chore(release): 1.0.4 [skip ci]

## [1.0.4](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.3...v1.0.4) (2026-03-02)
chore(deps): lock file maintenance (#112 )
2026-03-02 22:54:42 +00:00 · 2026-03-02 01:05:04 +00:00 · 2026-03-02 03:02:33 +02:00 · 2026-03-02 03:02:00 +02:00 · 2026-02-28 10:06:48 +00:00 · 2026-02-28 12:04:24 +02:00
8 changed files with 86 additions and 98 deletions
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -11,15 +11,15 @@ on:
    - cron: '30 1 * * 0' # Run at 1:30 AM UTC every Sunday
  merge_group:

-permissions:
-  actions: read
-  contents: read
+permissions: {}

 jobs:
  analyze:
    name: Analyze
    runs-on: ubuntu-latest
    permissions:
+      actions: read
+      contents: read
      security-events: write

    strategy:
--- a/.github/workflows/pr-lint.yml
+++ b/.github/workflows/pr-lint.yml
@@ -12,7 +12,7 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-permissions: read-all
+permissions: {}

 jobs:
  Linter:
@@ -27,4 +27,4 @@ jobs:
    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/pr-lint@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -6,7 +6,7 @@ on:
    branches:
      - main

-permissions: read-all
+permissions: {}

 env:
  NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
@@ -20,13 +20,11 @@ jobs:
      statuses: write
      contents: read
      packages: read
-      issues: write
-      pull-requests: write

    steps:
      - name: Run PR Lint
        # https://github.com/ivuorinen/actions
-        uses: ivuorinen/actions/pr-lint@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/pr-lint@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28

  publish:
    name: Publish
@@ -72,5 +70,5 @@ jobs:
      - name: Semantic Release
        uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
        env:
-          GITHUB_TOKEN: ${{ secrets.PAT }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -8,10 +8,7 @@ on:
  workflow_call:
  workflow_dispatch:

-permissions:
-  contents: read
-  packages: read
-  statuses: read
+permissions: {}

 jobs:
  stale:
@@ -19,8 +16,7 @@ jobs:
    runs-on: ubuntu-latest

    permissions:
-      contents: write # only for delete-branch option
      issues: write
      pull-requests: write
    steps:
-      - uses: ivuorinen/actions/stale@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+      - uses: ivuorinen/actions/stale@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
--- a/.github/workflows/sync-labels.yml
+++ b/.github/workflows/sync-labels.yml
@@ -20,7 +20,7 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-permissions: read-all
+permissions: {}

 jobs:
  labels:
@@ -38,4 +38,4 @@ jobs:
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: ⤵️ Sync Latest Labels Definitions
-        uses: ivuorinen/actions/sync-labels@8faacf8a1cae049c1471708dcb408a167e91afaf # v2026.02.24
+        uses: ivuorinen/actions/sync-labels@d919327c7eb6279247eb1ecf92fb4ce0d915679b # v2026.02.28
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,17 @@
 All notable changes to this project will be documented in this file. See
 [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.0.4](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.3...v1.0.4) (2026-03-02)
+
+## [1.0.3](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.2...v1.0.3) (2026-02-28)
+
+## [1.0.2](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.1...v1.0.2) (2026-02-28)
+
+
+### Bug Fixes
+
+* **ci:** harden workflow permissions and use GITHUB_TOKEN for releases ([#109](https://github.com/ivuorinen/base-configs-stylelint/issues/109)) ([9992182](https://github.com/ivuorinen/base-configs-stylelint/commit/9992182f9eaa725a3947493aaeca6025b0e2ca77))
+
 ## [1.0.1](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.0...v1.0.1) (2026-02-28)

 # Change Log
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@ivuorinen/stylelint-config",
-  "version": "1.0.1",
+  "version": "1.0.4",
  "type": "module",
  "description": "ivuorinen's shareable configuration for stylelint.",
  "author": {
--- a/yarn.lock
+++ b/yarn.lock
@@ -59,25 +59,25 @@ __metadata:
  languageName: node
  linkType: hard

