update the actions

Author: lahirumaramba

.github/workflows/ci.yml

@@ -1,10 +1,7 @@
 name: Continuous Integration
-on:
-  pull_request:
-  push:
-    branches: [dev]
-
+on: pull_request
 jobs:
+
   module:
     name: Module build
     runs-on: ubuntu-latest

.github/workflows/release.yml

@@ -18,28 +18,21 @@ on:
   # Only run the workflow when a PR is updated or when a developer explicitly requests
   # a build by sending a 'firebase_build' event.
   pull_request:
-    types: [opened, synchronize]
+    types: [opened, synchronize, closed]
 
   repository_dispatch:
     types:
       - firebase_build
 
-  # Run the release candidate action when code is pushed to dev and only if firebase.go is changed
-  push:
-    branches:
-      - dev
-    paths:
-      - 'firebase.go'
-
 jobs:
   stage_release:
     # To publish a release, merge the release PR with the label 'release:publish'.
     # To stage a release without publishing it, send a 'firebase_build' event or apply
     # the 'release:stage' label to a PR.
     if: github.event.action == 'firebase_build' ||
       contains(github.event.pull_request.labels.*.name, 'release:stage') ||
-      (github.event_name == 'push' && github.ref == 'refs/heads/dev' &&
-        startsWith(github.event.head_commit.message, '[chore] Release '))
+      (github.event.pull_request.merged &&
+        contains(github.event.pull_request.labels.*.name, 'release:publish'))
 
     runs-on: ubuntu-latest
 
@@ -68,20 +61,25 @@ jobs:
   publish_release:
     needs: stage_release
 
-    # Run this ONLY when code is pushed/merged to dev
-    # This automatically satisfies the 'Release' environment protection
-    if: github.event_name == 'push' && github.ref == 'refs/heads/dev' &&
-      startsWith(github.event.head_commit.message, '[chore] Release ')
+    # Check whether the release should be published. We publish only when the trigger PR is
+    #   1. merged
+    #   2. to the dev branch
+    #   3. with the label 'release:publish', and
+    #   4. the title prefix '[chore] Release '.
+    if: github.event.pull_request.merged &&
+      github.ref == 'refs/heads/dev' &&
+      contains(github.event.pull_request.labels.*.name, 'release:publish') &&
+      startsWith(github.event.pull_request.title, '[chore] Release ')
 
     runs-on: ubuntu-latest
-    environment: Release
     permissions:
       pull-requests: write
 
     steps:
     - name: Checkout source for publish
       uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       with:
+        ref: dev
         persist-credentials: false
         fetch-depth: 0