Merge branch 'main' into openbsd

Author: rnro

.github/workflows/benchmarks.yml

@@ -1,5 +1,8 @@
 name: Benchmarks
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:

.github/workflows/cmake_tests.yml

@@ -1,5 +1,8 @@
 name: CMake build
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:

.github/workflows/cxx_interop.yml

@@ -1,5 +1,8 @@
 name: Cxx interop
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:

.github/workflows/macos_tests.yml

@@ -1,5 +1,8 @@
 name: macOS tests
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:
@@ -126,7 +129,7 @@ on:
       xcode_latest_beta_enabled:
         type: boolean
         description: "Boolean to enable the Xcode beta jobs (uses latest beta if one currently exists). Defaults to true."
-        default: false
+        default: true
       xcode_latest_beta_build_arguments_override:
         type: string
         description: "The arguments passed to swift build in the Xcode beta job."

.github/workflows/main.yml

@@ -1,5 +1,8 @@
 name: Main
 
+permissions:
+  contents: read
+
 on:
   push:
     branches: [main]

.github/workflows/pull_request.yml

@@ -1,5 +1,8 @@
 name: PR
 
+permissions:
+  contents: read
+
 on:
   pull_request:
     types: [opened, reopened, synchronize]

.github/workflows/pull_request_label.yml

@@ -1,5 +1,8 @@
 name: PR label
 
+permissions:
+    contents: read
+
 on:
     pull_request:
         types: [labeled, unlabeled, opened, reopened, synchronize]

.github/workflows/release_builds.yml

@@ -1,5 +1,8 @@
 name: Release builds
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:

.github/workflows/static_sdk.yml

@@ -1,5 +1,8 @@
 name: Static SDK
 
+permissions:
+  contents: read
+
 on:
   workflow_call:
     inputs:

.github/workflows/swift_6_language_mode.yml

@@ -1,5 +1,8 @@
 name: Swift 6 language mode
 
+permissions:
+  contents: read
+
 on:
   workflow_call: