From 64eda761f40b0fb3e82fe66c7eb9f4cd6f0f8696 Mon Sep 17 00:00:00 2001
From: Pulumi Bot <30351955+pulumi-bot@users.noreply.github.com>
Date: Thu, 30 Jan 2025 23:30:16 -0700
Subject: [PATCH] Update GitHub Actions workflows. (#2927)

This PR was automatically generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit 3d9b4e60fffb541b1d54553431fcebfd9dabb63b.
---
 .github/workflows/prerequisites.yml | 2 +-
 .github/workflows/publish.yml       | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/prerequisites.yml b/.github/workflows/prerequisites.yml
index 5141097e80..d391313d76 100644
--- a/.github/workflows/prerequisites.yml
+++ b/.github/workflows/prerequisites.yml
@@ -79,7 +79,7 @@ jobs:
     - name: Unit-test provider code
       run: make test_provider
     - name: Upload coverage reports to Codecov
-      uses: codecov/codecov-action@5a605bd92782ce0810fa3b8acc235c921b497052 # v5.2.0
+      uses: codecov/codecov-action@0da7aa657d958d32c117fc47e1f977e7524753c7 # v5.3.0
       env:
         CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
     - if: inputs.is_pr
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 0f18467700..dd618fe894 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -214,7 +214,6 @@ jobs:
     name: verify_release
     needs: publish_sdk
     permissions:
-      contents: write
       id-token: write
     uses: ./.github/workflows/verify-release.yml
     secrets: inherit