ -71,15 +73,15 @@ jobs:
           GH_TOKEN: '${{ steps.generate_token.outputs.token }}'
         continue-on-error: true
         run: |
-          # Capture output directly to environment variable
+          # Capture output and display it in logs using tee
           {
             node scripts/releasing/create-patch-pr.js --commit=${{ github.event.inputs.commit }} --channel=${{ github.event.inputs.channel }} --dry-run=${{ github.event.inputs.dry_run }}
             echo "EXIT_CODE=$?" >> "$GITHUB_OUTPUT"
-          } 2>&1 | {
+          } 2>&1 | tee >(
             echo "LOG_CONTENT<<EOF" >> "$GITHUB_ENV"
             cat >> "$GITHUB_ENV"
             echo "EOF" >> "$GITHUB_ENV"
-          }
+          )
 
       - name: 'Comment on Original PR'
         if: 'inputs.original_pr'