[ci] Bugfix file-update.yml

Author: mawosoft

CI/file-update.yml

@@ -14,10 +14,6 @@ env:
   DOTNET_SKIP_FIRST_TIME_EXPERIENCE: true
   DOTNET_CLI_TELEMETRY_OPTOUT: true
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   Update:
     runs-on: ubuntu-latest
@@ -27,14 +23,22 @@ jobs:
       with:
         show-progress: false
         fetch-depth: 1
+    - name: Install
+      # Change dir to avoid problems with global.json in repo root.
+      working-directory: ${{ runner.temp }}
+      run: |
+        $ErrorActionPreference = 'Stop'
+        $PSNativeCommandUseErrorActionPreference = $true
+        dotnet tool update -g dotnet-file
     - name: Update
       # Both must be set because dotnet-file internally calls gh cli to fetch the changelog.
       env:
         GCM_CREDENTIAL_STORE: cache
         GH_TOKEN: ${{ github.token }}
       id: update
       run: |
-        dotnet tool update -g dotnet-file
+        $ErrorActionPreference = 'Stop'
+        $PSNativeCommandUseErrorActionPreference = $true
 
         [string]$tmpfile = New-TemporaryFile
         dotnet-file update "-c:$tmpfile"
@@ -52,6 +56,7 @@ jobs:
     - name: Pull Request
       uses: peter-evans/create-pull-request@v6
       with:
+        token: ${{ secrets.DOTNET_FILESYNC_PAT }}
         base: master
         branch: dotnet-file-sync
         delete-branch: true
@@ -61,4 +66,4 @@ jobs:
         commit-message: |
           Update Single File Dependencies
 
-          ${{ steps.sync.outputs.Changelog }}
+          ${{ steps.update.outputs.Changelog }}