Run GitHub Actions on PRs

Also:

- Set explicit permissions to read for better security
- Update actions

Ref: https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

.github/workflows/integration_test.yml

@@ -1,6 +1,13 @@
 name: Integration Tests
 
-on: [push]
+on:
+ push:
+ branches: [main]
+ pull_request:
+ branches: [main]
+
+permissions:
+ contents: read
 
 jobs:
  build:
@@ -11,9 +18,9 @@ jobs:
  timeout-minutes: 20
  steps:
  - name: Checkout
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  - name: Checkout test app
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  with:
  repository: jamesmartin/inline_svg_test_app
  ref: ${{ matrix.test-branch }}

.github/workflows/rails_6_webpacker_integration_tests.yaml

@@ -1,6 +1,13 @@
 name: Rails 6 Webpacker Integration Tests (unreliable)
 
-on: [push]
+on:
+ push:
+ branches: [main]
+ pull_request:
+ branches: [main]
+
+permissions:
+ contents: read
 
 jobs:
  build:
@@ -11,9 +18,9 @@ jobs:
  test-branch: [rails6-webpacker]
  steps:
  - name: Checkout
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  - name: Checkout test app
- uses: actions/checkout@v2
+ uses: actions/checkout@v4
  with:
  repository: jamesmartin/inline_svg_test_app
  ref: ${{ matrix.test-branch }}
@@ -47,7 +54,7 @@ jobs:
  node-version: 16
  if: matrix.test-branch == 'rails6-webpacker'
  - name: Set up Python 2.7
- uses: actions/setup-python@v4
+ uses: actions/setup-python@v5
  with:
  python-version: '2.7'
  - name: Generate Webpacker config

.github/workflows/ruby.yml

@@ -1,14 +1,21 @@
 name: Ruby
 
-on: [push]
+on:
+ push:
+ branches: [main]
+ pull_request:
+ branches: [main]
+
+permissions:
+ contents: read
 
 jobs:
  build:
 
  runs-on: ubuntu-latest
 
  steps:
- - uses: actions/checkout@v2
+ - uses: actions/checkout@v4
  - name: Set up Ruby 2.7
  uses: ruby/setup-ruby@v1
  with: