fix(ci): fix configuration for breaking change notification workflow

[jameslamb]

Contributes to rapidsai/shared-workflows#560

Fixes misconfigurations in the GitHub Actions workflow that generates Notifications when PRs are labeled breaking.

Any other changes come from making the configuration for this workflow identical across all RAPIDS repos.

[copy-pr-bot]

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

[jameslamb]

/ok to test

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 3cc035a2-e6d5-4c47-8fbc-f6fd59c69aed

📥 Commits

Reviewing files that changed from the base of the PR and between 831b8a0 and ab51227.

📒 Files selected for processing (1)

• .github/workflows/trigger-breaking-change-alert.yaml

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated internal workflow permissions and secret handling configurations.

Walkthrough

This PR updates the GitHub Actions workflow for breaking-change alerts. The trigger-notifier job now explicitly maps the slack-webhook-url secret instead of inheriting all secrets, and restricts job permissions to only contents: read rather than a broader permission set.

Changes

Workflow Secrets and Permissions

Layer / File(s)	Summary
Workflow secrets and permissions adjustment .github/workflows/trigger-breaking-change-alert.yaml	Replace secrets: inherit with explicit slack-webhook-url secret mapping from NV_SLACK_BREAKING_CHANGE_NOTIFIER_APP, and reduce job permissions to only contents: read.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• bdice
• KyleFromNVIDIA

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: fixing configuration for the breaking change notification workflow, which aligns with the summary of adjusting permissions and secrets in the CI workflow file.
Description check	✅ Passed	The description is directly related to the changeset, explaining that it fixes misconfigurations in the GitHub Actions workflow for breaking change notifications and aligns configuration across RAPIDS repos.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[jakirkham]

Thanks James! 🙏

[jameslamb]

/merge