New Crowdin translations by GitHub Action

.github/workflows/crowdin.yml

@@ -10,10 +10,6 @@ on:
     ]
     branches: [ dev ]
 
-permissions:
-  contents: write
-  pull-requests: write
-
 jobs:
   synchronize-with-crowdin:
     name: Crowdin Sync

.github/workflows/docker-publish.yml

@@ -17,8 +17,6 @@ on:
 env:
   IMAGE_NAME: ${{ github.repository }}
 
-permissions: {}
-
 jobs:
 
 
@@ -29,6 +27,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
 
     steps:
       - name: Checkout repository

.github/workflows/docs-publish.yml

@@ -10,6 +10,8 @@ on:
 
 permissions:
   contents: read
+  pages: write
+  id-token: write
 
 jobs:
 
@@ -31,10 +33,6 @@ jobs:
     name: Build & Deploy Docs
     if: github.repository == 'gethomepage/homepage' && github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
     runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pages: write
-      id-token: write
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}

.github/workflows/issue-triage.yml

@@ -6,15 +6,15 @@ on:
   discussion:
     types: [labeled]
 
-permissions: {}
+permissions:
+  discussions: write
+  issues: write
 
 jobs:
   close-needs-discussion:
     name: Issues Need Discussion
     if: github.event_name == 'issues' && github.event.label.name == 'needs-discussion'
     runs-on: ubuntu-latest
-    permissions:
-      issues: write
     steps:
       - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
@@ -49,8 +49,6 @@ jobs:
     name: Discussions Need Information
     if: github.event_name == 'discussion' && github.event.label.name == 'needs-information'
     runs-on: ubuntu-latest
-    permissions:
-      discussions: write
     steps:
       - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:

.github/workflows/lint.yml

@@ -6,9 +6,6 @@ on:
   workflow_dispatch:
   merge_group:
 
-permissions:
-  contents: read
-
 jobs:
   lint:
     name: Linting Checks

.github/workflows/pr-quality.yml

@@ -2,6 +2,7 @@ name: PR Quality
 
 permissions:
   contents: read
+  issues: read
   pull-requests: write
 
 on:

.github/workflows/pr-triage.yml

@@ -5,6 +5,7 @@ on:
     types: [labeled]
 
 permissions:
+  issues: write
   pull-requests: write
 
 jobs:

.github/workflows/repo-maintenance.yml

@@ -5,7 +5,10 @@ on:
     - cron: '0 3 * * *'
   workflow_dispatch:
 
-permissions: {}
+permissions:
+  issues: write
+  pull-requests: write
+  discussions: write
 
 concurrency:
   group: lock
@@ -14,9 +17,6 @@ jobs:
   stale:
     name: 'Stale'
     runs-on: ubuntu-latest
-    permissions:
-      issues: write
-      pull-requests: write
     steps:
       - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10
         with:
@@ -31,10 +31,6 @@ jobs:
   lock-threads:
     name: 'Lock Old Threads'
     runs-on: ubuntu-latest
-    permissions:
-      discussions: write
-      issues: write
-      pull-requests: write
     steps:
       - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2
         with:
@@ -60,8 +56,6 @@ jobs:
   close-answered-discussions:
     name: 'Close Answered Discussions'
     runs-on: ubuntu-latest
-    permissions:
-      discussions: write
     steps:
       - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
@@ -118,8 +112,6 @@ jobs:
   close-outdated-discussions:
     name: 'Close Outdated Discussions'
     runs-on: ubuntu-latest
-    permissions:
-      discussions: write
     steps:
       - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
@@ -211,8 +203,6 @@ jobs:
   close-unsupported-feature-requests:
     name: 'Close Unsupported Feature Requests'
     runs-on: ubuntu-latest
-    permissions:
-      discussions: write
     steps:
       - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:

.github/workflows/test.yml

@@ -5,9 +5,6 @@ on:
   push:
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   vitest:
     runs-on: ubuntu-latest