-"@cacheable/memory@npm:^2.0.7":
-  version: 2.0.7
-  resolution: "@cacheable/memory@npm:2.0.7"
+"@cacheable/memory@npm:^2.0.8":
+  version: 2.0.8
+  resolution: "@cacheable/memory@npm:2.0.8"
  dependencies:
-    "@cacheable/utils": "npm:^2.3.3"
-    "@keyv/bigmap": "npm:^1.3.0"
-    hookified: "npm:^1.14.0"
-    keyv: "npm:^5.5.5"
-  checksum: 10c0/48a4cf290d70e1e84f52dd13504884761c845b54ec61a79504d7760cfaf06223c3b3f206d47e3ded1ea5c424c0b71090b68a0b5a1634282d3f7de9f12d4f864d
+    "@cacheable/utils": "npm:^2.4.0"
+    "@keyv/bigmap": "npm:^1.3.1"
+    hookified: "npm:^1.15.1"
+    keyv: "npm:^5.6.0"
+  checksum: 10c0/d12ec24e1257cda849329f629a8d0508e8f220827e2c198936f5554899df54401861b775a03f24ab51f01bacfb798cc03d3a82848adcd88d662ea8f22e802057
  languageName: node
  linkType: hard

-"@cacheable/utils@npm:^2.3.3":
-  version: 2.3.4
-  resolution: "@cacheable/utils@npm:2.3.4"
+"@cacheable/utils@npm:^2.4.0":
+  version: 2.4.0
+  resolution: "@cacheable/utils@npm:2.4.0"
  dependencies:
-    hashery: "npm:^1.3.0"
+    hashery: "npm:^1.5.0"
    keyv: "npm:^5.6.0"
-  checksum: 10c0/6256105d4c8f1b246b7a36f3e46d0c25454285b28d2610047bc9ce3369104e65610e0e09e723f4980758e260a768fe89587f5075db9ea8a8f7516ce7e7170f00
+  checksum: 10c0/07803578b765a73e177f56086bc3b3cbeec6fcf5f2a1458b0469e63dc95c9afe1ba0a208110e6c7c59bfd8ca4c7ac84a5d8146c1799287bb716073ad8e054062
  languageName: node
  linkType: hard

@@ -107,7 +107,7 @@ __metadata:
  languageName: node
  linkType: hard

-"@csstools/css-syntax-patches-for-csstree@npm:^1.0.26":
+"@csstools/css-syntax-patches-for-csstree@npm:^1.0.27":
  version: 1.0.28
  resolution: "@csstools/css-syntax-patches-for-csstree@npm:1.0.28"
  checksum: 10c0/d3334499545a4d7abdd7b18364c055aec22f66323828af9b87a9adb43153e0e12319876c5ab128b972605f21da60cb05857f4d143eac9ddffe51c33f3dfb7fff
@@ -174,20 +174,13 @@ __metadata:
  languageName: node
  linkType: hard

-"@ivuorinen/config-checker@npm:^2.0.0":
+"@ivuorinen/config-checker@npm:^2.0.0, @ivuorinen/config-checker@npm:^2.1.1":
  version: 2.1.2
  resolution: "@ivuorinen/config-checker@npm:2.1.2"
  checksum: 10c0/e607eb7196a6c50309b654bb0cd46f64501f2a5ba211933bb73a43a6316b7455b563579a387778d00f31885d0fcf04d3d055aa1bd6ddf580dccca76cbb22d6fd
  languageName: node
  linkType: hard

-"@ivuorinen/config-checker@npm:^2.1.1":
-  version: 2.1.1
-  resolution: "@ivuorinen/config-checker@npm:2.1.1"
-  checksum: 10c0/b342992ca95a2e8088bf1c36e9d826fb67148023763cc473e752a012ba03b76b5458606a9ddb0b6fe0bcc261d2c0d0fa1c9be877aa4cff78a64fd0eb0b60cf2e
-  languageName: node
-  linkType: hard
-
 "@ivuorinen/semantic-release-config@npm:^1.1.3":
  version: 1.1.3
  resolution: "@ivuorinen/semantic-release-config@npm:1.1.3"
@@ -215,7 +208,7 @@ __metadata:
  languageName: unknown
  linkType: soft

-"@keyv/bigmap@npm:^1.3.0":
+"@keyv/bigmap@npm:^1.3.1":
  version: 1.3.1
  resolution: "@keyv/bigmap@npm:1.3.1"
  dependencies:
@@ -706,8 +699,8 @@ __metadata:
  linkType: hard

 "@semantic-release/npm@npm:^13.1.1":
-  version: 13.1.4
-  resolution: "@semantic-release/npm@npm:13.1.4"
+  version: 13.1.5
+  resolution: "@semantic-release/npm@npm:13.1.5"
  dependencies:
    "@actions/core": "npm:^3.0.0"
    "@semantic-release/error": "npm:^4.0.0"
@@ -717,7 +710,7 @@ __metadata:
    fs-extra: "npm:^11.0.0"
    lodash-es: "npm:^4.17.21"
    nerf-dart: "npm:^1.0.0"
-    normalize-url: "npm:^8.0.0"
+    normalize-url: "npm:^9.0.0"
    npm: "npm:^11.6.2"
    rc: "npm:^1.2.8"
    read-pkg: "npm:^10.0.0"
@@ -726,7 +719,7 @@ __metadata:
    tempy: "npm:^3.0.0"
  peerDependencies:
    semantic-release: ">=20.1.0"
-  checksum: 10c0/a0924893ccdb277fcfea65a5894f807f47b9155d0d04153adc874a25a9c4187eaff08e6b038e8408426545ee0a45760c19525f6308da143effb712ecdb8e6414
+  checksum: 10c0/940bfe3f7ec1189e100b81242835230ab3c14da58a5e2feaf43055fd432453ee7efbde93562daf083aedd73478b7f7b12b7dc63752af9e61b3e010043374c552
  languageName: node
  linkType: hard

@@ -808,6 +801,13 @@ __metadata:
  languageName: node
  linkType: hard

+"@simple-libs/stream-utils@npm:^1.2.0":
+  version: 1.2.0
+  resolution: "@simple-libs/stream-utils@npm:1.2.0"
+  checksum: 10c0/2788ac7b167d1b6c81b8c6fae2f5d9688b1f02ab31e9e15b33c9dc2ae920cf7de87869de10679be8957f9adb645c91c8919e271f3e34b6b4ec56daf725522dc7
+  languageName: node
+  linkType: hard
+
 "@sindresorhus/is@npm:^4.6.0":
  version: 4.6.0
  resolution: "@sindresorhus/is@npm:4.6.0"
@@ -908,7 +908,7 @@ __metadata:
  languageName: node
  linkType: hard

-"ansi-regex@npm:^6.0.1, ansi-regex@npm:^6.1.0, ansi-regex@npm:^6.2.2":
+"ansi-regex@npm:^6.1.0, ansi-regex@npm:^6.2.2":
  version: 6.2.2
  resolution: "ansi-regex@npm:6.2.2"
  checksum: 10c0/05d4acb1d2f59ab2cf4b794339c7b168890d44dda4bf0ce01152a8da0213aca207802f930442ce8cd22d7a92f44907664aac6508904e75e038fa944d2601b30f
@@ -989,13 +989,6 @@ __metadata:
  languageName: node
  linkType: hard

-"balanced-match@npm:^3.0.1":
-  version: 3.0.1
-  resolution: "balanced-match@npm:3.0.1"
-  checksum: 10c0/ac8dd63a5b260610c2cbda982f436e964c1b9ae8764d368a523769da40a31710abd6e19f0fdf1773c4ad7b2ea7ba7b285d547375dc723f6e754369835afc8e9f
-  languageName: node
-  linkType: hard
-
 "balanced-match@npm:^4.0.2":
  version: 4.0.4
  resolution: "balanced-match@npm:4.0.4"
@@ -1075,15 +1068,15 @@ __metadata:
  linkType: hard

