Merge pull request #46 from reecetech/permissions

Add permission to write for tag/release

.github/workflows/test-and-release.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Run ShellCheck
         uses: ludeeus/action-shellcheck@2.0.0
@@ -24,12 +24,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Setup bats
-        uses: bats-core/bats-action@2.0.0
+        uses: bats-core/bats-action@4.0.0
         with:
-          bats-version: 1.11.0
+          bats-version: 1.14.0
 
       - name: Test
         run: bats tests/*.bats
@@ -40,7 +40,7 @@ jobs:
       github_token: ${{ github.token }}
     steps:
       - name: Checkout code  # have to checkout to have the source code available
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Remove .git directory  # remove the git directory to make the testing valid
         run: rm -rf .git/
@@ -82,7 +82,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout code  # have to checkout to have the source code available
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Remove .git directory  # remove the git directory to make the testing valid
         shell: bash
@@ -96,7 +96,7 @@ jobs:
           use_api: true
 
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Get next version via Git
         uses: ./
@@ -132,12 +132,14 @@ jobs:
           [[ "${{ steps.version-prefix.outputs.prefixed-version }}" = "foo/bar@0.0.1"* ]]
 
   release:
+    permissions:
+      contents: write
     needs:
       - test-action-yml
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Get next version
         uses: ./
@@ -146,7 +148,7 @@ jobs:
           scheme: 'calver'
 
       - name: Release version
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         if: ${{ github.ref_name == github.event.repository.default_branch }}
         with:
           draft: false