Update actions

Author: adamw

.github/labeler.yml

@@ -1,13 +1,13 @@
 version: 1
 labels:
   - label: "automerge"
-    authors: ["softwaremill-ci"]
+    authors: ["github-actions[bot]"]
     files:
       - "build.sbt"
       - "project/plugins.sbt"
       - "project/build.properties"
   - label: "dependency"
-    authors: ["softwaremill-ci"]
+    authors: ["github-actions[bot]"]
     files:
       - "build.sbt"
       - "project/plugins.sbt"

.github/release-drafter.yml

@@ -1,4 +1,4 @@
 template: |
-  ## What’s Changed
+  ## What's Changed
 
   $CHANGES

.github/workflows/ci.yml

@@ -5,15 +5,18 @@ on:
   push:
     branches: ['**']
     tags: [v*]
+permissions:
+  contents: write        # release-drafter, auto-merge requirement
+  pull-requests: write   # labeler, auto-merge requirement    
 jobs:
   build:
     uses: softwaremill/github-actions-workflows/.github/workflows/build-scala.yml@main
-    # run on 1) push, 2) external PRs, 3) softwaremill-ci PRs
+    # run on 1) push, 2) external PRs, 3) github-actions[bot] PRs
     # do not run on internal, non-steward PRs since those will be run by push to branch
     if: |
       github.event_name == 'push' || 
       github.event.pull_request.head.repo.full_name != github.repository ||
-      github.event.pull_request.user.login == 'softwaremill-ci'
+      github.event.pull_request.user.login == 'github-actions[bot]'
     with:
       java-opts: '-Xmx3000M -Dsbt.task.timings=true'
       sttp-native: 1
@@ -34,12 +37,14 @@ jobs:
       sttp-native: 1
 
   label:
-    # only for PRs by softwaremill-ci
-    if: github.event.pull_request.user.login == 'softwaremill-ci'
+    # only for PRs by github-actions[bot]
+    if: github.event.pull_request.user.login == 'github-actions[bot]'
     uses: softwaremill/github-actions-workflows/.github/workflows/label.yml@main
+    secrets: inherit
 
   auto-merge:
-    # only for PRs by softwaremill-ci
-    if: github.event.pull_request.user.login == 'softwaremill-ci'
+    # only for PRs by github-actions[bot]
+    if: github.event.pull_request.user.login == 'github-actions[bot]'
     needs: [ build, mima, label ]
-    uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
+    uses: softwaremill/github-actions-workflows/.github/workflows/auto-merge.yml@main
+    secrets: inherit

.github/workflows/scala-steward.yml

@@ -6,8 +6,14 @@ on:
     - cron: '0 0 * * *'
   workflow_dispatch:
 
+permissions:
+  contents: write        # Required to checkout and push changes
+  pull-requests: write   # Required to create PRs for dependency updates
+
 jobs:
   scala-steward:
     uses: softwaremill/github-actions-workflows/.github/workflows/scala-steward.yml@main
     secrets:
-      repo-github-token: ${{secrets.REPO_GITHUB_TOKEN}}
+      github-token: ${{ secrets.GITHUB_TOKEN }}
+    with:
+      java-version: '21'