update pakcage lock and permissions

Author: tatomyr

.github/workflows/performance.yaml

@@ -1,6 +1,7 @@
 name: Performance Benchmark
 
-#
+permissions:
+  contents: read
 
 on:
   pull_request:
@@ -19,7 +20,7 @@ jobs:
       - uses: actions/setup-node@v3
         with:
           node-version: 24
-          cache: 'npm'
+          cache: npm
       - name: Install Dependencies
         run: npm ci
       - name: Install External
@@ -52,7 +53,7 @@ jobs:
       - uses: actions/setup-node@v3
         with:
           node-version: 24
-          cache: 'npm'
+          cache: npm
       - name: Install Dependencies
         run: npm ci
       - name: Install External

.github/workflows/require-changeset.yaml

@@ -1,4 +1,8 @@
 name: Require Either a Changeset or a Label 'no changeset needed'
+
+permissions:
+  contents: read
+
 on:
   pull_request:
     types: [opened, synchronize, reopened, labeled, unlabeled]

.github/workflows/smoke-plugins.yaml

@@ -1,6 +1,7 @@
 name: Smoke tests
 
-#
+permissions:
+  contents: read
 
 on:
   pull_request:

.github/workflows/smoke-rebilly.yaml

@@ -1,6 +1,7 @@
 name: Smoke tests
 
-#
+permissions:
+  contents: read
 
 on:
   pull_request: