Hkeydevroot
diff --git a/‎.github/workflows/apply-done-label.yml
-13 b/‎.github/workflows/apply-done-label.yml
-13
diff --git a/‎.github/workflows/assign-reviewer.yml
-15 b/‎.github/workflows/assign-reviewer.yml
-15
diff --git a/‎.github/workflows/auto-tag-pr.yml
+4-1 b/‎.github/workflows/auto-tag-pr.yml
+4-1
diff --git a/‎.github/workflows/build-app.yml
-25 b/‎.github/workflows/build-app.yml
-25
diff --git a/‎.github/workflows/cache-artifacts.yml
-13 b/‎.github/workflows/cache-artifacts.yml
-13
diff --git a/‎.github/workflows/check-duplicate-issues.yml
-22 b/‎.github/workflows/check-duplicate-issues.yml
-22
diff --git a/‎.github/workflows/code-linter.yml
-20 b/‎.github/workflows/code-linter.yml
-20
diff --git a/‎.github/workflows/code-spell-check.yml
-30 b/‎.github/workflows/code-spell-check.yml
-30
diff --git a/‎.github/workflows/docs-link-checker.yml
-33 b/‎.github/workflows/docs-link-checker.yml
-33
diff --git a/‎.github/workflows/issue-translator.yml
-18 b/‎.github/workflows/issue-translator.yml
-18
diff --git a/‎.github/workflows/label-sponsors.yml
-16 b/‎.github/workflows/label-sponsors.yml
-16
diff --git a/‎.github/workflows/label-top-issues.yml
-18 b/‎.github/workflows/label-top-issues.yml
-18
diff --git a/‎.github/workflows/mind-your-language.yml
-20 b/‎.github/workflows/mind-your-language.yml
-20
diff --git a/‎.github/workflows/pr-commenter.yml
-13 b/‎.github/workflows/pr-commenter.yml
-13
diff --git a/‎.github/workflows/pr-labler.yml
-12 b/‎.github/workflows/pr-labler.yml
-12
diff --git a/‎.github/workflows/raise-issue-from-todo.yml
-13 b/‎.github/workflows/raise-issue-from-todo.yml
-13
@@ -8,6 +8,8 @@ on:
 jobs:
   tag-pre-release:
     runs-on: ubuntu-latest
+    permissions:
+      contents: write
     outputs:
       tag: ${{ steps.autotag.outputs.tagname }}
     steps:
@@ -25,8 +27,9 @@ jobs:
     steps:
     - uses: actions/checkout@v2
     - uses: ncipollo/release-action@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
       with:
-        token: ${{ secrets.BOT_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
         tag: ${{ needs.tag-pre-release.outputs.tag }}
         bodyFile: ".github/LATEST_CHANGELOG.md"
   mark-issue-fixed: