add write permission for issues

.github/dependabot.yml

@@ -14,6 +14,7 @@ updates:
       - "mimmi20"
     labels:
       - "dependencies"
+      - "patch"
     versioning-strategy: "increase"
     target-branch: "master"
     commit-message:
@@ -38,7 +39,7 @@ updates:
       - "mimmi20"
     labels:
       - "dependencies"
+      - "patch"
     target-branch: "master"
     commit-message:
-      include: "scope"
       prefix: "github-actions"

.github/labels.yml

@@ -53,6 +53,15 @@
 - color: 0075ca
   name: "documentation"
   description: "Improvements or additions to documentation"
+- color: 84175d
+  name: "major"
+  description: "Major change"
+- color: d86c28
+  name: "minor"
+  description: "Minor change"
+- color: 0a9b47
+  name: "patch"
+  description: "Patch"
 
 # other Labels to mimmi20/template
 #- color: 5319e7

.github/release-drafter.yml

@@ -10,6 +10,9 @@ template: |
 change-template: "- $TITLE by @$AUTHOR (#$NUMBER)"
 change-title-escapes: '\<*_&#@`' # You can add # and @ to disable mentions, and add ` to disable code blocks.
 no-changes-template: "- No changes"
+name-template: "$RESOLVED_VERSION"
+tag-template: "$RESOLVED_VERSION"
+version-template: "$MAJOR.$MINOR.$PATCH"
 
 exclude-labels:
   - "duplicate"
@@ -22,17 +25,20 @@ version-resolver:
     labels:
       - "bc break"
       - "removed"
+      - "major"
   minor:
     labels:
       - "deprecated"
       - "security"
+      - "minor"
   patch:
     labels:
       - "bug"
       - "dependencies"
       - "enhancement"
       - "maintenance"
       - "documentation"
+      - "patch"
   default: patch
 
 autolabeler:

.github/workflows/cleanup-caches.yml

@@ -2,7 +2,7 @@ name: cleanup caches by a branch
 on:
   pull_request:
     types:
-      - closed
+      - "closed"
   workflow_dispatch:
 
 jobs:

.github/workflows/codeql.yml

@@ -14,13 +14,13 @@ name: "CodeQL"
 on:
   push:
     branches:
-      - master
+      - "master"
   pull_request:
     # The branches below must be a subset of the branches above
     branches:
-      - master
+      - "master"
   schedule:
-    - cron: '28 0 * * 0'
+    - cron: "28 0 * * 0"
 
 jobs:
   analyze:

.github/workflows/labels.yml

@@ -5,12 +5,21 @@ name: "Sync labels in the declarative way"
 on:
   push:
     branches:
-      - master
+      - "master"
+    paths:
+      - ".github/labels.yml"
+      - ".github/workflows/labels.yml"
+
+permissions:
+  contents: read
 
 jobs:
   build:
     name: "Sync labels"
 
+    permissions:
+      issues: write
+
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/lock-closed-issues.yml

@@ -3,7 +3,7 @@ name: Lock closed issue
 on:
   issues:
     types:
-      - closed
+      - "closed"
 
 jobs:
   lock:

.github/workflows/reactions.yml

@@ -5,12 +5,12 @@ name: 'Reaction Comments'
 on:
   issue_comment:
     types:
-      - created
-      - edited
+      - "created"
+      - "edited"
   pull_request_review_comment:
     types:
-      - created
-      - edited
+      - "created"
+      - "edited"
 
 permissions:
   actions: write

.github/workflows/release-drafter.yml

@@ -6,21 +6,24 @@ on:
   push:
     # branches to consider in the event; optional, defaults to all
     branches:
-      - master
+      - "master"
   # pull_request event is required only for autolabeler
   pull_request:
     # Only following types are handled by the action, but one can default to all as well
-    types: [opened, reopened, synchronize]
+    types:
+      - "opened"
+      - "reopened"
+      - "synchronize"
   # pull_request_target event is required for autolabeler to support PRs from forks
-  pull_request_target:
+  # pull_request_target:
 
 permissions:
   contents: read
 
 jobs:
   update-release-draft:
     permissions:
-      # write permission is required to create a github release
+      # write permission is required to create a GitHub release
       contents: write
       # write permission is required for autolabeler
       # otherwise, read permission is required at least