refactor: update release-drafter.yml for improved permissions and formatting

Author: ReneWerner87

.github/workflows/release-drafter.yml

@@ -7,32 +7,36 @@ on:
             - main
     workflow_dispatch:
 
+permissions:
+    contents: read
+
 jobs:
     changes:
         runs-on: ubuntu-latest
         permissions:
+            contents: read
             pull-requests: read
         steps:
-            - name: Checkout repository
-              uses: actions/checkout@v6
+            -   name: Checkout repository
+                uses: actions/checkout@v6
 
-            - name: Generate filters
-              id: filter-setup
-              run: |
-                  # Add filter for core package (root directory files)
-                  filters="core: [\"*.go\", \"*.md\", \"go.mod\", \"go.sum\"]"
-                  filters+=$'\n'
-                  # Add filters for subdirectories
-                  filters+=$(find . -maxdepth 1 -type d ! -path ./.git ! -path . -exec basename {} \; | grep -v '^\.' | awk '{printf "%s: \"%s/**\"\n", $1, $1}')
-                  echo "filters<<EOF" >> $GITHUB_OUTPUT
-                  echo "$filters" >> $GITHUB_OUTPUT
-                  echo "EOF" >> $GITHUB_OUTPUT
-              shell: bash
-            - name: Filter changes
-              id: filter
-              uses: dorny/paths-filter@v3
-              with:
-                  filters: ${{ steps.filter-setup.outputs.filters }}
+            -   name: Generate filters
+                id: filter-setup
+                run: |
+                    # Add filter for core package (root directory files)
+                    filters="core: [\"*.go\", \"*.md\", \"go.mod\", \"go.sum\"]"
+                    filters+=$'\n'
+                    # Add filters for subdirectories
+                    filters+=$(find . -maxdepth 1 -type d ! -path ./.git ! -path . -exec basename {} \; | grep -v '^\.' | awk '{printf "%s: \"%s/**\"\n", $1, $1}')
+                    echo "filters<<EOF" >> $GITHUB_OUTPUT
+                    echo "$filters" >> $GITHUB_OUTPUT
+                    echo "EOF" >> $GITHUB_OUTPUT
+                shell: bash
+            -   name: Filter changes
+                id: filter
+                uses: dorny/paths-filter@v3
+                with:
+                    filters: ${{ steps.filter-setup.outputs.filters }}
 
         outputs:
             packages: ${{ steps.filter.outputs.changes || '[]' }}
@@ -41,26 +45,30 @@ jobs:
         needs: changes
         runs-on: ubuntu-latest
         timeout-minutes: 30
-        if: needs.changes.outputs.packages != '[]' # Ensure job runs only if there are changes
+        if: needs.changes.outputs.packages != '[]'
+        permissions:
+            contents: write
+            pull-requests: read
         env:
             GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         strategy:
             matrix:
                 package: ${{ fromJSON(needs.changes.outputs.packages || '[]') }}
         steps:
-            - name: Checkout repository
-              uses: actions/checkout@v6
+            -   name: Checkout repository
+                uses: actions/checkout@v6
 
-            - name: Generate dynamic config from template
-              id: generate-config
-              run: |
-                folder="${{ matrix.package }}"
-                sed "s|{{FOLDER}}|$folder|g" .github/release-drafter-template.yml > .github/release-drafter-$folder.yml
-                echo "config<<EOF" >> $GITHUB_OUTPUT
-                cat .github/release-drafter-$folder.yml >> $GITHUB_OUTPUT
-                echo "EOF" >> $GITHUB_OUTPUT
+            -   name: Generate dynamic config from template
+                id: generate-config
+                run: |
+                    folder="${{ matrix.package }}"
+                    sed "s|{{FOLDER}}|$folder|g" .github/release-drafter-template.yml > .github/release-drafter-$folder.yml
+                    echo "config<<EOF" >> $GITHUB_OUTPUT
+                    cat .github/release-drafter-$folder.yml >> $GITHUB_OUTPUT
+                    echo "EOF" >> $GITHUB_OUTPUT
 
-            - name: Use dynamic release-drafter configuration
-              uses: ReneWerner87/release-drafter@6dec4ceb1fb86b6514f11a2e7a39e1dedce709d0
-              with:
-                  config: ${{ steps.generate-config.outputs.config }}
+            -   name: Use dynamic release-drafter configuration
+                uses: ReneWerner87/release-drafter@1e213032283aaa6d64a8df087c4587a2ff531582
+                with:
+                    config: ${{ steps.generate-config.outputs.config }}
+                    disable-autolabeler: true