Update GH action workflow

Signed-off-by: Taylor Smock <tsmock@meta.com>

Author: tsmock

.github/workflows/ant.yml

@@ -12,6 +12,13 @@ on:
       - $default-branch
   workflow_dispatch:
 
+permissions:
+  id-token: write
+  attestations: write
+  contents: write
+  packages: write
+  checks: write
+
 jobs:
   check-release-needed:
     runs-on: ubuntu-latest
@@ -29,20 +36,19 @@ jobs:
           last_tag=$(git describe --tags --abbrev=0 --always)
           release_needed="false"
           for file in $(git diff ${last_tag}..HEAD --name-only); do
-            if [[ $file = "src/"* ]]; then
+            if [[ $file = "src/"* ]] || [[ $file = "data/"* ]] || [[ $file = "lib/"* ]] || [[ $file = "resources/"* ]] || [[ $file = "images/"* ]]; then
               release_needed="true"
               break
             fi
           done
           echo "release_needed=$release_needed" >> $GITHUB_OUTPUT
 
-
   call-workflow:
     needs: check-release-needed
     strategy:
       matrix:
         josm-revision: ["", "r19044"]
-    uses: JOSM/JOSMPluginAction/.github/workflows/ant.yml@v2
+    uses: JOSM/JOSMPluginAction/.github/workflows/ant.yml@v3
     with:
       josm-revision: ${{ matrix.josm-revision }}
       perform-revision-tagging: ${{  matrix.josm-revision == 'r19044' && needs.check-release-needed.outputs.release_needed == 'true' }}