Merge branch 'main' into feat/remove-upgrade-automation

Author: peterpeterparker

src/frontend/src/lib/i18n/en.json

@@ -1104,7 +1104,7 @@
 		"create_connect_description": "Enter the URL of the GitHub repository you want to authorize for automated deployments.",
 		"create_connect_input_placeholder": "https://github.com/owner/repo",
 		"create_connect_review_title": "Review configuration",
-		"create_connect_review_description": "查看您的仓库信息。您可以稍后在设置中调整访问权限和其他选项。",
+		"create_connect_review_description": "Review the information of your repo. You can refine access and other options later in the settings.",
 		"repository": "Repository",
 		"provider": "Provider",
 		"open_repo": "Open repository on GitHub",

src/frontend/src/lib/templates/actions-deploy-npm.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4

src/frontend/src/lib/templates/actions-deploy-pnpm.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4

src/frontend/src/lib/templates/actions-deploy-yarn.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4

src/frontend/src/lib/templates/actions-publish-npm.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4

src/frontend/src/lib/templates/actions-publish-pnpm.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4

src/frontend/src/lib/templates/actions-publish-yarn.yml

@@ -8,6 +8,8 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out the repo
         uses: actions/checkout@v4