update workflows

.github/auto-merge.yml

@@ -0,0 +1,9 @@
+- match:
+    dependency_type: development
+    update_type: semver:minor
+- match:
+    dependency_type: production
+    update_type: semver:minor
+- match:
+    dependency_type: production
+    update_type: semver:patch

.github/release-drafter.yml

@@ -65,5 +65,3 @@ version-resolver:
 
 exclude-labels:
   - 'skip-changelog'
-
-change-template: '- [#$NUMBER](https://github.com/bugfixes/go-bugfixes/pull/$NUMBER) $TITLE (@$AUTHOR)'

.github/workflows/master.yml

@@ -1,13 +1,36 @@
-name: Master
+name: Release Drafter
 on:
   push:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
+  qodana:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      checks: write
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}  # to check out the actual pull request commit, not the merge commit
+          fetch-depth: 0  # a full history is required for pull request analysis
+      - name: 'Qodana Scan'
+        uses: JetBrains/[email protected]
+        env:
+          QODANA_TOKEN: ${{ secrets.QODANA_TOKEN }}
   update_release_draft:
     runs-on: ubuntu-latest
+    needs:
+      - qodana
+    permissions:
+      contents: write
+      pull-requests: write
     steps:
-      - uses: release-drafter/release-drafter@v5
+      - uses: release-drafter/release-drafter@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pull.yml

@@ -15,10 +15,10 @@ jobs:
     timeout-minutes: 5
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@v5
         with:
           go-version: 1.21.x
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 1
       - name: test