From 45158780f412a6362d7a6116c552f75e23b4be38 Mon Sep 17 00:00:00 2001
From: Jordan Harband <ljharb@gmail.com>
Date: Tue, 17 Dec 2024 22:27:16 -0800
Subject: [PATCH] [actions] split out node 10-20, and 20+

---
 .github/workflows/node-aught.yml          |  5 ++++-
 .github/workflows/node-pretest.yml        |  3 +++
 .github/workflows/node-tens.yml           | 11 +++++++----
 .github/workflows/node-twenties.yml       | 21 +++++++++++++++++++++
 .github/workflows/require-allow-edits.yml |  6 ++++++
 5 files changed, 41 insertions(+), 5 deletions(-)
 create mode 100644 .github/workflows/node-twenties.yml

diff --git a/.github/workflows/node-aught.yml b/.github/workflows/node-aught.yml
index 62f353d..1e3ccf0 100644
--- a/.github/workflows/node-aught.yml
+++ b/.github/workflows/node-aught.yml
@@ -2,6 +2,9 @@ name: 'Tests: node.js < 10'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
@@ -16,4 +19,4 @@ jobs:
     needs: [tests]
     runs-on: ubuntu-latest
     steps:
-      - run: 'echo tests completed'
+      - run: true
diff --git a/.github/workflows/node-pretest.yml b/.github/workflows/node-pretest.yml
index 765edf7..88d49f9 100644
--- a/.github/workflows/node-pretest.yml
+++ b/.github/workflows/node-pretest.yml
@@ -2,6 +2,9 @@ name: 'Tests: pretest/posttest'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/pretest.yml@main
diff --git a/.github/workflows/node-tens.yml b/.github/workflows/node-tens.yml
index b49ceb1..6b71d59 100644
--- a/.github/workflows/node-tens.yml
+++ b/.github/workflows/node-tens.yml
@@ -1,18 +1,21 @@
-name: 'Tests: node.js >= 10'
+name: 'Tests: node.js 10 - 20'
 
 on: [pull_request, push]
 
+permissions:
+  contents: read
+
 jobs:
   tests:
     uses: ljharb/actions/.github/workflows/node.yml@main
     with:
-      range: '>= 10'
+      range: '>= 10 < 20'
       type: minors
       command: npm run tests-only
 
   node:
-    name: 'node >= 10'
+    name: 'node 10 - 20'
     needs: [tests]
     runs-on: ubuntu-latest
     steps:
-      - run: 'echo tests completed'
+      - run: true
diff --git a/.github/workflows/node-twenties.yml b/.github/workflows/node-twenties.yml
new file mode 100644
index 0000000..66c9382
--- /dev/null
+++ b/.github/workflows/node-twenties.yml
@@ -0,0 +1,21 @@
+name: 'Tests: node.js >= 20'
+
+on: [pull_request, push]
+
+permissions:
+  contents: read
+
+jobs:
+  tests:
+    uses: ljharb/actions/.github/workflows/node.yml@main
+    with:
+      range: '>= 20'
+      type: minors
+      command: npm run tests-only
+
+  node:
+    name: 'node >= 20'
+    needs: [tests]
+    runs-on: ubuntu-latest
+    steps:
+      - run: true
diff --git a/.github/workflows/require-allow-edits.yml b/.github/workflows/require-allow-edits.yml
index 7b842f8..a685b8a 100644
--- a/.github/workflows/require-allow-edits.yml
+++ b/.github/workflows/require-allow-edits.yml
@@ -2,8 +2,14 @@ name: Require “Allow Edits”
 
 on: [pull_request_target]
 
+permissions:
+  contents: read
+
 jobs:
   _:
+    permissions:
+      pull-requests: read  # for ljharb/require-allow-edits to check 'allow edits' on PR
+
     name: "Require “Allow Edits”"
 
     runs-on: ubuntu-latest