fix: Add (currently) still required pull-requests: write permission

Required to remove `ok-to-test` labels from PRs until
gardener/cc-utils#1529 is merged.

Signed-off-by: Jonas Brand (8R0WNI3) <j.brand@sap.com>

Author: 8R0WNI3

.github/workflows/build.yaml

@@ -23,6 +23,7 @@ jobs:
       version-commit-callback-action-path: .github/actions/prepare-release
     permissions:
       id-token: write
+      pull-requests: write # required until https://github.com/gardener/cc-utils/pull/1529 is merged
 
   oci-images:
     name: Build OCI-Images

.github/workflows/non-release.yaml

@@ -31,6 +31,7 @@ jobs:
       contents: read
       packages: write
       id-token: write
+      pull-requests: write
 
   component-descriptor:
     if: ${{ github.event_name != 'pull_request_target' || (github.event_name == 'pull_request_target' && github.event.label.name == vars.DEFAULT_LABEL_OK_TO_TEST && vars.DEFAULT_LABEL_OK_TO_TEST != '') }}

.github/workflows/release.yaml

@@ -28,6 +28,7 @@ jobs:
       contents: read
       packages: write
       id-token: write
+      pull-requests: write
     with:
       mode: release
       release-version: ${{ inputs.release-version }}