…uctions

Add brief instructions on creating a release

…obs-on-push

Reduce the number of PR checks that are run on `push`

If we're running on push, then we can reintroduce the logic that skips
running with `tools: latest` when it would be the same as running with
`tools: null`.

…t-eslint/parser-4.29.1

Bump @typescript-eslint/parser from 4.29.0 to 4.29.1

…rser-4.29.1

…ugin-github-4.2.0

Bump eslint-plugin-github from 4.1.5 to 4.2.0

Bumps [eslint-plugin-github](https://github.com/github/eslint-plugin-github) from 4.1.5 to 4.2.0.
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](https://github.com/github/eslint-plugin-github/compare/v4.1.5...v4.2.0)

---
updated-dependencies:
- dependency-name: eslint-plugin-github
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

…ugin-import-2.24.0

Bump eslint-plugin-import from 2.23.4 to 2.24.0

…-2.24.0

…o-be-required

Always run the `latest` tools PR checks so we can make them required

Rather than via properties on default exports — see
https://github.com/import-js/eslint-plugin-import/blob/master/docs/rules/no-named-as-default-member.md

…-2.24.0

…cript-2.0.0

Bump @ava/typescript from 1.1.1 to 2.0.0

This is required with `@ava/typescript` v2

 Updates the permissions block to be minimal

Mergeback v1.0.11 refs/heads/v1 into main

Merge main into v1

Changelog: Add note for CodeQL 2.5.9