gh pr edit does not work with only pull-requests: write permissions

Describe the bug

I have a GitHub actions that runs gh pr edit using the GITHUB_TOKEN created automatically for the job.

When I added

permissions:
  pull-requests: write

to the workflow definition I started to get

GraphQL: Resource not accessible by integration (repository.pullRequest.projectCards.nodes)

I think it is because of this line:

cli/pkg/cmd/pr/edit/edit.go

Line 169 in 0ecd424

editable.Projects.Default = pr.ProjectCards.ProjectNames()

where the CLI tries to get the project names, but this requires the repository-projects: read permission.

Adding repository-projects: read fixes the problem, but this took me a while to figure out and should be fixed IMO, since edits to a PR that don't involve projects shouldn't require that permission.

I am using the latest CLI version as intalled in the ubuntu-latest GitHub Actions image.

Steps to reproduce the behavior

Create a workflow with only pull-requests: write permissions
Create a step that runs gh pr edit ...
See error

Expected vs actual behavior

The gh pr edit command should succeed without additional permissions.

Thank you for reporting! Fully agreed with your assessment of the bug.

Semi-related: #4631 #4876

@nzig

The workaround that @nzig came up with worked well until today:

permissions:
  packages: write # needed for push of package
  contents: write # needed for push of tags
  pull-requests: read # needed to view the PR for the slack
  repository-projects: read # needed for view the PR for the slack https://github.com/cli/cli/issues/6274

However, it seems to be newly broken again today:

GraphQL: Resource not accessible by integration (repository.pullRequest.statusCheckRollup.nodes.0.commit.statusCheckRollup)

I added gh pr edit to my script today and got the Resource not accessible by integration error. Stumbled onto this page on Googling. It's been ~1 year since this issue was opened. :( Hope this gets some traction soon.

Im having this issue as well - anyone got it working with GitHub App ? is there any particular permission needs to be added besides PullRequest (read and write) and repository(read and write)?

However, it seems to be newly broken again today:
GraphQL: Resource not accessible by integration (repository.pullRequest.statusCheckRollup.nodes.0.commit.statusCheckRollup)

I ran into this error when using gh pr list ..., and was able to resolve it by adding statuses and checks permissions to my job, e.g.

permissions:
  pull-requests: read
  statuses: read
  checks: read
  # you might need even more permissions, depending on what you're doing 😄

Attempt to fix the pr MergeRequested workflow

Attempt to fix the pr MergeRequested workflow (#26157)

Seems to have the same problem even outside of github actions workflows: https://github.com/orgs/community/discussions/111324

Faced this exact issue when trying to edit PT title using our Github bot. Took a long time to figure out that we need to give extra project:read permission to the bot to perform this simple task.
It would be a great help if this gets fixed!