What: a CodeQL autofix added permissions: contents: read to .github/workflows/django-tests.yml on main only (commit 8a5e107, during #191). dev doesn't have it.
Why it matters: workflow files that differ between dev and main turn the next release into a conflict.
Fix: not fixed — apply the same block on dev.
What: a CodeQL autofix added
permissions: contents: readto.github/workflows/django-tests.ymlonmainonly (commit 8a5e107, during #191).devdoesn't have it.Why it matters: workflow files that differ between
devandmainturn the next release into a conflict.Fix: not fixed — apply the same block on
dev.