docs: update actions and workflows documentation

[skip ci]

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: hoverkraft-bot[bot]

.github/workflows/clean-deploy.md

@@ -43,11 +43,9 @@ Behavior / outputs:
 ### Permissions
 
 - **`actions`**: `read`
-- **`contents`**: `write`
 - **`deployments`**: `write`
 - **`id-token`**: `write`
 - **`issues`**: `write`
-- **`packages`**: `write`
 - **`pull-requests`**: `write`
 
 <!-- overview:end -->
@@ -66,14 +64,7 @@ permissions: {}
 jobs:
   clean-deploy:
     uses: hoverkraft-tech/ci-github-publish/.github/workflows/clean-deploy.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
-    permissions:
-      contents: write
-      issues: write
-      packages: write
-      pull-requests: write
-      actions: read
-      deployments: write
-      id-token: write
+    permissions: {}
     secrets:
       # GitHub token for deploying.
       # Permissions:

.github/workflows/deploy-chart.md

@@ -94,7 +94,6 @@ jobs:
       issues: write
       packages: write
       pull-requests: write
-      id-token: write
     secrets:
       # OCI registry password.
       # This input is required.

.github/workflows/deploy-checks.md

@@ -51,10 +51,8 @@ on:
 permissions: {}
 jobs:
   deploy-checks:
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-checks.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
-    permissions:
-      contents: read
-      id-token: write
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-checks.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
+    permissions: {}
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/deploy-finish.md

@@ -44,8 +44,6 @@ What this workflow does:
 - **`contents`**: `read`
 - **`deployments`**: `write`
 - **`id-token`**: `write`
-- **`issues`**: `read`
-- **`pull-requests`**: `write`
 
 <!-- overview:end -->
 
@@ -62,14 +60,8 @@ on:
 permissions: {}
 jobs:
   deploy-finish:
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-finish.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
-    permissions:
-      contents: read
-      issues: read
-      pull-requests: write
-      actions: read
-      deployments: write
-      id-token: write
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-finish.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
+    permissions: {}
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/deploy-start.md

@@ -47,11 +47,9 @@ Environment:
 
 ### Permissions
 
-- **`actions`**: `read`
 - **`deployments`**: `write`
 - **`id-token`**: `write`
 - **`issues`**: `write`
-- **`pull-requests`**: `write`
 
 <!-- overview:end -->
 
@@ -68,13 +66,8 @@ on:
 permissions: {}
 jobs:
   deploy-start:
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-start.yml@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
-    permissions:
-      actions: read
-      deployments: write
-      issues: write
-      pull-requests: write
-      id-token: write
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/deploy-start.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
+    permissions: {}
     with:
       # JSON array of runner(s) to use.
       # See https://docs.github.com/en/actions/using-jobs/choosing-the-runner-for-a-job.

.github/workflows/prepare-release.md

@@ -35,6 +35,7 @@ Reusable workflow that performs release preparation tasks:
 ### Permissions
 
 - **`contents`**: `read`
+- **`id-token`**: `write`
 - **`pull-requests`**: `write`
 
 <!-- overview:end -->

.github/workflows/release.md

@@ -43,7 +43,7 @@ on:
 permissions: {}
 jobs:
   release:
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release.yml@418e2c3d36cd1ccabf8c15a5c5c3c4c7b146227f # main
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release.yml@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
     permissions: {}
     with:
       # JSON array of runner(s) to use.

actions/deploy/github-pages/README.md

@@ -47,7 +47,7 @@ permissions:
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-publish/actions/deploy/github-pages@275b6d8500449d5653bce59c799e4f54c072929d # 0.15.0
+- uses: hoverkraft-tech/ci-github-publish/actions/deploy/github-pages@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
   with:
     # The path to the assets to deploy.
     # Can be absolute or relative $GITHUB_WORKSPACE.
@@ -68,7 +68,7 @@ permissions:
     # Permissions:
     # - pages: write
     # - id-token: write
-    # See https://github.com/actions/configure-pages.
+    # See https://github.com/actions/deploy-pages.
     #
     # Default: `${{ github.token }}`
     github-token: ${{ github.token }}
@@ -92,7 +92,7 @@ permissions:
 |                             | Permissions:                                                                                                          |              |                         |
 |                             | - pages: write                                                                                                        |              |                         |
 |                             | - id-token: write                                                                                                     |              |                         |
-|                             | See <https://github.com/actions/configure-pages>.                                                                     |              |                         |
+|                             | See <https://github.com/actions/deploy-pages>.                                                                        |              |                         |
 
