Merge pull request #10752 from sashashura/pr/v4.1.x/github-workflow-security-hardening

github-labeler.yaml: update permissions/security

Author: jsquyres

.github/workflows/github-labeler.yaml

@@ -13,8 +13,12 @@ on:
           - opened
           - edited
 
+permissions: {} # none
+
 jobs:
     ci:
+        permissions:
+          pull-requests: write
         name: Label Bot
         runs-on: ubuntu-latest
         steps: