Merge pull request #176 from tsuyoshicho/update/permission

.github/workflows/depup.yml

@@ -5,6 +5,9 @@ on:
   repository_dispatch:
     types: [depup]
   workflow_dispatch:
+permissions:
+  contents: write
+  pull-requests: write
 
 jobs:
   reviewdog:
@@ -35,4 +38,3 @@ jobs:
             This PR is auto generated by [depup workflow](https://github.com/${{ github.repository }}/actions?query=workflow%3A${{ github.workflow }}).
           branch: depup/${{ steps.depup.outputs.repo }}
           labels: "bump:minor"
-

.github/workflows/release-check.yml

@@ -3,6 +3,8 @@ on:
   pull_request:
     types:
       - labeled
+permissions:
+  contents: write
 
 jobs:
   release-check:

.github/workflows/release.yml

@@ -5,6 +5,8 @@ on:
       - master
     tags:
       - 'v*.*.*'
+permissions:
+  contents: write
 
 jobs:
   release:
@@ -41,14 +43,12 @@ jobs:
 
       # Create release.
       - name: Create release
-        uses: actions/create-release@v1
+        uses: softprops/action-gh-release@v1
         if: "steps.tag.outputs.value != ''"
-        env:
-          # This token is provided by Actions, you do not need to create your own token
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
-          tag_name: ${{ steps.tag.outputs.value }}
-          release_name: Release ${{ steps.tag.outputs.value }}
+          token: ${{ secrets.GITHUB_TOKEN }}
+          name: Release ${{ steps.tag.outputs.value }}
           body: ${{ steps.bumpr.outputs.message }}
+          tag_name: ${{ steps.tag.outputs.value }}
           draft: false
           prerelease: false

.github/workflows/reviewdog.yml

@@ -4,6 +4,9 @@ on:
     branches:
       - master
   pull_request:
+permissions:
+  pull-requests: write
+
 jobs:
   shellcheck:
     name: runner / shellcheck

.github/workflows/test.yml

@@ -4,6 +4,9 @@ on:
     branches:
       - master
   pull_request:
+permissions:
+  pull-requests: write
+
 jobs:
   test-check:
     name: runner / textlint (github-check)
@@ -51,4 +54,3 @@ jobs:
           github_token: ${{ secrets.github_token }}
           reporter: github-pr-review
           textlint_flags: "doc/**"
-

.github/workflows/update_semver.yml

@@ -5,6 +5,9 @@ on:
       - '**'
     tags:
       - 'v*.*.*'
+permissions:
+  contents: write
+
 jobs:
   update-semver:
     runs-on: ubuntu-latest