wip

Author: xesrevinu

.github/actions/setup/action.yaml

@@ -1,9 +1,5 @@
 name: Setup
 description: Perform standard setup and install dependencies using pnpm.
-inputs:
-  github_token:
-    description: The GitHub token to use for the action.
-    required: true
 runs:
   using: composite
 

.github/workflows/release.yaml

@@ -40,14 +40,12 @@ jobs:
       affected-native-list: ${{ steps.detect-affected.outputs.affected-native-list }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: 🚧 Setup
         uses: ./.github/actions/setup
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 🔍 Detect Affected
         id: detect-affected
@@ -109,7 +107,7 @@ jobs:
           zip -r dist-web.zip dist
 
       - name: ⬆️ Upload Web Apps Artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         continue-on-error: true
         with:
           if-no-files-found: ignore
@@ -125,17 +123,15 @@ jobs:
     if: ${{ needs.check-build.outputs.affected-web == 'true' && (github.ref_name == 'main' || github.ref_name == 'test' || startsWith(github.ref_name, 'feat-') || github.ref_name == 'staging') && github.event_name == 'push' }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: 🚧 Setup
         uses: ./.github/actions/setup
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: ⬇️ Download Web Artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         continue-on-error: true
         with:
           name: dist-web
@@ -180,14 +176,12 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: 🚧 Setup
         uses: ./.github/actions/setup
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: 🏗️ Build Native Libraries
         run: pnpm nx affected --target=build --parallel=1
@@ -214,7 +208,7 @@ jobs:
           fi
 
       - name: ⬆️ Upload Native Apps Artifacts (${{ matrix.platform }})
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         continue-on-error: true
         with:
           if-no-files-found: ignore
@@ -230,24 +224,24 @@ jobs:
     if: ${{ github.ref_name == 'main' && github.event_name == 'push' }}
     steps:
       - name: ⬇️ Checkout repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
       - name: ⬇️ Download Native Artifacts (Linux)
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         continue-on-error: true
         with:
           name: dist-native-linux
 
       - name: ⬇️ Download Native Artifacts (Windows)
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         continue-on-error: true
         with:
           name: dist-native-windows
 
       - name: ⬇️ Download Native Artifacts (macOS)
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         continue-on-error: true
         with:
           name: dist-native-macos

.github/workflows/template-sync.yml

@@ -3,9 +3,13 @@ name: 🔄 Template Sync
 on:
   schedule:
     - cron: '0 0 1 * *' # 🕛 Run monthly on the 1st at 00:00 UTC
-  # manual trigger
   workflow_dispatch:
 
+permissions:
+  actions: write
+  contents: read
+  pull-requests: read
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -14,13 +18,7 @@ jobs:
   repo-sync:
     name: 🔁 Sync Repository
     runs-on: ubuntu-latest
-    # https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
-    permissions:
-      actions: write
-      contents: write
-      pull-requests: write
     steps:
-      # To use this repository's private action, you must check out the repository
       - name: 📥 Checkout Repository
         uses: actions/checkout@v5
         with: