fix(ci): permissions for labeler jobs

Author: thekaveman

.github/workflows/dependency-triage.yml

@@ -7,6 +7,8 @@ on:
 jobs:
   dependency-triage:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     # see https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#responding-to-events
     if: github.actor == 'dependabot[bot]' || github.actor == 'pre-commit-ci[bot]'
     steps:

.github/workflows/labeler-actions.yml

@@ -10,6 +10,8 @@ on:
 jobs:
   label-actions:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master

.github/workflows/labeler-docs.yml

@@ -12,6 +12,8 @@ on:
 jobs:
   label-docs:
     runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
     steps:
       - name: add-label
         uses: andymckay/labeler@master