* attempt to fix the permission issue for dependabot * move permissions to the job scope
* test * Update notice-yarn-changes.yml * upgrade prettier