Squashed 'buildres/csl/csl-locales/' changes from b2afeb4d87..cb98d36691

cb98d36691 copied .github/workflows/merge.yaml .github/workflows/sheldon.yaml from styles
62dcca65d7 Update locales-nn-NO.xml (#267)
eb8587463f Update locales-nb-NO.xml (#266)
bd502ffb0d Update locales-pt-PT.xml (#262)
2dcc82ced1 Update locales-it-IT.xml (#263)

git-subtree-dir: buildres/csl/csl-locales
git-subtree-split: cb98d366912a0c0be361880e12fbc43cef6d383e

.github/workflows/label-gun.yml

@@ -6,8 +6,13 @@ on:
   issue_comment:
     types: [created, edited, closed]
 
+permissions: {}
 jobs:
   label:
+    permissions:
+      issues: write # to add label to an issues (retorquere/label-gun)
+      pull-requests: write # to add label, comment on pull request (retorquere/label-gun)
+
     runs-on: ubuntu-latest
     steps:
       - uses: retorquere/label-gun@main

.github/workflows/merge.yaml

@@ -12,8 +12,13 @@ on:
         description: Commit message
         required: true
 
+permissions: {}
 jobs:
   release:
+    permissions:
+      contents: write # to create a release
+      pull-requests: read # to read pull requests (dorny/paths-filter)
+
     runs-on: ubuntu-latest
     env:
       GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/sheldon.yaml

@@ -4,8 +4,13 @@ on:
   pull_request_target:
     types: [ opened, synchronize, workflow_dispatch]
 
+permissions: {}
 jobs:
   test:
+    permissions:
+      contents: write # to push code in repo (stefanzweifel/git-auto-commit-action)
+      pull-requests: write # to comment on pull requests
+
     runs-on: ubuntu-latest
     env:
       GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"