Merge branch 'master' into next-major

Author: Hanssen0

.github/workflows/_changesets-release.yaml

@@ -79,6 +79,7 @@ jobs:
     if: needs.select-mode.outputs.mode == 'publish'
     needs: select-mode
     uses: ./.github/workflows/_publish-packages.yaml
+    secrets: inherit
 
   finalize:
     name: Finalize release

.github/workflows/check.yaml

@@ -2,13 +2,13 @@ name: Build, lint and test
 
 on: [pull_request, push]
 
-cache-mode: ${{ github.event_name == 'pull_request' && 'read' || 'write' }}
-
 jobs:
   build:
+    if: github.event_name == 'pull_request'
+    cache-mode: read
     runs-on: ubuntu-latest
 
-    steps:
+    steps: &check-steps
       - uses: actions/checkout@v7
       - uses: actions/setup-node@v7
         with:
@@ -25,3 +25,9 @@ jobs:
         run: pnpm lint
       - name: Test
         run: pnpm test:ci
+
+  build-push:
+    if: github.event_name == 'push'
+    cache-mode: write
+    runs-on: ubuntu-latest
+    steps: *check-steps

.github/workflows/publish-canary.yaml

@@ -42,6 +42,7 @@ jobs:
     needs: resolve
     cache-mode: read
     uses: ./.github/workflows/_publish-packages.yaml
+    secrets: inherit
     with:
       canary: true
       ref: ${{ needs.resolve.outputs.ref }}

.github/workflows/publish-next-major.yaml

@@ -14,3 +14,4 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   release:
     uses: ./.github/workflows/_changesets-release.yaml
+    secrets: inherit

.github/workflows/publish.yaml

@@ -15,3 +15,4 @@ concurrency: ${{ github.workflow }}-${{ github.ref }}
 jobs:
   release:
     uses: ./.github/workflows/_changesets-release.yaml
+    secrets: inherit