fix(ci): Update workflows to use release pipeline

[damacus]

Updates workflows to @5.0.3.

Changes

• Updated ci.yml to @5.0.3 with secrets: inherit
• Created release.yml with permissions block
• Created conventional-commits.yml, prevent-file-change.yml, copilot-setup-steps.yml
• Created/updated .markdownlint-cli2.yaml
• Created/updated release-please config files (version: 12.3.4)
• Cleaned up CHANGELOG.md

Webhooks

• Webhooks disabled prior to merge

[github-actions]

Slowest examples

Top 10 slowest examples (0.01 seconds, 48.59% of total time)

Example	Description	Time in seconds
spec/libraries/helpers_spec.rb:19	PostgreSQL::Cookbook::Helpers#data_dir(version) with rhel family and Postgres 11 from repo returns the correct path	0.01256
spec/libraries/helpers_spec.rb:27	PostgreSQL::Cookbook::Helpers#data_dir(version) with rhel family and Postgres 11 from os returns the correct path	0.00041
spec/libraries/helpers_spec.rb:35	PostgreSQL::Cookbook::Helpers#data_dir(version) with debian family and Postgres 15 from repo returns the correct path	0.00041
spec/libraries/helpers_spec.rb:65	PostgreSQL::Cookbook::Helpers#conf_dir(version) with rhel family and Postgres 12 from os returns the correct path	0.00039
spec/libraries/helpers_spec.rb:103	PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with rhel family and Postgres 14 from os returns the correct service name	0.00039
spec/libraries/helpers_spec.rb:119	PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with debian family and Postgres 12 from os returns the correct service name	0.00038
spec/libraries/helpers_spec.rb:95	PostgreSQL::Cookbook::Helpers#default_platform_service_name(version) with rhel family and Postgres 15 from repo returns the correct service name	0.00038
spec/libraries/helpers_spec.rb:19	PostgreSQL::Cookbook::Helpers#data_dir(version) with rhel family and Postgres 13 from repo returns the correct path	0.00037
spec/libraries/helpers_spec.rb:73	PostgreSQL::Cookbook::Helpers#conf_dir(version) with debian family and Postgres 15 from repo returns the correct path	0.00037
spec/libraries/helpers_spec.rb:57	PostgreSQL::Cookbook::Helpers#conf_dir(version) with rhel family and Postgres 14 from repo returns the correct path	0.00037

To fix the problem, you should add a permissions: block to your workflow file, either at the root level or for each relevant job. In general, the root-level permissions: block applies the restrictions to all jobs unless they have their own. Since your workflow only shows one job and is calling a reusable workflow, the best approach is to set the minimal permissions required at the root of .github/workflows/conventional-commits.yml. Unless you know that the sous-chefs/.github/.github/workflows/[email protected] workflow requires write access for certain scopes (such as creating or updating pull requests), you should start with the most restrictive setup, usually contents: read. If the workflow does update pull requests or issues, you may need to add, for example, contents: read and pull-requests: write. The fix is to insert the permissions: block after the name: field and before the on: field (lines 2–4), matching GitHub Actions conventions.

To fix the problem, add a permissions block to the workflow file, specifying the minimum permissions required for the workflow to perform its tasks. Since the workflow wraps a reusable workflow that handles "prevent file change" operations on pull requests, it's prudent to start with contents: read for basic read access, unless the underlying reusable workflow requires more. The block should be placed at the root level (top-level, after name: and before on:), making it apply to all jobs unless overridden.

The change is:

• Insert the following after the name: prevent-file-change line and before the "on": block:

  permissions:
    contents: read

• No new imports, definitions, or methods are required for YAML workflows.