chore: update templates and workflows

.github/CODE_OF_CONDUCT.md

@@ -65,7 +65,7 @@ Additionally, community organizers are available to help community members engag
 
 ## 8. Addressing Grievances
 
-If you feel you have been falsely or unfairly accused of violating this Code of Conduct, you should notify @ivuorinen with a concise description of your grievance. Your grievance will be handled in accordance with our existing governing policies. 
+If you feel you have been falsely or unfairly accused of violating this Code of Conduct, you should notify @ivuorinen with a concise description of your grievance. Your grievance will be handled in accordance with our existing governing policies.
 
 ## 9. Scope
 
@@ -80,7 +80,7 @@ ismo@ivuorinen.net
 
 ## 11. License and attribution
 
-The Citizen Code of Conduct is distributed by [Stumptown Syndicate](http://stumptownsyndicate.org) under a [Creative Commons Attribution-ShareAlike license](http://creativecommons.org/licenses/by-sa/3.0/). 
+The Citizen Code of Conduct is distributed by [Stumptown Syndicate](http://stumptownsyndicate.org) under a [Creative Commons Attribution-ShareAlike license](http://creativecommons.org/licenses/by-sa/3.0/).
 
 Portions of text derived from the [Django Code of Conduct](https://www.djangoproject.com/conduct/) and the [Geek Feminism Anti-Harassment Policy](http://geekfeminism.wikia.com/wiki/Conference_anti-harassment/Policy).
 

.github/renovate.json

@@ -1,4 +1,6 @@
 {
     "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-    "extends": ["github>ivuorinen/.github:renovate-config"]
+    "extends": [
+        "github>ivuorinen/renovate-config"
+    ]
 }

.github/workflows/pr-lint.yml

@@ -8,6 +8,11 @@ on:
   pull_request:
     branches: [master, main]
 
+permissions:
+  contents: read
+  packages: read
+  statuses: write
+
 jobs:
   SuperLinter:
     uses: ivuorinen/.github/.github/workflows/pr-lint.yml@main

.github/workflows/release-drafter.yml

@@ -5,6 +5,10 @@ name: Release Drafter
 on:
   workflow_call:
 
+permissions:
+  contents: write
+  statuses: write
+
 jobs:
   Draft:
     uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main

.github/workflows/sync-labels.yml

@@ -13,6 +13,9 @@ on:
   workflow_call:
   workflow_dispatch:
 
+permissions:
+  issues: write
+
 jobs:
   SyncLabels:
     uses: ivuorinen/.github/.github/workflows/sync-labels.yml@main