Merge remote-tracking branch 'origin/main' into next

.github/workflows/coolify-rc-release.yml

@@ -165,7 +165,7 @@ jobs:
     needs: [validate, build]
     runs-on: ubuntu-24.04
     permissions:
-      contents: read
+      contents: write
     steps:
       - name: Revalidate draft prerelease
         uses: actions/github-script@v8

tests/Unit/ProductionImageWorkflowTest.php

@@ -141,6 +141,7 @@ it('requires a reviewed draft prerelease before publishing an exact rc', functio
         ->toContain('!release.prerelease')
         ->toContain('release.body?.trim()')
         ->toContain('revalidate:')
+        ->toMatch('/revalidate:.*?permissions:\s+contents: write/s')
         ->toContain('needs: [validate, build, revalidate]')
         ->toContain('COOLIFY_VERSION=${{ needs.validate.outputs.version }}')
         ->toContain('--tag "${IMAGE}:${VERSION}"')