From e926385625bd8cf395770479a4fc6a8290526289 Mon Sep 17 00:00:00 2001
From: "Basil L. Contovounesios" <contovob@tcd.ie>
Date: Tue, 11 Oct 2022 17:16:11 +0300
Subject: [PATCH] Update GitHub CI workflow

Prompted by https://github.com/magit/magit/pull/4780.

* .github/workflows/test.yml (permissions): Restrict default token
permissions for entire workflow.
(emacs_version): Add Emacs 28.2.
(actions/checkout): Update to v3.  Restrict lifetime of
authentication token.
---
 .github/workflows/test.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9e94554..6fe850e 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -1,6 +1,6 @@
 name: CI
 on: [push, pull_request]
-
+permissions: {}
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -21,12 +21,15 @@ jobs:
           - '27.1'
           - '27.2'
           - '28.1'
+          - '28.2'
           - 'snapshot'
         include:
           - emacs_version: 'snapshot'
             allow_failure: true
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
+      with:
+        persist-credentials: false
     - uses: purcell/setup-emacs@master
       with:
         version: ${{ matrix.emacs_version }}