fix: remove rust binaries build job and fix python checkout permissions

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ytallo

.github/workflows/release.yml

@@ -33,7 +33,7 @@ jobs:
               - type: "section"
                 text:
                   type: "mrkdwn"
-                  text: "*Release ${{ github.ref_name }}*\n\n:hourglass: Running tests...\n:white_square: Creating release...\n:white_square: Publishing SDKs...\n:white_square: Building binaries (0/9)"
+                  text: "*Release ${{ github.ref_name }}*\n\n:hourglass: Running tests...\n:white_square: Creating release...\n:white_square: Publishing SDKs..."
               - type: "context"
                 elements:
                   - type: "mrkdwn"
@@ -204,7 +204,7 @@ jobs:
               - type: "section"
                 text:
                   type: "mrkdwn"
-                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:hourglass: Publishing SDKs...\n:white_square: Building binaries (0/9)"
+                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:hourglass: Publishing SDKs..."
               - type: "context"
                 elements:
                   - type: "mrkdwn"
@@ -249,6 +249,7 @@ jobs:
     needs: [create-release]
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       id-token: write
 
     steps:
@@ -296,71 +297,9 @@ jobs:
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
 
-  build-rust-binaries:
-    name: Build Rust Binaries
-    needs: [create-release]
-    runs-on: ${{ matrix.os }}
-    permissions:
-      contents: write
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - target: x86_64-apple-darwin
-            os: macos-latest
-          - target: aarch64-apple-darwin
-            os: macos-latest
-          - target: x86_64-pc-windows-msvc
-            os: windows-latest
-          - target: i686-pc-windows-msvc
-            os: windows-latest
-          - target: aarch64-pc-windows-msvc
-            os: windows-latest
-          - target: x86_64-unknown-linux-gnu
-            os: ubuntu-latest
-          - target: x86_64-unknown-linux-musl
-            os: ubuntu-latest
-          - target: aarch64-unknown-linux-gnu
-            os: ubuntu-latest
-          - target: armv7-unknown-linux-gnueabihf
-            os: ubuntu-latest
-
-    steps:
-      - name: Generate token
-        id: generate_token
-        uses: actions/create-github-app-token@v2
-        with:
-          app-id: ${{ secrets.III_CI_APP_ID }}
-          private-key: ${{ secrets.III_CI_APP_PRIVATE_KEY }}
-          permission-contents: write
-
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          token: ${{ steps.generate_token.outputs.token }}
-
-      - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@stable
-
-      - name: Cache cargo registry & build
-        uses: Swatinem/rust-cache@v2
-        with:
-          key: ${{ matrix.target }}
-          workspaces: packages/rust/iii
-
-      - name: Build and upload binary
-        uses: taiki-e/upload-rust-binary-action@v1
-        with:
-          bin: iii
-          target: ${{ matrix.target }}
-          tar: unix
-          zip: windows
-          token: ${{ steps.generate_token.outputs.token }}
-          manifest-path: packages/rust/iii/Cargo.toml
-
   notify-complete:
     name: Update Release Status
-    needs: [notify-start, publish-node, publish-python, publish-rust, build-rust-binaries]
+    needs: [notify-start, publish-node, publish-python, publish-rust]
     runs-on: ubuntu-latest
     if: always()
 
@@ -371,22 +310,18 @@ jobs:
           NODE_RESULT='${{ needs.publish-node.result }}'
           PYTHON_RESULT='${{ needs.publish-python.result }}'
           RUST_PUBLISH_RESULT='${{ needs.publish-rust.result }}'
-          RUST_BINARIES_RESULT='${{ needs.build-rust-binaries.result }}'
 
           NODE_ICON="white_check_mark"
           PYTHON_ICON="white_check_mark"
           RUST_PUBLISH_ICON="white_check_mark"
-          RUST_BINARIES_ICON="white_check_mark"
 
           if [ "$NODE_RESULT" != "success" ]; then NODE_ICON="x"; fi
           if [ "$PYTHON_RESULT" != "success" ]; then PYTHON_ICON="x"; fi
           if [ "$RUST_PUBLISH_RESULT" != "success" ]; then RUST_PUBLISH_ICON="x"; fi
-          if [ "$RUST_BINARIES_RESULT" != "success" ]; then RUST_BINARIES_ICON="x"; fi
 
           echo "node_icon=$NODE_ICON" >> $GITHUB_OUTPUT
           echo "python_icon=$PYTHON_ICON" >> $GITHUB_OUTPUT
           echo "rust_publish_icon=$RUST_PUBLISH_ICON" >> $GITHUB_OUTPUT
-          echo "rust_binaries_icon=$RUST_BINARIES_ICON" >> $GITHUB_OUTPUT
 
       - name: Update Slack - Release Complete
         uses: slackapi/slack-github-action@v2.0.0
@@ -401,7 +336,7 @@ jobs:
               - type: "section"
                 text:
                   type: "mrkdwn"
-                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:${{ steps.results.outputs.node_icon }}: Node SDK published to npm\n:${{ steps.results.outputs.python_icon }}: Python SDK published to PyPI\n:${{ steps.results.outputs.rust_publish_icon }}: Rust SDK published to crates.io\n:${{ steps.results.outputs.rust_binaries_icon }}: Rust binaries built (9 platforms)"
+                  text: "*Release ${{ github.ref_name }}*\n\n:white_check_mark: Tests passed (Node, Python, Rust)\n:white_check_mark: Release created\n:${{ steps.results.outputs.node_icon }}: Node SDK published to npm\n:${{ steps.results.outputs.python_icon }}: Python SDK published to PyPI\n:${{ steps.results.outputs.rust_publish_icon }}: Rust SDK published to crates.io"
               - type: "context"
                 elements:
                   - type: "mrkdwn"