Merge branch 'main' into dependabot/npm_and_yarn/types/turndown-5.0.6

Author: mellm0

.github/workflows/ci-cd.yml

@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
@@ -91,7 +91,7 @@ jobs:
       matrix:
         check: [lint, typecheck, test:ci, lint:mermaid]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
@@ -156,7 +156,7 @@ jobs:
     needs: setup
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Setup Node.js
         uses: actions/setup-node@v6
         with:
@@ -189,6 +189,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: setup
     timeout-minutes: 20
+    permissions:
+      contents: read
+      actions: read
     strategy:
       fail-fast: false
       matrix:
@@ -203,7 +206,7 @@ jobs:
             token: CHROMATIC_TOKENS_PROJECT_TOKEN
             dir: packages/tokens
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - name: Setup Node.js
@@ -257,7 +260,7 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -349,7 +352,7 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0