Merge branch 'master' into feature/add-api-key-ui-plugin

Author: wu-clan

.github/workflows/validate-plugin-toml.yml

@@ -8,6 +8,8 @@ on:
       - 'plugins/**'
 
 permissions:
+  contents: read
+  issues: write
   pull-requests: write
 
 jobs:
@@ -72,28 +74,37 @@ jobs:
               body = marker + '\n## Plugin TOML Validation Report\n\n> No validation report generated.';
             }
 
-            const { data: comments } = await github.rest.issues.listComments({
-              owner: context.repo.owner,
-              repo: context.repo.repo,
-              issue_number: context.issue.number,
-            });
-
-            const existing = comments.find(c => c.body && c.body.includes(marker));
-
-            if (existing) {
-              await github.rest.issues.updateComment({
-                owner: context.repo.owner,
-                repo: context.repo.repo,
-                comment_id: existing.id,
-                body,
-              });
-            } else {
-              await github.rest.issues.createComment({
+            try {
+              const { data: comments } = await github.rest.issues.listComments({
                 owner: context.repo.owner,
                 repo: context.repo.repo,
                 issue_number: context.issue.number,
-                body,
               });
+
+              const existing = comments.find(c => c.body && c.body.includes(marker));
+
+              if (existing) {
+                await github.rest.issues.updateComment({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  comment_id: existing.id,
+                  body,
+                });
+              } else {
+                await github.rest.issues.createComment({
+                  owner: context.repo.owner,
+                  repo: context.repo.repo,
+                  issue_number: context.issue.number,
+                  body,
+                });
+              }
+            } catch (error) {
+              if (error.status === 403) {
+                core.warning(`Skipping PR comment because the workflow token cannot write comments: ${error.message}`);
+                return;
+              }
+
+              throw error;
             }
 
       - name: Fail if validation failed