From 216d548fd42ac23987ad7ce0f3deec4dc10e5d83 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?F=C3=A9lix=20Saparelli?= <felix@passcod.name>
Date: Wed, 27 Sep 2023 10:57:51 +1300
Subject: [PATCH] Use explicit write permissions (#1404)

* Use explicit write permissions

* Revert "release: cargo-binstall v1.4.1 (#1403)"

This reverts commit 00941d8b439a993cc9f87d57e454381781d38449.
---
 .github/workflows/release-cli.yml      | 4 ++++
 .github/workflows/release-packages.yml | 4 ++++
 .github/workflows/release.yml          | 2 ++
 Cargo.lock                             | 2 +-
 crates/bin/Cargo.toml                  | 2 +-
 crates/bin/windows.manifest            | 2 +-
 6 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml
index 262991d6..bf4bb152 100644
--- a/.github/workflows/release-cli.yml
+++ b/.github/workflows/release-cli.yml
@@ -17,6 +17,8 @@ on:
 
 jobs:
   tag:
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -66,6 +68,8 @@ jobs:
 
   publish:
     needs: package
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
diff --git a/.github/workflows/release-packages.yml b/.github/workflows/release-packages.yml
index ab6839c6..b8085961 100644
--- a/.github/workflows/release-packages.yml
+++ b/.github/workflows/release-packages.yml
@@ -41,6 +41,8 @@ jobs:
 
     name: ${{ matrix.t }}
     runs-on: ${{ matrix.o }}
+    permissions:
+      contents: write
     env:
       CARGO_BUILD_TARGET: ${{ matrix.t }}
       GLIBC_VERSION: ${{ matrix.g }}
@@ -125,6 +127,8 @@ jobs:
   lipo:
     needs: build
     name: universal-apple-darwin
+    permissions:
+      contents: write
     runs-on: macos-latest
     env:
       JUST_FOR_RELEASE: true
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 88f6d0a7..c3d85d87 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,6 +25,8 @@ jobs:
   release-lib:
     if: needs.info.outputs.is-release == 'true' && needs.info.outputs.crate != 'cargo-binstall'
     needs: info
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
diff --git a/Cargo.lock b/Cargo.lock
index ee64dd17..34c625dc 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -512,7 +512,7 @@ dependencies = [
 
 [[package]]
 name = "cargo-binstall"
-version = "1.4.1"
+version = "1.4.0"
 dependencies = [
  "binstalk",
  "binstalk-manifests",
diff --git a/crates/bin/Cargo.toml b/crates/bin/Cargo.toml
index 3339b959..0f7ed0af 100644
--- a/crates/bin/Cargo.toml
+++ b/crates/bin/Cargo.toml
@@ -3,7 +3,7 @@ name = "cargo-binstall"
 description = "Rust binary package installer for CI integration"
 repository = "https://github.com/cargo-bins/cargo-binstall"
 documentation = "https://docs.rs/cargo-binstall"
-version = "1.4.1"
+version = "1.4.0"
 rust-version = "1.65.0"
 authors = ["ryan <ryan@kurte.nz>"]
 edition = "2021"
diff --git a/crates/bin/windows.manifest b/crates/bin/windows.manifest
index 4fab5a9a..c2146eba 100644
--- a/crates/bin/windows.manifest
+++ b/crates/bin/windows.manifest
@@ -3,7 +3,7 @@
 	<assemblyIdentity
 		type="win32"
 		name="Binstall.Cli.binstall"
-		version="1.4.1.0"
+		version="1.4.0.0"
 	/>
 
 	<trustInfo>