From 33ce390e84bec6d41505b22747aeea6d18ac462a Mon Sep 17 00:00:00 2001
From: Thomas Krause <thomas.krause@hu-berlin.de>
Date: Thu, 25 Jun 2026 15:28:14 +0200
Subject: [PATCH] Update add-pr-comment action and document required permission
 for verify workflow

---
 .github/workflows/verify.yml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
index 195ef6073..3aa3ee5f2 100644
--- a/.github/workflows/verify.yml
+++ b/.github/workflows/verify.yml
@@ -3,6 +3,10 @@ name: Verify
 on:
   pull_request:
 
+permissions:
+  contents: read
+  pull-requests: write
+
 jobs:
   merge-request-checks:
     name: Run verify.sh
@@ -56,7 +60,7 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           COMMENT_OUTPUT: TRUE
-      - uses: mshick/add-pr-comment@v2
+      - uses: mshick/add-pr-comment@v3
         with:
           message: |
             Commit ${{ github.event.pull_request.head.sha }}