Merge branch 'main' into copilot/fix-toolbar-css-issues

Author: PetyaMarkovaBogdanova

.github/workflows/ci-test-website.yaml

@@ -5,6 +5,10 @@ on:
   push:
     branches:
       - 'main'
+
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/ci-test.yaml

@@ -6,6 +6,9 @@ on:
     branches:
       - 'main'
 
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/deploy-preview.yaml

@@ -28,6 +28,9 @@ on:
         - '!**/*.test.ts'
         - '!**/test/**'
 
+permissions:
+  contents: read
+
 jobs:
   deploy-preview:
     runs-on: ubuntu-latest

.github/workflows/deploy.yaml

@@ -17,6 +17,9 @@ on:
   schedule:
     - cron: '0 0 * * *'  # Runs daily at midnight UTC
 
+permissions:
+  contents: write
+
 jobs:
   deploy-nightly:
     if: ${{ github.event.inputs.deploy_type == 'nightly' || github.event_name == 'schedule' }}

.github/workflows/issue-close.yaml

@@ -4,6 +4,9 @@ on:
   schedule:
   - cron: "0 0 * * *"
 
+permissions:
+  issues: write
+
 jobs:
   stale:
     runs-on: ubuntu-latest

.github/workflows/issue-comment.yaml

@@ -4,6 +4,9 @@ on:
   issues:
     types: [closed]
 
+permissions:
+  issues: write
+
 jobs:
   comment-on-close:
     runs-on: ubuntu-latest

.github/workflows/issue-reopen.yaml

@@ -4,6 +4,9 @@ on:
   issue_comment:
     types: [created]
 
+permissions:
+  issues: write
+
 jobs:
   reopen-issue:
     if: github.event.issue.state == 'closed'

.github/workflows/lint.yaml

@@ -5,6 +5,10 @@ on:
   push:
     branches:
       - 'main'
+
+permissions:
+  contents: read
+
 jobs:
   check:
     runs-on: ubuntu-latest

.github/workflows/release-downport.yaml

@@ -4,6 +4,9 @@ on:
   schedule:
   - cron: "00 08 * * *"
 
+permissions:
+  contents: read
+
 jobs:
   reset-gh-pages:
     runs-on: ubuntu-latest