 "cacheable@npm:^2.3.2":
-  version: 2.3.2
-  resolution: "cacheable@npm:2.3.2"
+  version: 2.3.3
+  resolution: "cacheable@npm:2.3.3"
  dependencies:
-    "@cacheable/memory": "npm:^2.0.7"
-    "@cacheable/utils": "npm:^2.3.3"
+    "@cacheable/memory": "npm:^2.0.8"
+    "@cacheable/utils": "npm:^2.4.0"
    hookified: "npm:^1.15.0"
-    keyv: "npm:^5.5.5"
+    keyv: "npm:^5.6.0"
    qified: "npm:^0.6.0"
-  checksum: 10c0/e8880d03a0c644dcf0e5df329942f121aecdbe75b99c736342c9d1b3b17a25ea2519fb21748aa709b188f4dfeec67e5277ab47b27c5d3cffa2ef3cc6e521d759
+  checksum: 10c0/9976bc1845f525e803e71e5b356a914edb4527838fbf9384851bad5465a51a612e01fbe6b142044bfe42ec7776dfcfa548503c1aad4c5117ee8af8b5ea9c2697
  languageName: node
  linkType: hard

@@ -1291,25 +1284,26 @@ __metadata:
  linkType: hard

 "conventional-changelog-angular@npm:^8.0.0":
-  version: 8.1.0
-  resolution: "conventional-changelog-angular@npm:8.1.0"
+  version: 8.2.0
+  resolution: "conventional-changelog-angular@npm:8.2.0"
  dependencies:
    compare-func: "npm:^2.0.0"
-  checksum: 10c0/b82aab869117fd9bd6ccfa960521e7638d3c2a3599c95fd5ba30d3b3fe972b5f819af4d57229f2973a7129ea18546cdf5822004565cab1ee35355cc90ac4588f
+  checksum: 10c0/15f4d455df3152db62d3a7e92c83abe2438721e4b6736cae20b1ce17162fa0aca098b3a62f4f50d3541e4aa300f89f8768d7ba45b83cca77336ffb3700669e9e
  languageName: node
  linkType: hard

 "conventional-changelog-writer@npm:^8.0.0":
-  version: 8.2.0
-  resolution: "conventional-changelog-writer@npm:8.2.0"
+  version: 8.3.0
+  resolution: "conventional-changelog-writer@npm:8.3.0"
  dependencies:
+    "@simple-libs/stream-utils": "npm:^1.2.0"
    conventional-commits-filter: "npm:^5.0.0"
    handlebars: "npm:^4.7.7"
    meow: "npm:^13.0.0"
    semver: "npm:^7.5.2"
  bin:
    conventional-changelog-writer: dist/cli/index.js
-  checksum: 10c0/e25052bb366ecee6389326fd5b7d3ecbd6f6a65439f45b5a2b1d4096baeb1bbfa93cd6bea686f419423265db5bbb02870a014cb92f43f972c00191c60711e9b6
+  checksum: 10c0/e0ce001c54085a72504c1af6a6eade4ddf2ccf1e155ba8bf80bb03228b36c719b8a1f389d222c13f32f224d0ac448e0bed40222ebfbfe9a813e0b23d6162d258
  languageName: node
  linkType: hard

@@ -1321,13 +1315,14 @@ __metadata:
  linkType: hard

 "conventional-commits-parser@npm:^6.0.0":
-  version: 6.2.1
-  resolution: "conventional-commits-parser@npm:6.2.1"
+  version: 6.3.0
+  resolution: "conventional-commits-parser@npm:6.3.0"
  dependencies:
+    "@simple-libs/stream-utils": "npm:^1.2.0"
    meow: "npm:^13.0.0"
  bin:
    conventional-commits-parser: dist/cli/index.js
-  checksum: 10c0/217b3fff627802f7fd7cb09bdfe897aa76986865543dfaa99b7957e4717d039e1e12c4a9b72706f098a5716bbbbdae540ef0b2429f7219d5fc5be0f190f1bc1e
+  checksum: 10c0/7b152db0b63617fb5f993c3422942c05f48ff42fef4350d7e73b1d8a9f24489050b126478f2aabee5e45f205dbd02cb0b486e4bb865f9c0b18c35b4d13952b25
  languageName: node
  linkType: hard

@@ -1382,7 +1377,7 @@ __metadata:
  languageName: node
  linkType: hard

-"css-functions-list@npm:^3.2.3":
+"css-functions-list@npm:^3.3.3":
  version: 3.3.3
  resolution: "css-functions-list@npm:3.3.3"
  checksum: 10c0/7b9e5dd94e0178b2edb0f3263de5ae7942e56ab0b73420d4adb8fea003367e1dbc94fe8ea300bf732d1423f7eafb523e695136f0a4e6ae4f0abec66848219ee6
@@ -1956,7 +1951,7 @@ __metadata:
  languageName: node
  linkType: hard

