ci: fix permissions

Signed-off-by: Sergei Lukianov <[email protected]>

Author: Frostman

.github/workflows/ci.yaml

@@ -21,6 +21,13 @@ concurrency:
 jobs:
   build:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+      statuses: write
+
     steps:
       - uses: actions/checkout@v4
         with:
@@ -34,7 +41,7 @@ jobs:
         run: just build
 
       - name: Deploy preview to Netlify
-        uses: nwtgck/actions-netlify@v2
+        uses: nwtgck/actions-netlify@v3
         if: github.event_name == 'pull_request'
         with:
           publish-dir: ./site

.github/workflows/publish.yaml

@@ -19,13 +19,18 @@ concurrency:
 jobs:
   publish:
     runs-on: ubuntu-latest
+
+    permissions:
+      contents: write
+      statuses: write
+
     steps:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Deploy to Netlify
-        uses: nwtgck/actions-netlify@v2
+        uses: nwtgck/actions-netlify@v3
         with:
           publish-dir: ./
           production-deploy: true