docs: Reenable the docs publishing workflow (#4291)

Took the workflows from tempo: https://github.com/grafana/tempo/tree/main/.github/workflows

Author: simonswine

…publish-technical-documentation-next.yml …publish-technical-documentation-next.yml.github/workflows_disabled/publish-technical-documentation-next.yml renamed to .github/workflows/publish-technical-documentation-next.yml .github/workflows_disabled/publish-technical-documentation-next.yml renamed to .github/workflows/publish-technical-documentation-next.yml

@@ -1,5 +1,7 @@
 name: publish-technical-documentation-next
 
+permissions: {}
+
 on:
   push:
     branches:
@@ -13,9 +15,11 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
-      - uses: grafana/writers-toolkit/publish-technical-documentation@publish-technical-documentation/v1
+        with:
+          persist-credentials: false
+      - uses: grafana/writers-toolkit/publish-technical-documentation@9ccaaf1f78c5c045229e7088e816925311c67abc
         with:
           website_directory: content/docs/pyroscope/next

…lish-technical-documentation-release.yml …lish-technical-documentation-release.yml.github/workflows_disabled/publish-technical-documentation-release.yml renamed to .github/workflows/publish-technical-documentation-release.yml .github/workflows_disabled/publish-technical-documentation-release.yml renamed to .github/workflows/publish-technical-documentation-release.yml

@@ -1,5 +1,7 @@
 name: publish-technical-documentation-release
 
+permissions: {}
+
 on:
   push:
     branches:
@@ -15,12 +17,13 @@ jobs:
     permissions:
       contents: read
       id-token: write
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
         with:
+          persist-credentials: false
           fetch-depth: 0
-      - uses: grafana/writers-toolkit/publish-technical-documentation-release@publish-technical-documentation-release/v1
+      - uses: grafana/writers-toolkit/publish-technical-documentation-release@9ccaaf1f78c5c045229e7088e816925311c67abc
         with:
           release_tag_regexp: "^v(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)$"
           release_branch_regexp: "^release/v(0|[1-9]\\d*)\\.(0|[1-9]\\d*)$"

…/workflows_disabled/update-make-docs.yml .github/workflows/update-make-docs.yml.github/workflows_disabled/update-make-docs.yml renamed to .github/workflows/update-make-docs.yml .github/workflows_disabled/update-make-docs.yml renamed to .github/workflows/update-make-docs.yml

@@ -1,15 +1,20 @@
 name: Update `make docs` procedure
+
+permissions: {}
+
 on:
   schedule:
     - cron: '0 7 * * 1-5'
   workflow_dispatch:
 jobs:
   main:
     if: github.repository == 'grafana/pyroscope'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v4
-      - uses: grafana/writers-toolkit/update-make-docs@update-make-docs/v1
+        with:
+          persist-credentials: false
+      - uses: grafana/writers-toolkit/update-make-docs@9ccaaf1f78c5c045229e7088e816925311c67abc
         with:
           pr_options: >
             --label type/docs