adjust permissions and update add changelog trigger action in update_version.yml

Author: hjgraca

.github/workflows/update_version.yml

@@ -6,17 +6,17 @@ on:
   workflow_dispatch:
 
 permissions:
-  contents: write
-  pull-requests: write
+  contents: read 
 
 jobs:
   update-version:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
-        with:
-          fetch-depth: 0  # Fetch all history for git operations
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5.0.0
 
       - name: Get version
         id: get_version
@@ -47,6 +47,7 @@ jobs:
           else
             echo "has_changes=true" >> $GITHUB_OUTPUT
           fi
+
       - name: Create PR for version.txt update
         if: steps.check_changes.outputs.has_changes == 'true'
         uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
@@ -61,4 +62,11 @@ jobs:
             **Release**: ${{ github.event_name == 'release' && github.event.release.html_url || format('https://github.com/{0}/releases/tag/{1}', github.repository, env.VERSION) }}
             **Triggered by**: ${{ github.event_name }}
           labels: automation,version-update
-          delete-branch: true
+          delete-branch: true
+
+  trigger-changelog:
+    needs: update-version
+    permissions:
+      contents: write       # create temporary branch to store changelog changes
+      pull-requests: write  # create PR with changelog changes
+    uses: ./.github/workflows/reusable_publish_changelog.yml