Sign-off: fractal#3871 Actions PR creation setting #4902

Source

#3871

Merge SHA: not merged.

Answer

Status: answered by Johannes in Nathan's place (directive 3bd1364a).

Keep the setting off; the job only pushes the branch. Answer id: push-only. Record: step-run/ask-c6733088bb24a1fbffdf9e15c40bed5f/ask.

Evidence: #4902 (comment)

This records the decision, not completion of the release-job change.

Question for Nathan

Is the setting "Allow GitHub Actions to create and approve pull requests" disabled on purpose? If not, should Nathan enable it or provide a permitted job token? If yes, should the release job only push the branch?

Risk

medium — The release baseline job fails with HTTP 403 and requires manual PR creation.

Evidence

• Johannes's assistant: ready PRs waiting on you (conflicts and red checks), 2026-10-14 #2744 (comment)
• Roll compatibility baselines to v0.3.25 #4841

Completion rule

Compounding Manager records Nathan's answer or sign-off before this sub-issue closes. Agents do not wait for Nathan to self-merge, but all normal gates, exact-head GOs, checks and rulesets still apply. No --admin and no auto-merge. If the source is not merged, Compounding Manager records its merge SHA and asks Nathan for review after merge.