From f75ea37bb2a4729242b435824a8ed6204614331b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Dani=C3=ABlle=20Huisman?= <danielle@huisman.me>
Date: Sat, 22 Aug 2026 13:22:00 +0200
Subject: [PATCH] ci: update workflows

---
 .github/workflows/ci.yml      | 2 +-
 .github/workflows/publish.yml | 6 +++++-
 .github/workflows/release.yml | 8 +++++++-
 .github/workflows/website.yml | 2 +-
 4 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index ec2ce85..f0beca5 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,4 +12,4 @@ permissions:
 jobs:
     rust:
         name: Rust
-        uses: RustForWeb/.github/.github/workflows/rust.yml@d6e6ead9b4da3d70245d3ee4e06fe339244bb200
+        uses: RustForWeb/.github/.github/workflows/rust.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index f59320b..3c9bd34 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -7,8 +7,12 @@ on:
 permissions:
     contents: read
     id-token: write
+    packages: write
 
 jobs:
     publish:
         name: Publish
-        uses: RustForWeb/.github/.github/workflows/publish.yml@d6e6ead9b4da3d70245d3ee4e06fe339244bb200
+        uses: RustForWeb/.github/.github/workflows/publish.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
+        with:
+            enable-rust: true
+            enable-typescript: false
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 056f15d..f4734ab 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -18,6 +18,12 @@ permissions:
 jobs:
     release:
         name: Release
-        uses: RustForWeb/.github/.github/workflows/release.yml@d6e6ead9b4da3d70245d3ee4e06fe339244bb200
+        uses: RustForWeb/.github/.github/workflows/release.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
         with:
             bump: ${{ inputs.bump }}
+            bump-rust: true
+            bump-typescript: false
+            extract-version: rust
+        secrets:
+            app-client-id: ${{ secrets.APP_ID }}
+            app-private-key: ${{ secrets.APP_PRIVATE_KEY }}
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 22516fa..efe8f32 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -18,7 +18,7 @@ concurrency:
 jobs:
     book:
         name: Book
-        uses: RustForWeb/.github/.github/workflows/book.yml@d6e6ead9b4da3d70245d3ee4e06fe339244bb200
+        uses: RustForWeb/.github/.github/workflows/book.yml@dc2442c27ef9f920a1a889ec94e615b419b491b2 # v1.0.1
         with:
             combine: false
             clean-options: '-p fortifier -p regex'