From 2662c45a36f854495afe562b707d3f7d70301347 Mon Sep 17 00:00:00 2001
From: kotahi release bot
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 2 Sep 2026 11:36:36 +0000
Subject: [PATCH 1/2] chore: sync release version 2026.09.02-0 to staging [skip
 ci]

---
 package.json                 | 2 +-
 packages/client/package.json | 2 +-
 packages/server/package.json | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package.json b/package.json
index 35de3afb9..cae35ca6e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "kotahi",
-  "version": "2026.09.01-0",
+  "version": "2026.09.02-0",
   "private": true,
   "description": "Kotahi - open journals",
   "repository": {
diff --git a/packages/client/package.json b/packages/client/package.json
index 30f8ca9ef..4d84e9017 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -1,6 +1,6 @@
 {
   "name": "kotahi",
-  "version": "2026.09.01-0",
+  "version": "2026.09.02-0",
   "private": true,
   "description": "Kotahi - open journals",
   "repository": {
diff --git a/packages/server/package.json b/packages/server/package.json
index 26d82072a..ce37a05f9 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -1,6 +1,6 @@
 {
   "name": "kotahi",
-  "version": "2026.09.01-0",
+  "version": "2026.09.02-0",
   "private": true,
   "description": "Kotahi - open journals",
   "repository": {

From 9fd8bc33e6aa486d0d12c17d980dd290ca5deee9 Mon Sep 17 00:00:00 2001
From: Vukile Langa <vukilelanga@me.com>
Date: Wed, 2 Sep 2026 17:34:30 +0200
Subject: [PATCH 2/2] ci(*): allow publishing docs to ghcr

---
 .github/workflows/release.yml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 620fbd1ca..3e9315be1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -100,7 +100,7 @@ jobs:
             sed -i -E "s/(\"version\": \")[^\"]+(\")/\1$VERSION\2/" "$f"
           done
           git add -A
-          git commit -m "chore: sync release version $VERSION to staging [skip ci]" \
+          git commit -m "chore(*): sync release version $VERSION to staging [skip ci]" \
             || { echo "Staging already at $VERSION, nothing to sync"; exit 0; }
           git push -f origin $BRANCH
           gh pr create \
@@ -165,6 +165,12 @@ jobs:
     needs: [release]
     runs-on: ubuntu-latest
 
+    # GITHUB_TOKEN needs packages:write to push to GHCR. Declaring the block
+    # sets every unlisted scope to none, so contents:read is required for checkout.
+    permissions:
+      contents: read
+      packages: write
+
     outputs:
       image: ${{ steps.build.outputs.image }}