chore: update release-please config

[targos]

• Use new repository for the action
• Use nodejs-github-bot's PAT
• Set minimal permissions for the default token

[aduh95]

We could also set explicitly permissions: contents: read since that's the only needed permission required from now on IIUC

[targos]

According to the docs, it needs write permission: https://github.com/googleapis/release-please-action#workflow-permissions

[aduh95]

According to the docs, it needs write permission: https://github.com/googleapis/release-please-action#workflow-permissions

Setting permissions: contents: read only affects permission of the GITHUB_TOKEN, which is only used by actions/checkout after this PR. The required permissions for googleapis/release-please-action are irrelevant, because it uses a different token IIUC.

[targos]

I see. Updated, thanks!

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 83.00%. Comparing base (e3e19b3) to head (7aa5220).
Report is 26 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #852      +/-   ##
==========================================
- Coverage   83.08%   83.00%   -0.09%     
==========================================
  Files          37       37              
  Lines        4251     4266      +15     
==========================================
+ Hits         3532     3541       +9     
- Misses        719      725       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[aduh95]

RequestError [HttpError]: Error creating Pull Request: Resource not accessible by personal access token 🤔

https://github.com/nodejs/node-core-utils/actions/runs/10655797184/job/29533746319

[aduh95]

'x-accepted-github-permissions': 'contents=write; contents=write,workflows=write', I suppose that's lacking pull-request=write? Also, I don't think we need workflows=write

[targos]

I might have given the wrong permission. Will check when I'm on my computer unless someone else does it first

[targos]

https://github.com/settings/personal-access-tokens/3911092

[targos]

I forgot to give write access to the bot in https://github.com/nodejs/node-core-utils/settings/access. Now it's done.