GitHub Actions: limit permissions of GITHUB_TOKEN

 .github/workflows/release.yml

@@ -5,6 +5,8 @@

name: Release

permissions: {}

jobs:
  build:
    name: Build

 .github/workflows/test.yml

@@ -3,6 +3,8 @@

name: Test

permissions: {}

jobs:
  build:
    name: Build

 .github/workflows/update-deps.yml

@@ -5,10 +5,14 @@

name: Update dependencies

permissions: {}

jobs:
  update:
    name: Update dependencies
    runs-on: ubuntu-latest
    permissions:
      pull-requests: write
    steps:
      - id: checkout
        name: Checkout code