added permissions to token generation step to limit scope of token

.github/ISSUE_TEMPLATE/issue.yml

@@ -46,17 +46,16 @@ body:
     attributes:
       label: Additional Context
       description: Add any other context about the problem here.
-  - type: dropdown
+  - type: checkboxes
     id: os
     attributes:
       label: Operating System
-      description: What operating system(s) are you seeing the problem on?
-      multiple: true
+      description: What operating system are you seeing the problem on?
       options:
-        - Windows
-        - macOS
-        - Linux
-        - Other operating system (please specify in "Additional Context" section)
+        - label: Windows
+        - label: macOS
+        - label: Linux
+        - label: Other
     validations:
       required: true
   - type: input
@@ -64,33 +63,29 @@ body:
     attributes:
       label: Operating System Version
       description: What version of the operating system(s) are you seeing the problem on?
-    validations:
-      required: true
-  - type: dropdown
+  - type: checkboxes
     id: directories
     attributes:
       label: Directory Service
       description: What directory service(s) are you seeing the problem on?
-      multiple: true
       options:
-        - LDAP - Active Directory
-        - Another LDAP implementation (please specify in "Additional Context" section)
-        - Microsoft Entra ID
-        - Google Workspace
-        - Okta Universal Directory
-        - OneLogin
-        - Other directory service (please specify in "Additional Context" section)
+        - label: LDAP - Active Directory
+        - label: Another LDAP implementation (please specify in "Additional Context" section)
+        - label: Microsoft Entra ID
+        - label: Google Workspace
+        - label: Okta Universal Directory
+        - label: OneLogin
+        - label: Other
     validations:
       required: true
-  - type: dropdown
+  - type: checkboxes
     id: application-type
     attributes:
       label: Application Type
-      description: Which Directory Connector application(s) are you seeing the problem on?
-      multiple: true
+      description: Which Directory Connector application are you seeing the problem on?
       options:
-        - GUI (the desktop application)
-        - CLI (the bwdc command line application)
+        - label: GUI (the desktop application)
+        - label: CLI (the bwdc command line application)
     validations:
       required: true
   - type: input
@@ -108,4 +103,5 @@ body:
         Make sure to acknowledge the following before submitting your report!
       options:
         - label: I understand that work is tracked outside of Github. A PR will be linked to this issue should one be opened to address it, but Bitwarden doesn't use fields like "assigned", "milestone", or "project" to track progress.
-          required: true
+    validations:
+      required: true

.github/workflows/build.yml

@@ -120,7 +120,7 @@ jobs:
 
   macos-cli:
     name: Build Mac CLI
-    runs-on: macos-15-intel
+    runs-on: macos-13
     needs: setup
     permissions:
       contents: read
@@ -427,7 +427,7 @@ jobs:
 
   macos-gui:
     name: Build MacOS GUI
-    runs-on: macos-15-intel
+    runs-on: macos-13
     needs: setup
     permissions:
       contents: read

.github/workflows/version-bump.yml

@@ -47,6 +47,7 @@ jobs:
         with:
           app-id: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-ID }}
           private-key: ${{ steps.get-kv-secrets.outputs.BW-GHAPP-KEY }}
+          permission-contents: write
 
       - name: Checkout Branch
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

package.json

@@ -76,7 +76,7 @@
     "@angular-devkit/build-angular": "20.3.3",
     "@angular-eslint/eslint-plugin-template": "20.6.0",
     "@angular-eslint/template-parser": "20.6.0",
-    "@angular/compiler-cli": "20.3.15",
+    "@angular/compiler-cli": "20.3.3",
     "@electron/notarize": "2.5.0",
     "@electron/rebuild": "4.0.1",
     "@fluffy-spoon/substitute": "1.208.0",
@@ -99,7 +99,7 @@
     "cross-env": "7.0.3",
     "css-loader": "7.1.2",
     "dotenv": "17.2.0",
-    "electron": "39.2.1",
+    "electron": "39.1.0",
     "electron-builder": "24.13.3",
     "electron-log": "5.4.1",
     "electron-reload": "2.0.0-alpha.1",
@@ -123,10 +123,10 @@
     "lint-staged": "16.2.6",
     "mini-css-extract-plugin": "2.9.2",
     "minimatch": "5.1.2",
-    "node-forge": "1.3.2",
+    "node-forge": "1.3.1",
     "node-loader": "2.1.0",
     "prettier": "3.6.2",
-    "rimraf": "6.1.0",
+    "rimraf": "6.0.1",
     "rxjs": "7.8.2",
     "sass": "1.93.2",
     "sass-loader": "16.0.5",
@@ -142,16 +142,16 @@
     "zone.js": "0.15.1"
   },
   "dependencies": {
-    "@angular/animations": "20.3.15",
-    "@angular/cdk": "20.2.14",
+    "@angular/animations": "20.3.3",
+    "@angular/cdk": "20.2.7",
     "@angular/cli": "20.3.3",
-    "@angular/common": "20.3.15",
-    "@angular/compiler": "20.3.15",
-    "@angular/core": "20.3.15",
-    "@angular/forms": "20.3.15",
-    "@angular/platform-browser": "20.3.15",
-    "@angular/platform-browser-dynamic": "20.3.15",
-    "@angular/router": "20.3.15",
+    "@angular/common": "20.3.3",
+    "@angular/compiler": "20.3.3",
+    "@angular/core": "20.3.3",
+    "@angular/forms": "20.3.3",
+    "@angular/platform-browser": "20.3.3",
+    "@angular/platform-browser-dynamic": "20.3.3",
+    "@angular/router": "20.3.3",
     "@microsoft/microsoft-graph-client": "3.0.7",
     "big-integer": "1.6.52",
     "bootstrap": "5.3.7",
@@ -166,7 +166,7 @@
     "ldapts": "8.0.1",
     "lowdb": "1.0.0",
     "ngx-toastr": "19.1.0",
-    "node-fetch": "3.3.2",
+    "node-fetch": "2.7.0",
     "parse5": "8.0.0",
     "proper-lockfile": "4.1.2",
     "rxjs": "7.8.2",