Description

Pull requests that touch Formulus trigger the "Formulus Android & Formplayer Assets" workflow, but it fails immediately with a startup failure

Invalid workflow file: .github/workflows/formulus-android.yml#L254
Error calling workflow .../prepare-next-formulus-build-code.yml@a0ee8640. The workflow is requesting contents: write, pull-requests: write, but is only allowed contents: read, pull-requests: none.

Impact

• Every PR touching formulus/** or formulus-formplayer/** gets a red CI with no build output.
• Blocks the release pipeline (AAB/APK artifacts are never produced).

Expected

Workflow validation passes and the Formulus Android build runs normally on PRs and pushes.

Repro

1. Open any PR that touches formulus/**.
2. Observe the "Formulus Android & Formplayer Assets" check → Status: Startup failure, annotation at formulus-android.yml:254.