fix: Add (currently) still required pull-requests: write permission (#1709)

Required to remove `ok-to-test` labels from PRs until
gardener/cc-utils#1529 is merged.

Signed-off-by: Jonas Brand (8R0WNI3) <j.brand@sap.com>

Author: 8R0WNI3

.github/workflows/build.yaml

@@ -19,6 +19,7 @@ jobs:
     uses: gardener/cc-utils/.github/workflows/prepare.yaml@master
     permissions:
       id-token: write
+      pull-requests: write # required until https://github.com/gardener/cc-utils/pull/1529 is merged
     with:
       mode: ${{ inputs.mode }}
       version-operation: ${{ inputs.release-version }}

.github/workflows/non-release.yaml

@@ -26,6 +26,7 @@ jobs:
       contents: read
       packages: write
       id-token: write
+      pull-requests: write
 
   component-descriptor:
     if: ${{ github.event_name != 'pull_request_target' || (github.event_name == 'pull_request_target' && github.event.label.name == vars.DEFAULT_LABEL_OK_TO_TEST && vars.DEFAULT_LABEL_OK_TO_TEST != '') }}

.github/workflows/release.yaml

@@ -25,6 +25,7 @@ jobs:
       contents: read
       packages: write
       id-token: write
+      pull-requests: write
     with:
       mode: release
       release-version: ${{ inputs.release-version }}