From afff8e270acc6789ad1bfe5d85019f88a4ba5750 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felipe=20Say=C3=A3o=20Lobato=20Abreu?=
 <github@mentordosnerds.com>
Date: Wed, 7 Oct 2026 20:32:42 -0300
Subject: [PATCH 1/2] ci: permit isolated status publishing to read job results

---
 .github/workflows/tests.yml | 1 +
 CHANGELOG.md                | 4 ++++
 2 files changed, 5 insertions(+)

diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e070da2..e0d51d5 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -21,6 +21,7 @@ on:
         default: false
 
 permissions:
+  actions: read
   contents: read
   statuses: write
 
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a6f5e76..cbf4d11 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Replace the mascot banner with contextual Dash artwork connecting framework modules and align README and documentation references. (#9)
 
+### Fixed
+
+- Allow the isolated CI status publisher to read workflow job outcomes without granting write permissions to test jobs.
+
 ## [1.4.0] - 2026-04-25
 
 ### Added

From 5514b3df82b6343e93949be4902838b63db644f4 Mon Sep 17 00:00:00 2001
From: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Date: Wed, 7 Oct 2026 23:33:46 +0000
Subject: [PATCH 2/2] Update wiki submodule pointer for PR #10

---
 .github/wiki | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/wiki b/.github/wiki
index 223a77a..ff325b8 160000
--- a/.github/wiki
+++ b/.github/wiki
@@ -1 +1 @@
-Subproject commit 223a77a7ce47d4d2b9c215c8871205a05df6b6ea
+Subproject commit ff325b8dc40bc3bc85ce11c51a36ee961833af00