From 542b748d7eac382556186e2fed2cc24b7194d6e9 Mon Sep 17 00:00:00 2001
From: Artem Bilan <artem.bilan@broadcom.com>
Date: Mon, 18 Dec 2023 18:16:38 -0500
Subject: [PATCH] Fix release GHA for more permissions

* Improve `dependabot.yml` to group all only dev deps
* Upgrade only to patch releases
* Fix upgrades label for expected by the Changelog-generator
---
 .github/dependabot.yml        | 34 ++++++++++++++++++++++++++++++++++
 .github/workflows/release.yml |  2 ++
 2 files changed, 36 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index e075815080..e1d8aa73e1 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,37 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+      day: "sunday"
+    ignore:
+      - dependency-name: "*"
+        update-types: ["version-update:semver-major", "version-update:semver-minor"]
+    open-pull-requests-limit: 10
+    labels: ["type: dependency-upgrade"]
+    groups:
+      development-dependencies:
+        update-types: ["patch"]
+        patterns:
+          - "com.gradle.enterprise"
+          - "io.spring.*"
+          - "org.ajoberstar.grgit"
+          - "org.antora"
+          - "io.micrometer:micrometer-docs-generator"
+          - "com.willowtreeapps.assertk:assertk-jvm"
+          - "org.jetbrains.dokka"
+          - "org.apache.activemq*"
+          - "org.aspectj*"
+          - "org.awaitility:awaitility"
+          - "com.google.code.findbugs:jsr305"
+          - "org.apache.commons:commons-dbcp2"
+          - "org.apache.derby"
+          - "com.icegreen:greenmail"
+          - "org.hibernate.orm*"
+          - "org.testcontainers"
+          - "org.hsqldb:hsqldb"
+          - "com.h2database:h2"
+          - "org.postgresql:postgresql"
+          - "mysql:mysql-connector-java"
+          - "com.oracle.database.jdbc:ojdbc11"
+          - "org.apache.tomcat.embed:tomcat-embed-websocket"
+          - "org.xmlunit:xmlunit-assertj3"
+          - "com.thoughtworks.xstream:xstream"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f2c3c9b3d0..0988fc9f9a 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,6 +9,8 @@ jobs:
   release:
     permissions:
       actions: write
+      contents: write
+      issues: write
 
     uses: artembilan/spring-github-workflows/.github/workflows/spring-artifactory-gradle-release.yml@main
     secrets: