Merge branch 'develop' into java21

Author: deepikaSingh2711

.github/workflows/build-doctor.yml

@@ -26,6 +26,7 @@ on:
         default: ''
 
 permissions:
+  contents: read
   pull-requests: read
   packages: read  # Added permission to read packages
 

.github/workflows/cfdeploy.yml

@@ -13,6 +13,7 @@ on:
           required: true
 jobs:
   build-and-deploy-artifactory:
+    environment: maven-central
     runs-on: ubuntu-latest
     permissions:
       contents: read

.github/workflows/gemini-ask.yml

@@ -11,6 +11,7 @@ on:
 jobs:
 
   update-version:
+    environment: maven-central
     runs-on: ubuntu-latest
     #needs: blackduck
     steps:

.github/workflows/gemini-pr-review.yml

@@ -13,6 +13,8 @@ jobs:
   build:
     name: Build
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     strategy:
       matrix:
         java-version: [ 21 ]
@@ -31,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: [ build ]
     permissions:
-      contents: read
+      contents: write
       packages: write
     steps:
       - name: Checkout
@@ -98,5 +100,5 @@ jobs:
         run: |
           mvn -B -ntp -fae -Dmaven.install.skip=true -Dmaven.test.skip=true -DdeployAtEnd=true -DaltDeploymentRepository=github::default::https://maven.pkg.github.com/cap-java/sdm deploy
         env:
-          GITHUB_TOKEN: ${{ secrets.GIT_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         shell: bash

.github/workflows/gemini_issues_review.yml

@@ -20,6 +20,7 @@ on:
 permissions:
   pull-requests: read
   packages: read  # Added permission to read packages
+  contents: read # allows workflow to checkout private repository
 
 jobs:
   deploy:

.github/workflows/internalArticatory.yml

@@ -8,6 +8,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  contents: read
   pull-requests: read
   packages: read  # Added permission to read packages