[chhoumann]

Summary

Moves PodNotes' three release workflows from obsidian-plugin-workflows v4 (ebcf84b8) to v4.1.0 (149e3780). That release pins every action to a commit, drops three third-party actions, and makes release tags immutable. The pnpm-workspace bug it fixes does not affect PodNotes, which uses npm.

• release-prepare.yml, release-trigger.yml and release.yml now pin 149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0. The v4.1.0 tag is annotated and resolves to that commit.
• The workflow_call inputs and secrets of release-prepare, release-validate and release are identical between the two versions. One release job requests contents: read one fewer time, so the permissions PodNotes grants still cover everything.
• A second commit adds a dryRun boolean to Prepare release's workflow_dispatch, defaulting to false. It forwards to the reusable workflow's dry-run, which skips the open-pr job, so a manual run can plan without opening, refreshing or closing the release PR. Before this, the only dry-run was a commented-out line. The workflow_run path passes false, as before.
• AGENTS.md names the new pin and the dryRun input.

Verification

• npm run format:check passes.
• After merge, Prepare release is dispatched on master with dryRun: true. The result is recorded in a comment below.

Release impact

None. Release PR #509 is untouched and no release is cut.

---

Note

Low Risk
CI/release workflow pin and an optional manual dry-run flag only; no application or release-artifact logic changes.

Overview
Bumps all three release caller workflows (release-prepare, release-trigger, release) from obsidian-plugin-workflows v4 to v4.1.0 (149e3780), picking up upstream hardening (pinned actions, fewer third-party deps, immutable release tags).

Prepare release gains a workflow_dispatch dryRun input (default false) wired to the reusable workflow’s dry-run, so manual runs can compute version and notes without opening or refreshing the release PR; the automatic post-CI path still passes false. AGENTS.md documents the new pin and dryRun.

^{Reviewed by Cursor Bugbot for commit fadb11b. Bugbot is set up for automated code reviews on this repo. Configure here.}

Note

Pin release workflows to obsidian-plugin-workflows v4.1.0 and add dry-run input

• Updates the reusable workflow references in release-prepare.yml, release-trigger.yml, and release.yml from v4 to v4.1.0.
• Adds an optional dry-run input to the manual Prepare release dispatch. It defaults to false, and the prepare job forwards it to the reusable workflow when true. This plans the version and notes without opening a release PR.
• Updates AGENTS.md to document the v4.1.0 pin and the new dryRun option.

^{Macroscope summarized fadb11b.}

[cloudflare-workers-and-pages]

Deploying podnotes with    Cloudflare Pages

Latest commit:	fadb11b
Status:	✅  Deploy successful!
Preview URL:	https://04affe31.podnotes.pages.dev
Branch Preview URL:	https://ci-plugin-workflows-v4-1-0.podnotes.pages.dev

View logs

[chhoumann]

Prepare release dry run on master at d73c80d: https://github.com/chhoumann/PodNotes/actions/runs/40095908647 succeeded. Plan release passed with the v4.1.0 toolkit (149e3780), and Open release PR was skipped, so #509 was not touched.