Update prepare-release.yml with permissions

[lkostrowski]

Add permissions for OIDC and content writing in release workflow

https://docs.npmjs.com/trusted-publishers

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
macaw-ui	Ready	Preview, Comment	Feb 3, 2026 7:53am

[changeset-bot]

⚠️ No Changeset found

Latest commit: 3e9e604

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[Copilot]

Pull request overview

This PR updates the prepare-release GitHub Actions workflow to explicitly declare the permissions needed for OIDC-based npm trusted publishing and for creating release PRs.

Changes:

• Add a top-level permissions block granting id-token: write for OIDC.
• Grant contents: write to allow the workflow to open release pull requests.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.