From 6ca038b57d7a125963eb03cc9b36dfec4c7b4cdc Mon Sep 17 00:00:00 2001
From: Dan Pock <self@danpock.me>
Date: Mon, 5 Aug 2024 19:40:33 -0400
Subject: [PATCH] Sync GH folder

---
 .github/renovate.json             | 15 ++++++++++++---
 .github/workflows/port-issue.yaml |  2 ++
 .github/workflows/port-pr.yaml    |  2 ++
 3 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/.github/renovate.json b/.github/renovate.json
index 073bc67..18640e1 100644
--- a/.github/renovate.json
+++ b/.github/renovate.json
@@ -3,16 +3,25 @@
     "github>rancher/renovate-config#modigest"
   ],
   "baseBranches": [
-    "master",
-    "release/v2.9"
+    "main",
+    "release/v2.9",
+    "release/v2.8"
   ],
   "prHourlyLimit": 2,
   "packageRules": [
     {
+      "matchBaseBranches": ["main", "release/v2.8"],
       "matchDepNames": [
         "kubernetes/kubernetes"
       ],
-      "allowedVersions": "<1.25.0"
+      "allowedVersions": "<1.30.0"
+    },
+    {
+      "matchBaseBranches": ["release/v2.8"],
+      "matchDepNames": [
+        "kubernetes/kubernetes"
+      ],
+      "allowedVersions": "<1.28.0"
     }
   ]
 }
diff --git a/.github/workflows/port-issue.yaml b/.github/workflows/port-issue.yaml
index 4397d1d..4c0e678 100644
--- a/.github/workflows/port-issue.yaml
+++ b/.github/workflows/port-issue.yaml
@@ -9,6 +9,8 @@ on:
 
 jobs:
   port-issue:
+    permissions:
+      issues: write
     runs-on: ubuntu-latest
     if: ${{ !github.event.issue.pull_request && (contains(github.event.comment.body, '/backport') || contains(github.event.comment.body, '/forwardport')) }}
     steps:
diff --git a/.github/workflows/port-pr.yaml b/.github/workflows/port-pr.yaml
index 90ddee9..45824c1 100644
--- a/.github/workflows/port-pr.yaml
+++ b/.github/workflows/port-pr.yaml
@@ -12,6 +12,8 @@ env:
 
 jobs:
   port-pr:
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
     if: ${{ github.event.issue.pull_request && (startsWith(github.event.comment.body, '/backport') || startsWith(github.event.comment.body, '/forwardport')) }}
     steps: