Put the IS_DISPATCH variable inline

Author: jcpitre

.github/workflows/db-update.yml

@@ -81,11 +81,6 @@ on:
         default: false
         type: boolean
 
-# Add workflow-level vars (these are available in job `if` expressions)
-vars:
-  # True when this run was triggered by a repository_dispatch or a manual workflow_dispatch
-  IS_DISPATCH: ${{ github.event_name == 'repository_dispatch' || github.event_name == 'workflow_dispatch' }}
-
 env:
   python_version: '3.11'
   liquibase_version: '4.33.0'
@@ -94,7 +89,7 @@ jobs:
   resolve-api-meta:
     name: 'Resolve API commit/version'
     runs-on: ubuntu-latest
-    if: ${{ vars.IS_DISPATCH == 'true' && inputs.API_BASE_URL != '' && secrets.API_TEST_REFRESH_TOKEN != '' }}
+    if: ${{ contains('repository_dispatch,workflow_dispatch', github.event_name) && inputs.API_BASE_URL != '' }}
     outputs:
       COMMIT_SHA: ${{ steps.resolve.outputs.COMMIT_SHA }}
       API_VERSION: ${{ steps.resolve.outputs.API_VERSION }}
@@ -103,6 +98,7 @@ jobs:
         uses: actions/checkout@v4
       - name: Resolve API commit/version
         id: resolve
+        if: ${{ secrets.API_TEST_REFRESH_TOKEN != '' }}
         uses: ./.github/actions/resolve-api-meta
         with:
           api_base_url: ${{ inputs.API_BASE_URL }}
@@ -186,7 +182,7 @@ jobs:
     permissions: write-all
     runs-on: ubuntu-latest
     needs: [resolve-api-meta, db-schema-update]
-    if: ${{ always() && vars.IS_DISPATCH == 'true' }}
+    if: ${{ always() && contains('repository_dispatch,workflow_dispatch', github.event_name) }}
     steps:
     - name: Checkout code at API commit
       if: ${{ needs.resolve-api-meta.result == 'success' && needs.resolve-api-meta.outputs.COMMIT_SHA != '' }}
@@ -302,7 +298,7 @@ jobs:
 
   update-gcp-secret:
     name: Update GCP Secrets
-    if: ${{ vars.IS_DISPATCH == 'true' && !inputs.DRY_RUN }}
+    if: ${{ contains('repository_dispatch,workflow_dispatch', github.event_name) && !inputs.DRY_RUN }}
     runs-on: ubuntu-latest
     steps:
       - name: Authenticate to Google Cloud
@@ -340,3 +336,4 @@ jobs:
             echo "Secret $SECRET_NAME does not exist in project $PROJECT_ID, creating..."
             echo -n "$SECRET_VALUE" | gcloud secrets create $SECRET_NAME --data-file=- --replication-policy="automatic" --project=$PROJECT_ID
           fi
+