Cleanup CI (#175)

Signed-off-by: Bradley Reynolds <bradley.reynolds@tailstory.dev>

Author: shenanigansd

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @shenanigansd

.github/dependabot.yaml

@@ -8,6 +8,8 @@ updates:
       ci-dependencies:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7
 
   - package-ecosystem: "npm"
     directory: "/"
@@ -17,3 +19,5 @@ updates:
       javascript-dependencies:
         patterns:
           - "*"
+    cooldown:
+      default-days: 7

.github/workflows/sentry-release.yaml

@@ -1,20 +1,28 @@
-name: "Sentry release"
+name: Sentry release
 
 on:
   push:
     branches:
       - main
 
+permissions:
+  contents: read
+
 jobs:
   sentry-release:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Checkout repository
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          persist-credentials: false
 
       - name: Create Sentry release
-        uses: getsentry/action-release@4f502acc1df792390abe36f2dcb03612ef144818 # v3.3.0
+        uses: getsentry/action-release@dab6548b3c03c4717878099e43782cf5be654289 # v3.5.0
         env:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
           SENTRY_ORG: ${{ vars.SENTRY_ORG }}
           SENTRY_PROJECT: ${{ vars.SENTRY_PROJECT }}
+        with:
+          release_prefix: "${{ vars.SENTRY_PROJECT }}@"