🔄 Synced local '.github/workflows/' with remote 'config/workflows/'

Signed-off-by: nextcloud-android-bot <android@nextcloud.com>

.github/workflows/codeql.yml

@@ -34,8 +34,8 @@ jobs:
         java-version: 11
     - name: Assemble
       run: |
-        mkdir -p $HOME/.gradle
-        echo "org.gradle.jvmargs=-Xmx2g -XX:MaxMetaspaceSize=512m -XX:+HeapDumpOnOutOfMemoryError" > $HOME/.gradle/gradle.properties
+        mkdir -p "$HOME/.gradle"
+        echo "org.gradle.jvmargs=-Xmx2g -XX:MaxMetaspaceSize=512m -XX:+HeapDumpOnOutOfMemoryError" > "$HOME/.gradle/gradle.properties"
         ./gradlew assembleDebug
     - name: Perform CodeQL Analysis
       uses: github/codeql-action/analyze@v2

.github/workflows/stale.yml

@@ -1,19 +1,28 @@
+---
 name: 'Close stale issues'
 on:
-    schedule:
-        -   cron: '0 0 * * *'
+  schedule:
+    - cron: '0 0 * * *'
+
+# Declare default permissions as read only.
+permissions: read-all
 
 jobs:
-    stale:
-        runs-on: ubuntu-latest
-        steps:
-            -   uses: actions/stale@v5
-                with:
-                    days-before-stale: 28
-                    days-before-close: 14
-                    days-before-pr-close: -1
-                    only-labels: 'bug,needs info/discussion'
-                    stale-issue-message: 'This bug report did not receive an update in the last 4 weeks.
-                                        Please take a look again and update the issue with new details,
-                                        otherwise the issue will be automatically closed in 2 weeks. Thank you!'
-                    exempt-all-pr-milestones: true
+  stale:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - uses: actions/stale@v5
+        with:
+          days-before-stale: 28
+          days-before-close: 14
+          days-before-pr-close: -1
+          only-labels: 'bug,needs info/discussion'
+          exempt-issue-labels: 'no-stale'
+          stale-issue-message: >-
+            This bug report did not receive an update in the last 4 weeks.
+            Please take a look again and update the issue with new details,
+            otherwise the issue will be automatically closed in 2 weeks. Thank you!
+          exempt-all-pr-milestones: true