ci: set action permissions #6

	name: covector version or publish

	on:
	push:
	branches:
	- main

	jobs:
	version-or-publish:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	pull-requests: write
	timeout-minutes: 65
	outputs:
	change: ${{ steps.covector.outputs.change }}
	commandRan: ${{ steps.covector.outputs.commandRan }}
	successfulPublish: ${{ steps.covector.outputs.successfulPublish }}

	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: cargo login
	run: cargo login ${{ secrets.CRATES_IO_TOKEN }}
	- name: git config
	run: \|
	git config --global user.name "${{ github.event.pusher.name }}"
	git config --global user.email "${{ github.event.pusher.email }}"

	- name: covector version or publish (publish when no change files present)
	uses: jbolda/covector/packages/action@covector-v0
	id: covector
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	command: 'version-or-publish'
	createRelease: true

	- name: Create Pull Request With Versions Bumped
	if: steps.covector.outputs.commandRan == 'version'
	uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
	with:
	token: ${{ secrets.GITHUB_TOKEN }}
	branch: release/version-updates
	title: 'release: apply version updates from current changes'
	commit-message: 'release: apply version updates from current changes'
	labels: 'version updates'
	body: ${{ steps.covector.outputs.change }}

Provide feedback