This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch 2.25.x
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/2.25.x by this push:
new 4a3e2062f3 Align `build` and `codeql-analysis` workflows with `2.26.x`
4a3e2062f3 is described below
commit 4a3e2062f337f725401c4c41821e09ce1e79efd9
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Wed Sep 2 22:28:25 2026 +0200
Align `build` and `codeql-analysis` workflows with `2.26.x`
- Replace the top-level `read-all` permissions with an empty default,
so each job declares the permissions it needs.
- Deploy snapshots from `2.25.x` instead of `2.x`.
Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01R7BoincUoL8YtZsf3xjvuf
---
.github/workflows/build.yaml | 6 ++++--
.github/workflows/codeql-analysis.yaml | 4 +++-
2 files changed, 7 insertions(+), 3 deletions(-)
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 73f55e0145..6a2d21d032 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -31,7 +31,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-permissions: read-all
+# Default permissions for each job.
+# Additional permissions should be assigned on a per-job basis.
+permissions: { }
jobs:
@@ -46,7 +48,7 @@ jobs:
deploy-snapshot:
needs: build
- if: github.repository == 'apache/logging-log4j2' && github.ref_name ==
'2.x'
+ if: github.repository == 'apache/logging-log4j2' && github.ref_name ==
'2.25.x'
uses:
apache/logging-parent/.github/workflows/deploy-snapshot-reusable.yaml@gha/v0
# Secrets for deployments
secrets:
diff --git a/.github/workflows/codeql-analysis.yaml
b/.github/workflows/codeql-analysis.yaml
index cd6dae235b..490ed8f58b 100644
--- a/.github/workflows/codeql-analysis.yaml
+++ b/.github/workflows/codeql-analysis.yaml
@@ -33,7 +33,9 @@ concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-permissions: read-all
+# Default permissions for each job.
+# Additional permissions should be assigned on a per-job basis.
+permissions: { }
jobs:
