ci(release): update permission #17

	name: Release

	on:
	release:
	types:
	- published
	push:
	tags:
	- "v..*"

	permissions:
	contents: read

	jobs:
	draft:
	name: Create draft release
	if: github.event_name == 'push'
	runs-on: ubuntu-latest
	permissions:
	contents: write
	steps:
	- uses: actions/checkout@v4
	with:
	fetch-depth: 0

	- name: Setup git-cliff
	uses: kenji-miyake/setup-git-cliff@v2

	- uses: actions/github-script@v7
	id: changelog
	with:
	result-encoding: string
	script: \|
	const { stdout } = await exec.getExecOutput('git', ['cliff', '-l', '--strip', 'header'])
	return stdout

	- name: Create draft release
	uses: softprops/action-gh-release@v2
	with:
	draft: true
	body: ${{ steps.changelog.outputs.result }}

	publish:
	name: Publish to JSR
	if: github.event_name == 'release'
	runs-on: ubuntu-latest
	permissions:
	contents: read
	id-token: write
	steps:
	- uses: actions/checkout@v4

	- uses: denoland/setup-deno@v1
	with:
	deno-version: v1.x

	- name: Publish (dry-run)
	run: deno publish --dry-run

	- name: Publish
	run: deno publish

Provide feedback