Publish workflow fixes. (#636)

.github/workflows/publish.yml

@@ -37,7 +37,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: jaywcjlove/create-tag-action@v2
+      - uses: jaywcjlove/create-tag-action@v2.2.0
         with:
           version: ${{ needs.check-version.outputs.new_version }}
           release: true
@@ -48,6 +48,9 @@ jobs:
     runs-on: ubuntu-latest
     needs: check-version
     permissions:
+      # not sure why "contents: read" is needed, but it is specified explicitly in the guide here:
+      # https://docs.github.com/en/actions/use-cases-and-examples/publishing-packages/publishing-java-packages-with-gradle#publishing-packages-to-github-packages
+      contents: read
       packages: write
     steps:
       - uses: actions/checkout@v4