GitHub Actions: Reduce token permissions

Author: tangrufus

.github/workflows/dependabot-auto-merge.yml

@@ -13,9 +13,6 @@ permissions: {}
 
 jobs:
   dependabot:
-    permissions:
-      contents: write
-      pull-requests: write
     uses: typisttech/.github/.github/workflows/dependabot-auto-merge.yml@v2
     with:
       minor: true

.github/workflows/pint.yml

@@ -20,8 +20,6 @@ permissions: {}
 jobs:
   pint:
     uses: typisttech/.github/.github/workflows/pint.yml@v2
-    permissions:
-      contents: read
     with:
       php-version: '8.4'
     secrets: inherit

.github/workflows/release-drafter.yml

@@ -15,6 +15,3 @@ permissions: {}
 jobs:
   release-drafter:
     uses: typisttech/.github/.github/workflows/release-drafter.yml@v2
-    permissions:
-      contents: write
-      pull-requests: read

.github/workflows/update-data.yml

@@ -25,8 +25,6 @@ permissions: {}
 jobs:
   update-data:
     uses: typisttech/.github/.github/workflows/create-auto-merged-pull-request-php.yml@v2
-    permissions:
-      contents: read
     with:
       command: composer data:update
       php-version: '8.4'