From b52ad498ca99cbe04bb868431e5d7f8e7d54625d Mon Sep 17 00:00:00 2001
From: Reza Rahman <rezrah@github.com>
Date: Tue, 21 Jun 2022 21:49:01 +0100
Subject: [PATCH 1/2] explicitly declare workflow permissions for previews

---
 .github/workflows/deploy_preview.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/deploy_preview.yml b/.github/workflows/deploy_preview.yml
index 055fed548f9..cc843900731 100644
--- a/.github/workflows/deploy_preview.yml
+++ b/.github/workflows/deploy_preview.yml
@@ -12,6 +12,10 @@ jobs:
     if: ${{ github.repository == 'primer/react' }}
     name: Preview
     uses: primer/.github/.github/workflows/deploy_preview.yml@main
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
     with:
       node_version: 16
       install: npm ci && cd docs && npm ci && cd ..

From a5dc964a045c13a18df711e79d58ecf2cea8e3cb Mon Sep 17 00:00:00 2001
From: Reza Rahman <rezrah@github.com>
Date: Tue, 21 Jun 2022 21:57:33 +0100
Subject: [PATCH 2/2] fix package-lock

---
 package-lock.json | 30 ++++++++++++++----------------
 1 file changed, 14 insertions(+), 16 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index a747516ceb2..f91f6534060 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@primer/react",
-  "version": "35.2.1",
+  "version": "35.2.2",
   "lockfileVersion": 2,
   "requires": true,
   "packages": {
     "": {
       "name": "@primer/react",
-      "version": "35.2.1",
+      "version": "35.2.2",
       "license": "MIT",
       "dependencies": {
         "@primer/behaviors": "1.1.1",
@@ -32074,12 +32074,6 @@
         "react-dom": ">= 16.3.0"
       }
     },
-    "node_modules/styled-components/node_modules/stylis": {
-      "version": "3.5.4",
-      "resolved": "https://registry.npmjs.org/stylis/-/stylis-3.5.4.tgz",
-      "integrity": "sha512-8/3pSmthWM7lsPBKv7NXkzn2Uc9W7NotcwGNpJaa3k7WMM1XDCA4MgT5k/8BIexd5ydZdboXtU90XH9Ec4Bv/Q==",
-      "dev": true
-    },
     "node_modules/styled-system": {
       "version": "5.1.5",
       "resolved": "https://registry.npmjs.org/styled-system/-/styled-system-5.1.5.tgz",
@@ -32100,6 +32094,12 @@
         "object-assign": "^4.1.1"
       }
     },
+    "node_modules/stylis": {
+      "version": "3.5.4",
+      "resolved": "https://registry.npmjs.org/stylis/-/stylis-3.5.4.tgz",
+      "integrity": "sha512-8/3pSmthWM7lsPBKv7NXkzn2Uc9W7NotcwGNpJaa3k7WMM1XDCA4MgT5k/8BIexd5ydZdboXtU90XH9Ec4Bv/Q==",
+      "dev": true
+    },
     "node_modules/stylis-rule-sheet": {
       "version": "0.0.10",
       "resolved": "https://registry.npmjs.org/stylis-rule-sheet/-/stylis-rule-sheet-0.0.10.tgz",
@@ -59244,14 +59244,6 @@
         "stylis": "^3.5.0",
         "stylis-rule-sheet": "^0.0.10",
         "supports-color": "^5.5.0"
-      },
-      "dependencies": {
-        "stylis": {
-          "version": "3.5.4",
-          "resolved": "https://registry.npmjs.org/stylis/-/stylis-3.5.4.tgz",
-          "integrity": "sha512-8/3pSmthWM7lsPBKv7NXkzn2Uc9W7NotcwGNpJaa3k7WMM1XDCA4MgT5k/8BIexd5ydZdboXtU90XH9Ec4Bv/Q==",
-          "dev": true
-        }
       }
     },
     "styled-system": {
@@ -59274,6 +59266,12 @@
         "object-assign": "^4.1.1"
       }
     },
+    "stylis": {
+      "version": "3.5.4",
+      "resolved": "https://registry.npmjs.org/stylis/-/stylis-3.5.4.tgz",
+      "integrity": "sha512-8/3pSmthWM7lsPBKv7NXkzn2Uc9W7NotcwGNpJaa3k7WMM1XDCA4MgT5k/8BIexd5ydZdboXtU90XH9Ec4Bv/Q==",
+      "dev": true
+    },
     "stylis-rule-sheet": {
       "version": "0.0.10",
       "resolved": "https://registry.npmjs.org/stylis-rule-sheet/-/stylis-rule-sheet-0.0.10.tgz",