(superset) 01/01: fix: GHA update-monorepo-lockfiles

[ma...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

maximebeauchemin pushed a commit to branch fix-update-monorepo-lockfiles
in repository https://gitbox.apache.org/repos/asf/superset.git

commit b9db297aff78d9d4239c8b3f1b8e68ffbaacb235
Author: Maxime Beauchemin <ma...@gmail.com>
AuthorDate: Tue Apr 2 20:32:40 2024 -0700

    fix: GHA update-monorepo-lockfiles
    
    Attempting permissions to address this issue
    https://github.com/apache/superset/pull/27835#issuecomment-2033262448
---
 .github/workflows/update-monorepo-lockfiles.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/update-monorepo-lockfiles.yml b/.github/workflows/update-monorepo-lockfiles.yml
index 4281e79d49..b0b63a912e 100644
--- a/.github/workflows/update-monorepo-lockfiles.yml
+++ b/.github/workflows/update-monorepo-lockfiles.yml
@@ -16,6 +16,9 @@ concurrency:
 
 jobs:
   update-lock-file:
+    permissions:
+      contents: write
+      pull-requests: write
     runs-on: ubuntu-latest
     if: >
       (github.event_name == 'pull_request' && github.event.pull_request.user.login == 'dependabot[bot]') ||
@@ -39,6 +42,8 @@ jobs:
           npm install
 
       - name: Commit and Push Changes
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config user.name "GitHub-Actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"