Update build.yml

Author: danez

.github/workflows/build.yml

@@ -8,8 +8,7 @@ on:
       - renovate/**
   pull_request:
 
-env:
-  NODE_VERSION: 'lts/*'
+permissions: {}
 
 jobs:
   tests:
@@ -41,7 +40,11 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     permissions:
-      id-token: write
+      contents: write # to be able to publish a GitHub release
+      issues: write # to be able to comment on released issues
+      pull-requests: write # to be able to comment on released pull requests
+      id-token: write # to enable use of OIDC for npm provenance
+
 
     steps:
       - name: Checkout
@@ -52,7 +55,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: ${{ env.NODE_VERSION }}
+          node-version: lts/*
           cache: 'yarn'
 
       - name: Install dependencies