John McLear 3ccf0b1c04 ci(security): restrict GITHUB_TOKEN permissions in update-plugins workflow (#7557) ... Adds an explicit `permissions: contents: read` block to update-plugins.yml. Cross-repo work (cloning ether/ep_* repos, pushing updates, merging Dependabot PRs) is authenticated via secrets.PLUGINS_PAT, so the default GITHUB_TOKEN only needs read access for actions/checkout. Addresses CodeQL code-scanning alert #115 ("Workflow does not contain permissions"). Matches the pattern already used by the other workflows under .github/workflows/. Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-04-19 17:26:42 +01:00
..
backend-tests.yml	chore: reduce CI matrix for PRs to prevent runner exhaustion (#7463)	2026-04-05 10:14:20 +01:00
build-and-deploy-docs.yml	build(deps): bump actions/upload-pages-artifact from 4 to 5 (#7517)	2026-04-14 22:10:07 +02:00
codeql-analysis.yml	build(deps): bump actions/checkout from 5 to 6 (#7233)	2025-11-30 20:31:22 +01:00
dependency-review.yml	build(deps): bump actions/checkout from 5 to 6 (#7233)	2025-11-30 20:31:22 +01:00
docker.yml	build(deps): bump docker/setup-qemu-action from 3 to 4 (#7351)	2026-03-08 22:35:34 +01:00
frontend-admin-tests.yml	fix: increase max socket.io message size to 10MB for large pastes (#7474)	2026-04-06 15:12:08 +01:00
frontend-tests.yml	chore: reduce CI matrix for PRs to prevent runner exhaustion (#7463)	2026-04-05 10:14:20 +01:00
handleRelease.yml	build(deps): bump softprops/action-gh-release from 2 to 3 (#7501)	2026-04-13 21:25:37 +02:00
installer-test.yml	feat: add one-line installer script (#7466) (#7485)	2026-04-07 17:10:22 +01:00
load-test.yml	Move load test to daily schedule instead of every push (#7425)	2026-04-01 19:03:19 +01:00
perform-type-check.yml	build(deps): bump actions/cache from 4 to 5 (#7264)	2025-12-19 21:24:15 +01:00
rate-limit.yml	build(deps): bump actions/cache from 4 to 5 (#7264)	2025-12-19 21:24:15 +01:00
release.yml	build(deps): bump reitzig/actions-asciidoctor from 2.0.3 to 2.0.4 (#7370)	2026-03-16 16:34:06 +00:00
releaseEtherpad.yml	feat: migrate npm publish to OIDC trusted publishing (#7401) (#7490)	2026-04-07 17:38:23 +01:00
stale.yml	build(deps): bump actions/stale from 9 to 10 (#7115)	2025-09-08 19:25:33 +02:00
update-plugins.yml	ci(security): restrict GITHUB_TOKEN permissions in update-plugins workflow (#7557)	2026-04-19 17:26:42 +01:00
upgrade-from-latest-release.yml	chore: reduce CI matrix for PRs to prevent runner exhaustion (#7463)	2026-04-05 10:14:20 +01:00