fix: give additional permissions to update-semver job (#44)

The v1 tag is not up-to-date with recent fixes.

Author: artemrys

.github/workflows/build-test-release.yaml

@@ -1,5 +1,3 @@
-name: CI
-
 on:
   push:
     branches:
@@ -13,13 +11,10 @@ on:
 jobs:
 
   compliance-copyrights:
-    name: Compliance Copyright Headers
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      - name: Check License Header
-        uses: apache/skywalking-eyes@main
+      - uses: actions/checkout@v3
+      - uses: apache/[email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
@@ -30,13 +25,11 @@ jobs:
       - uses: actions/setup-python@v4
         with:
           python-version: "3.7"
-      - name: Install actionlint
-        run: |
-          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/v1.6.8/scripts/download-actionlint.bash)
+      - run: |
+          bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/v1.6.25/scripts/download-actionlint.bash)
       - uses: pre-commit/[email protected]
 
   publish:
-    name: Build Release
     needs:
       - compliance-copyrights
       - pre-commit
@@ -46,15 +39,22 @@ jobs:
         with:
           submodules: false
           persist-credentials: false
-      - name: Semantic Release
-        uses: splunk/[email protected]
+      - uses: splunk/[email protected]
         env:
           GITHUB_TOKEN: ${{ secrets.GH_TOKEN_ADMIN }}
+        with:
+          git_committer_name: ${{ secrets.SA_GH_USER_NAME }}
+          git_committer_email: ${{ secrets.SA_GH_USER_EMAIL }}
+          gpg_private_key: ${{ secrets.SA_GPG_PRIVATE_KEY }}
+          passphrase: ${{ secrets.SA_GPG_PASSPHRASE }}
+          extra_plugins: |
+            @google/semantic-release-replace-plugin
 
   update-semver:
-    name: Move Respository semver tags
     if: startsWith(github.ref, 'refs/tags/v')
     needs: publish
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v3