@@ -8,9 +8,15 @@ on:
     paths:
       - "setup.php"
 
+# Tags are pushed with AUTOTAG_TOKEN
+permissions:
+  contents: "read"
+
 jobs:
   auto-tag-new-version:
     name: "Automatically tag new version"
     uses: "glpi-project/plugin-release-workflows/.github/workflows/auto-tag-new-version.yml@v1"
+    with:
+      bot-client-id: "${{ vars.GLPI_PROJECT_BOT_CLIENT_ID }}"
     secrets:
-      github-token: "${{ secrets.AUTOTAG_TOKEN }}"
+      bot-private-key: "${{ secrets.GLPI_PROJECT_BOT_PRIVATE_KEY }}"
@@ -1,35 +1,36 @@
-name: 'Close stale issues'
+name: "Close stale issues and pull requests"
+
 on:
   schedule:
-    - cron: '0 8 * * *'
+    - cron: "0 8 * * *"
 
 jobs:
   stale:
     if: github.repository == 'pluginsGLPI/fields'
     permissions:
-      issues: write  # for actions/stale to close stale issues
-    runs-on: ubuntu-latest
+      issues: "write" # for actions/stale to close stale issues
+      pull-requests: "write" # for actions/stale to close stale pull requests
+    runs-on: "ubuntu-latest"
     steps:
-      - uses: actions/stale@v11
+      - uses: "actions/stale@v11"
         with:
           stale-issue-message: >-
-            There has been no activity on this issue for some time and therefore it is considered stale
-            and will be closed automatically in 10 days.
-            
-            
-            If this issue is related to a bug, please try to reproduce on latest release. If the problem persist,
+            There has been no activity on this issue for 60 days and therefore it is considered stale
+            and will be closed automatically in 14 days.
+
+
+            If this issue is related to a bug, please try to reproduce on latest release. If the problem persists,
             feel free to add a comment to revive this issue.
-            
-            If it is related to a new feature, please open a topic to discuss with community about this enhancement
-            on [suggestion website](https://glpi.userecho.com/).
-            
-            
-            You may also consider taking a [subscription](https://glpi-project.org/subscriptions/) to get professionnal
-            support or [contact GLPI editor team](https://portal.glpi-network.com/contact-us) directly.
-          days-before-issue-stale: 15
-          days-before-pr-stale: -1 # PR will be marked as stale manually.
-          days-before-close: 5
+          stale-pr-message: >-
+            There has been no activity on this pull request for 90 days and therefore it is considered stale
+            and will be closed automatically in 14 days.
+            Feel free to add a comment or push new commits to keep it open.
+          days-before-issue-stale: 60
+          days-before-pr-stale: 90
+          days-before-close: 14
           exempt-issue-labels: "bug,enhancement,question,security" # Issues with "bug", "enhancement", "question" or "security" labels will not be marked as stale
+          exempt-pr-labels: "security" # PR with "security" label will not be marked as stale
+          exempt-draft-pr: true # Draft PR are work in progress.
           exempt-all-milestones: true # Do not check issues/PR with defined milestone.
           ascending: true # First check older issues/PR.
           operations-per-run: 750 # Max API calls per run.
@@ -15,6 +15,11 @@ concurrency:
   group: "${{ github.workflow }}-${{ github.ref }}"
   cancel-in-progress: true
 
+# The changelog and plugin manifest checks read the pull request files
+permissions:
+  contents: "read"
+  pull-requests: "read"
+
 jobs:
   generate-ci-matrix:
     name: "Generate CI matrix"