CI: update-dependencies Renovate job lacks 'issues: write' for the dependency dashboard

[AlexSkrypnyk]

Summary

In .github/workflows/update-dependencies.yml, the Renovate job lacks issues: write, so Renovate cannot create or update its Dependency Dashboard issue when the consumer's renovate.json uses config:recommended (which is the default and enables the dashboard).

Observed in Vortex 1.40.2.

Details

The Renovate job declares:

permissions:
  contents: write # Renovate creates branches and pushes commits.
  pull-requests: write # Renovate opens and updates dependency PRs.

config:recommended enables the Dependency Dashboard by default (Renovate v26+ includes :dependencyDashboard in the recommended preset). The dashboard is a GitHub issue, so Renovate needs issues: write to create and update it.

Impact

• Dependency PRs still work (they only need contents/pull-requests).
• The Dependency Dashboard issue silently fails to be created/updated, so the "one issue that tracks all pending/errored updates" surface is missing for consumers that keep the default config:recommended config.

Suggested fix

Add issues: write to the job permissions:

permissions:
  contents: write # Renovate creates branches and pushes commits.
  issues: write # Renovate manages the dependency dashboard issue.
  pull-requests: write # Renovate opens and updates dependency PRs.

(Alternatively, document that consumers using the dependency dashboard must add issues: write.)