Test older versions of GraalVM CE on Windows Server 2025

[linghengqian]

• Test older versions of GraalVM CE on Windows Server 2025. Let's see what the problem is with the older version of GraalVM CE.

To fix this issue, add an explicit permissions block to your workflow so that all jobs limit their access to the GITHUB_TOKEN according to the principle of least privilege. Since none of the jobs in your workflow appear to require write permissions (they run code checks and tests, do checkouts, and set up environments), the minimal recommended setting is contents: read. This can be added at the top level (applies to all jobs unless overridden), or individually per job if some jobs need additional permissions. The fix is best performed by editing .github/workflows/test.yml by adding the following block after the name section and before the on: section:

permissions:
  contents: read

No other changes or imports are necessary.

To fix the issue, you should add an explicit permissions: block to your workflow or directly to the job shown (starting at line 116 for "native-test-ci-on-liberica"). Since most CI/test jobs typically require only the ability to read repository contents (not write), you can add a minimal permissions: entry specifying contents: read either at the top (root) level or for each job individually.

• General fix: Add permissions: at the root of the workflow (above jobs:) if all jobs require the same reduced permissions, or add an explicit block to each job if different jobs need different permissions.
• Best approach here: Insert the following near line 15 (above or below name: Test):

  permissions:
    contents: read

  This applies to all jobs unless a job sets its own permissions.
• If only specific jobs need the block: Add it inside the relevant job.
• For the error specifically highlighted at line 116, you can add:

      permissions:
        contents: read

  directly after the name: field in the native-test-ci-on-liberica job.

Files/regions to change:
You can add a root-level permissions: block, or a per-job block inside the affected job (native-test-ci-on-liberica). Prefer root-level unless exceptions are needed.

Methods/imports/definitions:
No dependencies or imports required; purely a YAML field addition.

---