Merge pull request #28 from impresscms-dev/MekDrop-patch-1

Permissions in on-pull-request.yml for dependabot fix

Author: MekDrop

.github/workflows/on-pull-request.yml

@@ -42,7 +42,19 @@ jobs:
   dependabot:
     needs:
       - test
-    permissions: write-all
+    permissions:
+      actions: write
+      checks: read
+      contents: write
+      deployments: read
+      discussions: read
+      issues: write
+      pages: read
+      packages: read
+      pull-requests: write
+      repository-projects: read
+      security-events: write
+      statuses: write
     runs-on: ubuntu-latest
     # Checking the actor will prevent your Action run failing on non-Dependabot
     # PRs but also ensures that it only does work for Dependabot PRs.