 <!-- inputs:end -->
 

actions/release/get-configuration/README.md

@@ -1,14 +1,68 @@
 <!-- header:start -->
+
+# ![Icon](data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIyNCIgaGVpZ2h0PSIyNCIgdmlld0JveD0iMCAwIDI0IDI0IiBmaWxsPSJub25lIiBzdHJva2U9ImN1cnJlbnRDb2xvciIgc3Ryb2tlLXdpZHRoPSIyIiBzdHJva2UtbGluZWNhcD0icm91bmQiIHN0cm9rZS1saW5lam9pbj0icm91bmQiIGNsYXNzPSJmZWF0aGVyIGZlYXRoZXItYm9va21hcmsiIGNvbG9yPSJibHVlIj48cGF0aCBkPSJNMTkgMjFsLTctNS03IDVWNWEyIDIgMCAwIDEgMi0yaDEwYTIgMiAwIDAgMSAyIDJ6Ij48L3BhdGg+PC9zdmc+) GitHub Action: Deployment - Create Release
+
+<div align="center">
+  <img src="../../../.github/logo.svg" width="60px" align="center" alt="Deployment - Create Release" />
+</div>
+
+---
+
 <!-- header:end -->
 <!-- badges:start -->
+
+[![Marketplace](https://img.shields.io/badge/Marketplace-deployment------create--release-blue?logo=github-actions)](https://github.com/marketplace/actions/deployment---create-release)
+[![Release](https://img.shields.io/github/v/release/hoverkraft-tech/ci-github-publish)](https://github.com/hoverkraft-tech/ci-github-publish/releases)
+[![License](https://img.shields.io/github/license/hoverkraft-tech/ci-github-publish)](http://choosealicense.com/licenses/mit/)
+[![Stars](https://img.shields.io/github/stars/hoverkraft-tech/ci-github-publish?style=social)](https://img.shields.io/github/stars/hoverkraft-tech/ci-github-publish?style=social)
+[![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/hoverkraft-tech/ci-github-publish/blob/main/CONTRIBUTING.md)
+
 <!-- badges:end -->
 <!-- overview:start -->
+
+## Overview
+
+Action to create a new release
+
 <!-- overview:end -->
 <!-- usage:start -->
+
+## Usage
+
+```yaml
+- uses: hoverkraft-tech/ci-github-publish/actions/release/get-configuration@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
+  with:
+    # Working directory for monorepo support.
+    # If specified, the release configuration file will be placed in `.github/release-configs/{slug}.yml` where slug is derived from the working directory path.
+    # The configuration will include `include-paths` to filter pull requests to only those that modified files in the specified directory.
+    working-directory: ""
+```
+
 <!-- usage:end -->
 <!-- inputs:start -->
+
+## Inputs
+
+| **Input**               | **Description**                                                                                                                                            | **Required** | **Default** |
+| ----------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------ | ----------- |
+| **`working-directory`** | Working directory for monorepo support.                                                                                                                    | **false**    | -           |
+|                         | If specified, the release configuration file will be placed in `.github/release-configs/{slug}.yml` where slug is derived from the working directory path. |              |             |
+|                         | The configuration will include `include-paths` to filter pull requests to only those that modified files in the specified directory.                       |              |             |
+
 <!-- inputs:end -->
 <!-- outputs:start -->
+
+## Outputs
+
+| **Output**              | **Description**                                                                    |
+| ----------------------- | ---------------------------------------------------------------------------------- |
+| **`working-directory`** | The working directory used for the release.                                        |
+|                         | Relative to the repository root.                                                   |
+|                         | Empty if not set.                                                                  |
+| **`config-slug`**       | The slug derived from the working directory. Empty if no working directory is set. |
+| **`config-name`**       | The name of the release configuration file                                         |
+| **`config-path`**       | The path to the release configuration file                                         |
+
 <!-- outputs:end -->
 <!-- secrets:start -->
 <!-- secrets:end -->
@@ -18,12 +72,33 @@
 // jscpd:ignore-start
 -->
 <!-- contributing:start -->
+
+## Contributing
+
+Contributions are welcome! Please see the [contributing guidelines](https://github.com/hoverkraft-tech/ci-github-publish/blob/main/CONTRIBUTING.md) for more details.
+
 <!-- contributing:end -->
 <!-- security:start -->
 <!-- security:end -->
 <!-- license:start -->
+
+## License
+
+This project is licensed under the MIT License.
+
+SPDX-License-Identifier: MIT
+
+Copyright © 2025 hoverkraft
+
+For more details, see the [license](http://choosealicense.com/licenses/mit/).
+
 <!-- license:end -->
 <!-- generated:start -->
+
+---
+
+This documentation was automatically generated by [CI Dokumentor](https://github.com/hoverkraft-tech/ci-dokumentor).
+
 <!-- generated:end -->
 <!--
 // jscpd:ignore-end

actions/workflow/get-workflow-failure/README.md

@@ -38,14 +38,16 @@ Each failed job entry contains the job name, its conclusion, and the job web URL
 Note: this action reads jobs for the current run and therefore relies on the workflow run context;
 the default `GITHUB_TOKEN` already has read access to Actions in typical workflows.
 
+It requires the `actions: read` permission on the token used.
+
 <!-- overview:end -->
 
 <!-- usage:start -->
 
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-publish/actions/workflow/get-workflow-failure@ecafdeac18a6a6dcc01058cd53ac7431bedb5c3b # 0.14.1
+- uses: hoverkraft-tech/ci-github-publish/actions/workflow/get-workflow-failure@ed864a88ec8610dc2a1b9aab1dbde2864bf75df4 # 0.16.0
   with:
     # GitHub Token to get workflow information.
     # Permissions: