From e9a92b239affc117e18fcd87de2b23bda3c3f91d Mon Sep 17 00:00:00 2001
From: Christian Bager Bach Houmann <christian@bagerbach.com>
Date: Sat, 24 Oct 2026 16:20:24 +0200
Subject: [PATCH] ci: move the release toolkit to v5.0.0 and the App client ID

Pin every obsidian-plugin-workflows reusable workflow to v5.0.0. v5 replaces
the prepare workflow's app-id input with client-id, so the prepare stub now
passes vars.RELEASE_APP_CLIENT_ID. A dryRun dispatch now also mints a
read-only App token to check the credentials.
---
 .github/workflows/release-prepare.yml | 7 ++++---
 .github/workflows/release-trigger.yml | 2 +-
 .github/workflows/release.yml         | 2 +-
 3 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/release-prepare.yml b/.github/workflows/release-prepare.yml
index a235de139..513fe5d16 100644
--- a/.github/workflows/release-prepare.yml
+++ b/.github/workflows/release-prepare.yml
@@ -6,7 +6,8 @@
 # default-branch head and opens/refreshes the standing release PR.
 #
 # Escape hatch: workflow_dispatch lets you plan manually without waiting for a
-# CI completion. Set dryRun to plan without opening or refreshing the release PR.
+# CI completion. Set dryRun to plan and check the App credentials without opening
+# or refreshing the release PR.
 
 name: Prepare release
 
@@ -45,7 +46,7 @@ jobs:
         permissions:
             contents: write
             pull-requests: write
-        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-prepare.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-prepare.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
         with:
             plugin-name: quickadd
             package-manager: pnpm
@@ -55,7 +56,7 @@ jobs:
             node-version: "24"
             target-sha: ${{ github.event.workflow_run.head_sha || inputs.targetSha }}
             release-bot-app-slug: quickadd-release-bot
-            app-id: ${{ vars.RELEASE_APP_ID }}
+            client-id: ${{ vars.RELEASE_APP_CLIENT_ID }}
             dry-run: ${{ inputs.dryRun == true }}
         secrets:
             release-app-private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }}
diff --git a/.github/workflows/release-trigger.yml b/.github/workflows/release-trigger.yml
index 2ed5bd730..c2d3e2446 100644
--- a/.github/workflows/release-trigger.yml
+++ b/.github/workflows/release-trigger.yml
@@ -39,7 +39,7 @@ jobs:
             actions: write
             contents: write
             pull-requests: read
-        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-validate.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release-validate.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
         with:
             pr-number: ${{ github.event.pull_request.number || inputs.pr-number }}
             plugin-name: quickadd
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2aaf54cf8..7912ec576 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,7 +29,7 @@ jobs:
             contents: write
             id-token: write
             pull-requests: read
-        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release.yml@149e37801b35c120660a1fd5e78a5471fda55726 # v4.1.0
+        uses: chhoumann/obsidian-plugin-workflows/.github/workflows/release.yml@d6b3b8c2cf460059238043b32a08dcaa3be4828f # v5.0.0
         with:
             release-pr: ${{ inputs.releasePr }}
             plugin-name: quickadd