Fix permission issue for auto-update workflows

[MrAlias]

Fix #2149

The auto-update workflows are currently failing:

• https://github.com/open-telemetry/opentelemetry-helm-charts/actions/runs/24337352968
• https://github.com/open-telemetry/opentelemetry-helm-charts/actions/runs/24337602845

The failure in both linked runs is a reusable-workflow permission mismatch. The caller workflows only allowed contents: read, while the called workflow’s update job requests contents: write and pull-requests: write so it can push a branch and open/edit a PR.

I fixed that by granting the required scopes on the calling job in .github/workflows/update-obi-chart.yaml and .github/workflows/update-target-allocator-chart.yaml. I kept the write grant scoped to the update job that invokes the reusable workflow instead of broadening workflow-wide defaults.

Verification

• I verified the edited YAML parse cleanly and actionlint passes for those two callers plus .github/workflows/update-chart-app-version.yaml.
• Tested the OBI update action on my fork: https://github.com/MrAlias/opentelemetry-helm-charts/actions/runs/24358085839/job/71130259992
• Tested the Target Allocator update action on my fork: https://github.com/MrAlias/opentelemetry-helm-charts/actions/runs/24358131911

Note: Both action tests no longer fail on the permission issues, each run gets past startup_failure. Instead, they fail on not having access to the OTel bot token, which is expected.

[Copilot]

Pull request overview

This PR fixes auto-update workflow failures caused by a reusable workflow permission mismatch by granting the required write scopes to the specific calling jobs that invoke the reusable workflow.

Changes:

• Add job-scoped contents: write and pull-requests: write permissions to the update job in the Target Allocator auto-update workflow.
• Add job-scoped contents: write and pull-requests: write permissions to the update job in the OBI auto-update workflow.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/update-target-allocator-chart.yaml	Grants the calling update job the write permissions required by the called reusable workflow.
.github/workflows/update-obi-chart.yaml	Grants the calling update job the write permissions required by the called reusable workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.