remove permissions

.gitea/workflows/release/create-release-on-tag.yaml

@@ -1,9 +1,6 @@
 name: Create release
 run-name: Create release on tag
 
-permissions:
-    contents: write
-
 on:
     push:
         tags:

.gitea/workflows/release/tag-when-pr-merged-from-branch-release.yaml

@@ -10,9 +10,11 @@ on:
 
 jobs:
     tag_if_merged:
-        if: github.event.pull_request.merged == true and startsWith(github.head_ref, 'release/')
+        if: github.event.pull_request.merged == true && startsWith(github.head_ref, 'release/')
         runs-on: ubuntu-latest
         steps:
+            -   name: check out repository
+                uses: https://github.com/actions/checkout@v4
             -   name: changie latest
                 id: changie_latest
                 uses: https://github.com/miniscruff/changie-action@v2

.gitea/workflows/release/update-composer-lock.yaml

@@ -39,16 +39,19 @@ jobs:
                 version: latest
                 args: 'new --body "Update dependencies. Chill-bundles upgraded from ${{ steps.chill-before.outputs.value }} to ${{ steps.chill-after.outputs.value }}" --kind Release --custom "Issue=0"'
             - name: changie batch
+              if: ${{ steps.composer-lock-changed.outputs.is_composer_lock_changed == 1 }}
               uses: https://github.com/miniscruff/changie-action@v2
               with:
                 version: latest
                 args: 'batch auto'
             - name: changie merge
+              if: ${{ steps.composer-lock-changed.outputs.is_composer_lock_changed == 1 }}
               uses: https://github.com/miniscruff/changie-action@v2
               with:
                 version: latest
                 args: 'merge'
             - name: commit changed files
+              if: ${{ steps.composer-lock-changed.outputs.is_composer_lock_changed == 1 }}
               uses: https://github.com/stefanzweifel/git-auto-commit-action@v5
               with:
                   commit_message: "update composer.lock and file (automatic update)"