Bump the github group with 1 update (#427)

* Bump the github group with 1 update

Bumps the github group with 1 update: [nais/deploy](https://github.com/nais/deploy).

- [Release notes](https://github.com/nais/deploy/releases)
- [Commits](nais/deploy@v1...v2)

---
updated-dependencies:
- dependency-name: nais/deploy
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github
...

Signed-off-by: dependabot[bot] <[email protected]>

* Fikser deploy v2

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Ramin Esfandiari <[email protected]>

Author: dependabot[bot]

.github/workflows/apply-alerts.yml

@@ -16,11 +16,12 @@ jobs:
     name: Deploy to dev-gcp
     if: startsWith(github.ref, 'refs/heads/dev-') || startsWith(github.ref, 'refs/heads/master') # Deploy if branch is either master or dev-*
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - uses: nais/deploy/actions/deploy@v1
+      - uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: dev-gcp
           RESOURCE: nais/alerterator-dev.yml
           VARS: nais/dev-gcp.json
@@ -29,11 +30,12 @@ jobs:
     name: Deploy to prod-gcp
     if: startsWith(github.ref, 'refs/heads/master')  # If the branch is master
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - uses: actions/checkout@v4
-      - uses: nais/deploy/actions/deploy@v1
+      - uses: nais/deploy/actions/deploy@v2
         env:
-          APIKEY: ${{ secrets.NAIS_DEPLOY_APIKEY }}
           CLUSTER: prod-gcp
           RESOURCE: nais/alerterator-prod.yml
           VARS: nais/prod-gcp.json

.github/workflows/build-and-deploy.yml

@@ -66,6 +66,7 @@ jobs:
     uses: navikt/sif-gha-workflows/.github/workflows/gradle-deploy.yml@main
     permissions:
       contents: read
+      id-token: write
     secrets: inherit
     with:
       image: ${{ needs.build.outputs.image }}