* build: harden update-changelog.yml permissions Signed-off-by: Alex <[email protected]> * build: harden tests.yml permissions Signed-off-by: Alex <[email protected]> * Update update-changelog.yml * Update tests.yml Co-authored-by: Dries Vints <[email protected]>