v1.3.4

Co-Authored-By: Quentin Torroba <quentin.torroba@mistral.ai>
Co-Authored-By: Vincent Guilloux <vincent.guilloux@mistral.ai>
Co-Authored-By: Luis Cardoso <luis.cardoso@mistral.ai>

.github/workflows/build-and-upload.yml

@@ -10,6 +10,8 @@ on:
 jobs:
   configure:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
@@ -42,6 +44,8 @@ jobs:
   build-and-upload:
     needs: configure
     name: ${{ matrix.os }}-${{ matrix.arch }}
+    permissions:
+      contents: read
     strategy:
       matrix: ${{ fromJSON(needs.configure.outputs.matrix) }}
     runs-on: ${{ matrix.runner }}
@@ -131,6 +135,8 @@ jobs:
   nix-build:
     needs: configure
     name: "Nix: ${{ matrix.os }}-${{ matrix.arch }}"
+    permissions:
+      contents: read
     strategy:
       matrix: ${{ fromJSON(needs.configure.outputs.matrix) }}
     runs-on: ${{ matrix.runner }}

.github/workflows/ci.yml

@@ -13,7 +13,8 @@ jobs:
   pre-commit:
     name: Pre-commit
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
@@ -51,7 +52,8 @@ jobs:
   tests:
     name: Tests
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
@@ -85,7 +87,8 @@ jobs:
   snapshot-tests:
     name: Snapshot Tests
     runs-on: ubuntu-latest
-
+    permissions:
+      contents: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4

.github/workflows/issue-labeler.yml

@@ -8,6 +8,7 @@ jobs:
     label-component:
         runs-on: ubuntu-latest
         permissions:
+            contents: read
             issues: write
         steps:
             - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

.github/workflows/release.yml

@@ -48,6 +48,8 @@ jobs:
     name: Release Zed Extension
     runs-on: ubuntu-latest
     if: github.repository == 'mistralai/mistral-vibe'
+    permissions:
+      contents: read
     environment:
       name: zed
     steps: