ci: fix labeller (#24935)

* ci: fix labeller

* ci: fix labeller workflow

.github/labeler.yml

@@ -1,4 +1,10 @@
 # Any python files modifed but no test files modified
 add-test-cases:
-- any: ['frappe/**/*.py']
-  all: ['!frappe/**/test*.py']
+- all:
+  - changed-files:
+    - any-glob-to-any-file: 'frappe/**/*.py'
+    - all-globs-to-all-files: '!frappe/**/test*.py'
+
+# Add 'release' label to any PR that is opened against the `main` branch
+release:
+ - base-branch: ['^version-\d+$']

.github/workflows/labeller.yml

@@ -5,8 +5,14 @@ on:
 
 jobs:
   triage:
+    permissions:
+      contents: read
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
+    - name: Clone
+      uses: actions/checkout@v3
+
     - uses: actions/labeler@v5
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"