fix: add auto-approval for file writes in polish-release-notes workflow

[TabishB]

Problem

The polish-release-notes workflow is failing when Claude tries to write the output files:

❌ Error: Claude requested permissions to write to /home/runner/work/OpenSpec/OpenSpec/release-title.txt, but you haven't granted it yet.

In GitHub Actions automation mode, there's no interactive user to approve file operations.

Solution

Added claude_args: "--allowedTools Write,Read" to pre-approve file write and read operations.

This tells Claude Code it can use the Write and Read tools without requesting permission, which is necessary for automation contexts.

Testing

After merging, re-run the workflow for v0.20.0 to verify it can now write the polished notes files successfully.

Related to: https://github.com/Fission-AI/OpenSpec/actions/runs/20985495417

Summary by CodeRabbit

• Chores
  • Updated internal CI/CD workflow configuration to enhance tool permissions and workflow reliability.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Caution

Review failed

The pull request is closed.

📝 Walkthrough

Walkthrough

Added a new input parameter claude_args with value "--allowedTools Write,Read" to the Claude code-action step in the Polish Release Notes workflow, restricting the tools that Claude can invoke during release note transformation.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Configuration \.github/workflows/polish-release-notes\.yml	Added claude_args: "--allowedTools Write,Read" input parameter to the "Transform release notes with Claude" step, restricting Claude's tool access to Write and Read operations

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• chore: improve release notes pipeline #481: Modifies the same Polish Release Notes workflow and Claude code-action step configuration

Poem

🐰 A little tweak to Claude's command,
Write and Read, now understand!
Tools restricted, safe and sound,
Better notes on solid ground.

---

---

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c57e421 and dcd7fc6.

📒 Files selected for processing (1)

• .github/workflows/polish-release-notes.yml

_{✏️ Tip: You can disable this entire section by setting review_details to false in your review settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[vibe-kanban-cloud]

Review Complete

Your review story is ready!

View Story

Comment !reviewfast on this PR to re-generate the story.