Merge branch 'main' into user-menu-item-sample

Author: SvilenDarvenyashki

.github/workflows/ci-test-website.yaml

@@ -5,6 +5,10 @@ on:
   push:
     branches:
       - 'main'
+
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/ci-test.yaml

@@ -6,6 +6,9 @@ on:
     branches:
       - 'main'
 
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/deploy-preview.yaml

@@ -28,6 +28,9 @@ on:
         - '!**/*.test.ts'
         - '!**/test/**'
 
+permissions:
+  contents: read
+
 jobs:
   deploy-preview:
     runs-on: ubuntu-latest

.github/workflows/deploy.yaml

@@ -17,6 +17,9 @@ on:
   schedule:
     - cron: '0 0 * * *'  # Runs daily at midnight UTC
 
+permissions:
+  contents: write
+
 jobs:
   deploy-nightly:
     if: ${{ github.event.inputs.deploy_type == 'nightly' || github.event_name == 'schedule' }}

.github/workflows/issue-close.yaml

@@ -4,6 +4,9 @@ on:
   schedule:
   - cron: "0 0 * * *"
 
+permissions:
+  issues: write
+
 jobs:
   stale:
     runs-on: ubuntu-latest

.github/workflows/issue-comment.yaml

@@ -4,6 +4,9 @@ on:
   issues:
     types: [closed]
 
+permissions:
+  issues: write
+
 jobs:
   comment-on-close:
     runs-on: ubuntu-latest

.github/workflows/issue-reopen.yaml

@@ -4,6 +4,9 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  issues: write
+
 jobs:
   reopen-issue:
     if: github.event.issue.state == 'closed'

.github/workflows/lint.yaml

@@ -5,6 +5,10 @@ on:
   push:
     branches:
       - 'main'
+
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/release-downport.yaml

@@ -364,9 +364,6 @@ jobs:
       - name: Install Dependencies
         run: yarn --immutable
 
-      - name: Build
-        run: yarn ci:releasebuild
-        
       - name: Version Bump
         env:
           GH_TOKEN: ${{ secrets.UI5_WEBCOMP_BOT_GH_TOKEN }}
@@ -380,6 +377,9 @@ jobs:
                 --exact \
                 --create-release github
 
+      - name: Build
+        run: yarn ci:releasebuild
+
       - name: Publish
         run: |
           yarn lerna publish from-git --yes --dist-tag "v1"