Trusted publishing breaks action-gh-release

[Drake53]

NuGet Product Used

Other/NA

Product Version

NuGet/login@v1

Worked before?

No response

Impact

I'm unable to use this version

Repro Steps & Context

Creating this as a bug report as I got no response earlier: NuGet/Home#13731 (comment)

Using the new trusted publishing feature caused the last step (softprops/action-gh-release@v2.3.2) in my github workflow to fail with a 403.

Verbose Logs

[jeffkl]

@zhhyu or @joelverhagen do you know what's going on?

[joelverhagen]

Hey @Drake53, sorry we were not monitoring comments on that "epic" (overarching) issue. I will move this to NuGet/NuGetGallery and tag the SME.

[joelverhagen]

@Lanaparezanin (owner of the nuget/login action) - do you know what's going on here?

[Lanaparezanin]

@Drake53 @joelverhagen Looking into it.

[Drake53]

Hey @Drake53, sorry we were not monitoring comments on that "epic" (overarching) issue. I will move this to NuGet/NuGetGallery and tag the SME.

No worries, I probably shouldn't have commented there in the first place seeing as there were no other comments.

@Lanaparezanin FYI I managed to solve this yesterday: Drake53/War3Net@2b33c2b
I initially thought the nuget login might be overwriting something causing the 403, so I changed order to create a github release first and then upload to nuget. When that didn't work I asked AI and it said I had to add contents: write to permissions, after that it worked. I'm not sure if the permission change would've been enough or if the order change was required as well, I didn't test the original workflow with the updated permission.