Maintenance: refresh GitHub Actions workflows (#30)

.github/workflows/lint.yml

@@ -8,9 +8,13 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install black
       - run: black pywisetransfer test

.github/workflows/publish-release.yml

@@ -7,11 +7,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     environment: release-live
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install poetry
       - run: poetry config pypi-token.pypi ${{ secrets.PYPI_API_KEY }}
       - run: poetry publish --build

.github/workflows/publish-tag.yml

@@ -7,11 +7,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     environment: release-test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install poetry
       - run: poetry config repositories.testpypi https://test.pypi.org/legacy/
       - run: poetry config pypi-token.testpypi ${{ secrets.TEST_PYPI_API_KEY }}

.github/workflows/test.yml

@@ -8,9 +8,13 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install .[dev]
       - run: pytest