-"hashery@npm:^1.3.0, hashery@npm:^1.4.0":
+"hashery@npm:^1.4.0, hashery@npm:^1.5.0":
  version: 1.5.0
  resolution: "hashery@npm:1.5.0"
  dependencies:
@@ -1979,7 +1974,7 @@ __metadata:
  languageName: node
  linkType: hard

-"hookified@npm:^1.14.0, hookified@npm:^1.15.0":
+"hookified@npm:^1.14.0, hookified@npm:^1.15.0, hookified@npm:^1.15.1":
  version: 1.15.1
  resolution: "hookified@npm:1.15.1"
  checksum: 10c0/6b691374fa97ae57169fb29f90e723499fda5e85494654fbe55c4768b3ccbf3e14c0adc8d0f365f32c503b60d7c06f907781f5966c03d41c423575eb5e16860c
@@ -2428,7 +2423,7 @@ __metadata:
  languageName: node
  linkType: hard

-"keyv@npm:^5.5.5, keyv@npm:^5.6.0":
+"keyv@npm:^5.6.0":
  version: 5.6.0
  resolution: "keyv@npm:5.6.0"
  dependencies:
@@ -3032,10 +3027,10 @@ __metadata:
  languageName: node
  linkType: hard

-"normalize-url@npm:^8.0.0":
-  version: 8.1.1
-  resolution: "normalize-url@npm:8.1.1"
-  checksum: 10c0/1beb700ce42acb2288f39453cdf8001eead55bbf046d407936a40404af420b8c1c6be97a869884ae9e659d7b1c744e40e905c875ac9290644eec2e3e6fb0b370
+"normalize-url@npm:^9.0.0":
+  version: 9.0.0
+  resolution: "normalize-url@npm:9.0.0"
+  checksum: 10c0/ff8271b26b808dc4c9caf309e1f5f0dcf75e4e05c5c09f3ee3c9dde2bda7f761df1b4c9458758c1919e3420a71c464da8026c1a9a11dedff99c056f3efd6afbc
  languageName: node
  linkType: hard

@@ -4183,7 +4178,7 @@ __metadata:
  languageName: node
  linkType: hard

-"strip-ansi@npm:^7.1.0":
+"strip-ansi@npm:^7.1.0, strip-ansi@npm:^7.1.2":
  version: 7.2.0
  resolution: "strip-ansi@npm:7.2.0"
  dependencies:
@@ -4192,15 +4187,6 @@ __metadata:
  languageName: node
  linkType: hard

-"strip-ansi@npm:^7.1.2":
-  version: 7.1.2
-  resolution: "strip-ansi@npm:7.1.2"
-  dependencies:
-    ansi-regex: "npm:^6.0.1"
-  checksum: 10c0/0d6d7a023de33368fd042aab0bf48f4f4077abdfd60e5393e73c7c411e85e1b3a83507c11af2e656188511475776215df9ca589b4da2295c9455cc399ce1858b
-  languageName: node
-  linkType: hard
-
 "strip-bom@npm:^3.0.0":
  version: 3.0.0
  resolution: "strip-bom@npm:3.0.0"
@@ -4304,20 +4290,19 @@ __metadata:
  linkType: hard

 "stylelint@npm:^17.0.0":
-  version: 17.3.0
-  resolution: "stylelint@npm:17.3.0"
+  version: 17.4.0
+  resolution: "stylelint@npm:17.4.0"
  dependencies:
    "@csstools/css-calc": "npm:^3.1.1"
    "@csstools/css-parser-algorithms": "npm:^4.0.0"
-    "@csstools/css-syntax-patches-for-csstree": "npm:^1.0.26"
+    "@csstools/css-syntax-patches-for-csstree": "npm:^1.0.27"
    "@csstools/css-tokenizer": "npm:^4.0.0"
    "@csstools/media-query-list-parser": "npm:^5.0.0"
    "@csstools/selector-resolve-nested": "npm:^4.0.0"
    "@csstools/selector-specificity": "npm:^6.0.0"
-    balanced-match: "npm:^3.0.1"
    colord: "npm:^2.9.3"
    cosmiconfig: "npm:^9.0.0"
-    css-functions-list: "npm:^3.2.3"
+    css-functions-list: "npm:^3.3.3"
    css-tree: "npm:^3.1.0"
    debug: "npm:^4.4.3"
    fast-glob: "npm:^3.3.3"
@@ -4331,7 +4316,6 @@ __metadata:
    import-meta-resolve: "npm:^4.2.0"
    imurmurhash: "npm:^0.1.4"
    is-plain-object: "npm:^5.0.0"
-    known-css-properties: "npm:^0.37.0"
    mathml-tag-names: "npm:^4.0.0"
    meow: "npm:^14.0.0"
    micromatch: "npm:^4.0.8"
@@ -4348,7 +4332,7 @@ __metadata:
    write-file-atomic: "npm:^7.0.0"
  bin:
    stylelint: bin/stylelint.mjs
-  checksum: 10c0/94d136e4fe29bdf269613706fe19cfe0872de9c7d63c38c42d463be9ccec349b64a3a94539be73bc243a8e3ebdb20ca208b642725cfa7ba2e315dc2656575d51
+  checksum: 10c0/ccda036ae73e4e2d711d1c54e76ce01d991fc13607323f0d31c06828e135ec33ac65ba13f0b83956f9837da73d71f42d1e6148678e8f1c077b98cfbec0821800
  languageName: node
  linkType: hard

@@ -4799,12 +4783,11 @@ __metadata:
  linkType: hard

 "write-file-atomic@npm:^7.0.0":
-  version: 7.0.0
-  resolution: "write-file-atomic@npm:7.0.0"
+  version: 7.0.1
+  resolution: "write-file-atomic@npm:7.0.1"
  dependencies:
-    imurmurhash: "npm:^0.1.4"
    signal-exit: "npm:^4.0.1"
-  checksum: 10c0/f5dd7c0324ae03b399974484fbe56363654c3884920e3c4f4d59b690596f113f60f4061a3c0aa5e6f4c22e5b9e7e0608954fd8131a916c9123b68a17ba886345
+  checksum: 10c0/69cebb64945e22928a24ae7e2a55bf54438c92d6f657c1fa5e96b7c7a50f6c022e7454ab5c259079bb35f60296242f3a21234c79320d64a8ad57675b56a2098d
  languageName: node
  linkType: hard
Author	SHA1	Message	Date
semantic-release-bot	b3cf9a98b1	chore(release): 1.0.4 [skip ci] ## [1.0.4](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.3...v1.0.4) (2026-03-02)	2026-03-02 01:05:04 +00:00
renovate[bot]	d0014c6e0c	chore(deps): lock file maintenance (#112 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-02 03:02:33 +02:00
renovate[bot]	90c0743eff	chore(deps): update ivuorinen/actions action (v2026.02.24 → v2026.02.28) (#111 ) Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-03-02 03:02:00 +02:00
semantic-release-bot	193afe3be2	chore(release): 1.0.3 [skip ci] ## [1.0.3](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.2...v1.0.3) (2026-02-28)	2026-02-28 10:06:48 +00:00
renovate[bot]	d0f07018d1	chore(deps): lock file maintenance (#110 )	2026-02-28 12:04:24 +02:00
semantic-release-bot	7c563d492b	chore(release): 1.0.2 [skip ci] ## [1.0.2](https://github.com/ivuorinen/base-configs-stylelint/compare/v1.0.1...v1.0.2) (2026-02-28) ### Bug Fixes * ci: harden workflow permissions and use GITHUB_TOKEN for releases ([#109](https://github.com/ivuorinen/base-configs-stylelint/issues/109)) ([`9992182`](`9992182f9e`))	2026-02-28 08:10:31 +00:00
Ismo Vuorinen	9992182f9e	fix(ci): harden workflow permissions and use GITHUB_TOKEN for releases (#109 ) Replace overly broad top-level permissions (read-all) with empty defaults and declare minimal job-level permissions. Switch publish workflow from secrets.PAT to secrets.GITHUB_TOKEN so semantic-release can comment on PRs and issues.	2026-02-28 10:08:15 +02:00