ci: fix ghalint

Author: guitarrapc

.github/workflows/build-debug.yml .github/workflows/build-debug.yaml.github/workflows/build-debug.yml renamed to .github/workflows/build-debug.yaml

@@ -10,7 +10,9 @@ on:
 
 jobs:
   build-dotnet:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main

.github/workflows/build-release.yml .github/workflows/build-release.yaml.github/workflows/build-release.yml renamed to .github/workflows/build-release.yaml

@@ -14,7 +14,9 @@ on:
 
 jobs:
   build-dotnet:
-    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
     timeout-minutes: 10
     steps:
       - uses: Cysharp/Actions/.github/actions/checkout@main
@@ -35,6 +37,8 @@ jobs:
   # release
   create-release:
     needs: [build-dotnet]
+    permissions:
+      contents: write
     uses: Cysharp/Actions/.github/workflows/create-release.yaml@main
     with:
       commit-id: ''

.github/workflows/stale.yml .github/workflows/stale.yaml.github/workflows/stale.yml renamed to .github/workflows/stale.yaml

@@ -7,4 +7,8 @@ on:
 
 jobs:
   stale:
+    permissions:
+      contents: read
+      pull-requests: write
+      issues: write
     uses: Cysharp/Actions/.github/workflows/stale-issue.yaml@main

.github/workflows/toc.yml .github/workflows/toc.yaml.github/workflows/toc.yml renamed to .github/workflows/toc.yaml

@@ -6,8 +6,9 @@ on:
       - 'README.md'
 
 jobs:
-  generateTOC:
-    name: TOC Generator
+  toc:
+    permissions:
+      contents: write
     uses: Cysharp/Actions/.github/workflows/toc-generator.yaml@main
     with:
       TOC_TITLE: "## Table of Contents"