Set workflow permissions

Author: thibmeu

.github/workflows/release.yml

@@ -5,6 +5,9 @@ on:
     types:
       - published
 
+permissions:
+  contents: read
+
 jobs:
   release:
     if: ${{ github.repository_owner == 'cloudflare' }}

.github/workflows/tests.yml

@@ -8,6 +8,9 @@ on:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   testing:
     name: Testing on Node v${{ matrix.node }}
@@ -17,10 +20,10 @@ jobs:
         node: [22, 20]
     steps:
       - name: Checking out
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Use Node.js v${{ matrix.node }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: 'npm'