Update CI

Author: oschulz

.github/workflows/CI.yml

@@ -9,6 +9,7 @@ on:
     tags: '*'
   pull_request:
   release:
+  workflow_dispatch:
 
 concurrency:
   # Skip intermediate builds: always.
@@ -38,7 +39,7 @@ jobs:
             arch: x86
           - version: 1
             os: macOS-latest
-            arch: x64
+            arch: arm64
           - version: 1
             os: windows-latest
             arch: x64
@@ -55,12 +56,12 @@ jobs:
           coverage: ${{ matrix.version == '1' && matrix.os == 'ubuntu-latest' && matrix.arch == 'x64' }}
       - uses: julia-actions/julia-processcoverage@v1
         if: matrix.version == '1' && matrix.os == 'ubuntu-latest' && matrix.arch == 'x64'
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@v6
         if: matrix.version == '1' && matrix.os == 'ubuntu-latest' && matrix.arch == 'x64'
         with:
           fail_ci_if_error: true
           token: ${{ secrets.CODECOV_TOKEN }}
-          file: lcov.info
+          files: lcov.info
   docs:
     name: Documentation
     runs-on: ubuntu-latest

.github/workflows/TagBot.yml

@@ -6,9 +6,20 @@ on:
   workflow_dispatch:
     inputs:
       lookback:
-        default: 3
+        default: "3"
 permissions:
+  actions: read
+  checks: read
   contents: write
+  deployments: read
+  issues: read
+  discussions: read
+  packages: read
+  pages: read
+  pull-requests: read
+  repository-projects: read
+  security-events: read
+  statuses: read
 jobs:
   TagBot:
     if: github.event_name == 'workflow_dispatch' || github.actor == 'JuliaTagBot'