From 5a30baad991c4e9e11672a65846c7c4ec80aa144 Mon Sep 17 00:00:00 2001
From: Michal Kinas <113341662+MichalKinas@users.noreply.github.com>
Date: Thu, 2 Jul 2026 18:30:38 +0200
Subject: [PATCH] Release cache read/write fix (#12029)

---
 .github/workflows/release.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2943db1538..a3c522d627 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -47,14 +47,15 @@ jobs:
     if: github.event.pull_request.merged == true || github.ref_name == 'master' || github.ref_name == 'master-patch-*' || github.event_name == 'workflow_dispatch'
     name: "Setup"
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0
       - uses: ./.github/actions/setup
-        with:
-          enable-node-modules-cache: false
       - name: install
         run: |
           pnpm install --frozen-lockfile
@@ -73,6 +74,7 @@ jobs:
       id-token: write  # Required for OIDC
       contents: read
       packages: write
+      actions: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
@@ -80,8 +82,6 @@ jobs:
           fetch-depth: 0
       - id: setup
         uses: ./.github/actions/setup
-        with:
-          enable-node-modules-cache: false
       - id: set-dryrun
         uses: ./.github/actions/enable-dryrun
         with: