From a2d54a2b1c0af5303a985b3998c689eb0c8441a3 Mon Sep 17 00:00:00 2001
From: Mike Verbanic <verbanicm@users.noreply.github.com>
Date: Wed, 23 Oct 2024 10:20:18 -0400
Subject: [PATCH] fix: publish and release process (#438)

<!--
Thank you for proposing a pull request! Please note that SOME TESTS WILL
LIKELY FAIL due to how GitHub exposes secrets in Pull Requests from
forks.
Someone from the team will review your Pull Request and respond.

Please describe your change and any implementation details below.
-->
---
 .github/workflows/publish.yml | 1 +
 .github/workflows/release.yml | 8 ++++++--
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 2c51cae..64566b6 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,6 +1,7 @@
 name: 'Publish immutable action version'
 
 on:
+  workflow_dispatch:
   release:
     types:
       - 'published'
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 15eea04..9af9621 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -8,6 +8,10 @@ on:
 
 jobs:
   release:
-    if: "startsWith(github.event.head_commit.message, 'Release: v')"
+    if: |-
+      startsWith(github.event.head_commit.message, 'Release: v')
     name: 'Release'
-    uses: 'google-github-actions/.github/.github/workflows/release.yml@v0'
+    uses: 'google-github-actions/.github/.github/workflows/release.yml@v1' # ratchet:exclude
+    # secrets must be explicitly passed to reusable workflows https://docs.github.com/en/enterprise-cloud@latest/actions/using-workflows/reusing-workflows#using-inputs-and-secrets-in-a-reusable-workflow
+    secrets:
+      ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'