From a4f626df25f0fdc7247a530f21ca4e3ac33e79af Mon Sep 17 00:00:00 2001
From: Pulumi Bot <30351955+pulumi-bot@users.noreply.github.com>
Date: Tue, 15 Oct 2024 22:28:24 -0700
Subject: [PATCH] Update GitHub Actions workflows. (#617)

This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 7aabad15419dfed0ca672a9b3a96c75a1b81dd77.
---
 .github/workflows/main.yml                 |  2 ++
 .github/workflows/prerelease.yml           |  2 ++
 .github/workflows/publish.yml              |  2 +-
 .github/workflows/release.yml              |  3 +++
 .github/workflows/run-acceptance-tests.yml | 23 +++++++++++++---------
 5 files changed, 22 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index afa5a4cf..b8a9764b 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -94,6 +94,8 @@ jobs:
 
   publish:
     name: publish
+    permissions:
+      contents: write
     needs:
       - prerequisites
       - build_provider
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index b55934e4..e100c94e 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -57,6 +57,8 @@ jobs:
 
   publish:
     name: publish
+    permissions:
+      contents: write
     needs:
       - prerequisites
       - build_provider
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 4e81ef90..f3016e81 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -104,7 +104,7 @@ jobs:
         generate_release_notes: true
         files: dist/*
       env:
-        GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   publish_sdk:
     name: publish_sdk
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 5c6203d2..1b560d0d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -62,6 +62,9 @@ jobs:
 
   publish:
     name: publish
+    permissions:
+      contents: write
+      pull-requests: write
     needs:
       - prerequisites
       - build_provider
diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml
index 6809af9c..9a3f8249 100644
--- a/.github/workflows/run-acceptance-tests.yml
+++ b/.github/workflows/run-acceptance-tests.yml
@@ -1,5 +1,15 @@
 # WARNING: This file is autogenerated - changes will be overwritten if not made via https://github.com/pulumi/ci-mgmt
 
+name: run-acceptance-tests
+
+on:
+  pull_request:
+    paths-ignore:
+    - CHANGELOG.md
+  repository_dispatch:
+    types:
+    - run-acceptance-tests-command
+
 env:
   PR_COMMIT_SHA: ${{ github.event.client_payload.pull_request.head.sha }}
   DATABRICKS_ACCOUNT_ID: ${{ secrets.DATABRICKS_ACCOUNT_ID}}
@@ -27,6 +37,7 @@ env:
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
+
 jobs:
   prerequisites:
     if: github.event_name == 'repository_dispatch' ||
@@ -58,6 +69,8 @@ jobs:
   comment-notification:
     if: github.event_name == 'repository_dispatch'
     name: comment-notification
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
     - id: run-url
@@ -69,7 +82,7 @@ jobs:
         body: "Please view the PR build: ${{ steps.run-url.outputs.run-url }}"
         issue-number: ${{ github.event.client_payload.github.payload.issue.number }}
         repository: ${{ github.event.client_payload.github.payload.repository.full_name }}
-        token: ${{ secrets.PULUMI_BOT_TOKEN }}
+        token: ${{ secrets.GITHUB_TOKEN }}
   lint:
     if: github.event_name == 'repository_dispatch' ||
       github.event.pull_request.head.repo.full_name == github.repository
@@ -170,11 +183,3 @@ jobs:
     name: License Check
     uses: ./.github/workflows/license.yml
     secrets: inherit
-name: run-acceptance-tests
-on:
-  pull_request:
-    paths-ignore:
-    - CHANGELOG.md
-  repository_dispatch:
-    types:
-    - run-acceptance-tests-command