From f92d36cf6079f50d64e53dfd7d3376f8e29e44be Mon Sep 17 00:00:00 2001
From: James Addison <55152140+jayaddison@users.noreply.github.com>
Date: Mon, 9 Dec 2024 19:11:52 +0000
Subject: [PATCH] Maintenance: refresh GitHub Actions workflows (#30)

---
 .github/workflows/lint.yml            | 8 ++++++--
 .github/workflows/publish-release.yml | 8 ++++++--
 .github/workflows/publish-tag.yml     | 8 ++++++--
 .github/workflows/test.yml            | 8 ++++++--
 4 files changed, 24 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 14bccd5..cff984b 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -8,9 +8,13 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install black
       - run: black pywisetransfer test
diff --git a/.github/workflows/publish-release.yml b/.github/workflows/publish-release.yml
index 247ee39..f9ed700 100644
--- a/.github/workflows/publish-release.yml
+++ b/.github/workflows/publish-release.yml
@@ -7,11 +7,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     environment: release-live
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install poetry
       - run: poetry config pypi-token.pypi ${{ secrets.PYPI_API_KEY }}
       - run: poetry publish --build
diff --git a/.github/workflows/publish-tag.yml b/.github/workflows/publish-tag.yml
index 71e69d5..2208ceb 100644
--- a/.github/workflows/publish-tag.yml
+++ b/.github/workflows/publish-tag.yml
@@ -7,11 +7,15 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     environment: release-test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install poetry
       - run: poetry config repositories.testpypi https://test.pypi.org/legacy/
       - run: poetry config pypi-token.testpypi ${{ secrets.TEST_PYPI_API_KEY }}
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 90db59c..35baba6 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -8,9 +8,13 @@ on:
 
 jobs:
   test:
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: actions/setup-python@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v5
       - run: pip install .[dev]
       - run: pytest