From 18be0037b6fe7b1e6d12d401e1db0ce767dbb286 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= <gaborjbernat@gmail.com>
Date: Thu, 26 Feb 2026 11:52:07 +0000
Subject: [PATCH 1/3] Add permissions to check.yaml

---
 .github/workflows/check.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 2a736b4..b3109e3 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -10,6 +10,10 @@ on:
 concurrency:
   group: check-${{ github.ref }}
   cancel-in-progress: true
+
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest

From 608e3fe35c3c69de32671bdc070244095361c861 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= <gaborjbernat@gmail.com>
Date: Thu, 26 Feb 2026 11:52:09 +0000
Subject: [PATCH 2/3] Add permissions to release.yaml

---
 .github/workflows/release.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 4da2892..1bcc922 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -2,6 +2,9 @@ name: Release to PyPI
 on:
   push:
     tags: ["*"]
+permissions:
+  contents: read
+
 env:
   dists-artifact-name: python-package-distributions
 jobs:

From 8e06d9bd3ba994185a7739a839df0b578b1ecb71 Mon Sep 17 00:00:00 2001
From: "pre-commit-ci[bot]"
 <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Date: Thu, 26 Feb 2026 11:52:19 +0000
Subject: [PATCH 3/3] [pre-commit.ci] auto fixes from pre-commit.com hooks

for more information, see https://pre-commit.ci
---
 .github/workflows/check.yaml   | 2 --
 .github/workflows/release.yaml | 1 -
 2 files changed, 3 deletions(-)

diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index b3109e3..7b27c79 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -10,10 +10,8 @@ on:
 concurrency:
   group: check-${{ github.ref }}
   cancel-in-progress: true
-
 permissions:
   contents: read
-
 jobs:
   test:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 1bcc922..88beeb0 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -4,7 +4,6 @@ on:
     tags: ["*"]
 permissions:
   contents: read
-
 env:
   dists-artifact-name: python-package-distributions
 jobs: