ci(monorepo): Update the branch names specified in the workflows

Author: sullivanpj

.github/workflows/codeql.yml

@@ -17,8 +17,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
     paths-ignore:
       - "**/*.md"
       - ".all-contributorsrc"

.github/workflows/gitguardian.yml

@@ -4,8 +4,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
   pull_request:
     branches:
       - "**"

.github/workflows/greetings.yml

@@ -5,8 +5,8 @@ on:
   issues:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
 
 permissions: {}
 

.github/workflows/release.yml

@@ -9,8 +9,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
 
 env:
   CI: true
@@ -19,7 +19,6 @@ env:
   GITHUB_ACTOR: ${{ github.actor }}
   GITHUB_TOKEN: ${{ github.token }}
   NPM_TOKEN: ${{ secrets.STORM_BOT_NPM_TOKEN }}
-  CARGO_REGISTRY_TOKEN: ${{ secrets.STORM_BOT_CARGO_TOKEN }}
 
 jobs:
   start:
@@ -30,8 +29,8 @@ jobs:
       id-token: write
     if:
       github.repository == 'storm-software/monorepo-template' && (github.ref ==
-      'refs/heads/main' || github.ref == 'refs/heads/next' || github.ref ==
-      'refs/heads/experimental')
+      'refs/heads/main' || github.ref == 'refs/heads/alpha' || github.ref ==
+      'refs/heads/beta')
     steps:
       - name: Send notification - Deployment started
         uses: storm-software/action-notify@main
@@ -54,7 +53,7 @@ jobs:
           discord-webhook: ${{ secrets.STORM_BOT_DISCORD_WEBHOOK}}
 
   process:
-    name: "Continuous Integration"
+    name: "Release"
     if:
       always() && !cancelled() && !contains(needs.*.result, 'failure') &&
       github.event.pull_request.draft == false
@@ -65,6 +64,26 @@ jobs:
     needs:
       - start
     steps:
+      - name: Checkout [Pull Request]
+        uses: actions/checkout@v4
+        if: ${{ github.event_name == 'pull_request' }}
+        with:
+          # By default, PRs will be checked-out based on the Merge Commit, but we want the actual branch HEAD.
+          ref: ${{ github.event.pull_request.head.sha }}
+          # We need to fetch all branches and commits so that Nx affected has a base to compare against.
+          fetch-depth: 0
+          token: ${{ secrets.STORM_BOT_GITHUB_TOKEN }}
+          persist-credentials: false
+
+      - name: Checkout `main` branch
+        uses: actions/checkout@v4
+        if: ${{ github.event_name != 'pull_request' }}
+        with:
+          # We need to fetch all branches and commits so that Nx affected has a base to compare against.
+          fetch-depth: 0
+          token: ${{ secrets.STORM_BOT_GITHUB_TOKEN }}
+          persist-credentials: false
+
       - name: Setup workspace
         uses: storm-software/action-devenv-setup@main
         with:
@@ -79,27 +98,23 @@ jobs:
         uses: nrwl/nx-set-shas@v4
         with:
           main-branch-name: main
-          workflow-id: ci.yml
+          workflow-id: release.yml
           set-environment-variables-for-job: true
           error-on-no-successful-workflow: true
 
       - name: Release repository updates
         run:
-          devenv shell release ${{ steps.setSHAs.outputs.base }} ${{
-          steps.setSHAs.outputs.head }}
+          devenv shell release ${{ steps.setSHAs.outputs.base }} ${{ steps.setSHAs.outputs.head }}
         env:
           NX_BASE: ${{ steps.setSHAs.outputs.base }}
           NX_HEAD: ${{ steps.setSHAs.outputs.head }}
           GITHUB_ACTOR: ${{ github.actor }}
           GITHUB_TOKEN: ${{ github.token }}
-          GH_TOKEN: ${{ github.token }}
           STORM_BOT_GITHUB_TOKEN: ${{ secrets.STORM_BOT_GITHUB_TOKEN }}
-          NPM_TOKEN: ${{ secrets.STORM_BOT_NPM_TOKEN }}
-          CARGO_REGISTRY_TOKEN: ${{ secrets.STORM_BOT_CARGO_TOKEN }}
-          CLOUDFLARE_API_TOKEN: ${{ secrets.STORM_BOT_CLOUDFLARE_TOKEN }}
-          STORM_BOT: stormie-bot
           STORM_WORKSPACE_ROOT: ${{ github.workspace }}
           STORM_REPOSITORY: ${{ github.repositoryUrl }}
+          NPM_TOKEN: ${{ secrets.STORM_BOT_NPM_TOKEN }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.STORM_BOT_CLOUDFLARE_TOKEN }}
           TAG: ${{ inputs.tag }}
 
   success:

.github/workflows/security.yml

@@ -5,8 +5,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
     paths-ignore:
       - "**/*.md"
       - ".all-contributorsrc"

.github/workflows/sync-labels.yml

@@ -5,8 +5,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
     paths:
       - .github/labels.yml
 

.github/workflows/zizmor.yml

@@ -4,8 +4,8 @@ on:
   push:
     branches:
       - main
-      - next
-      - experimental
+      - alpha
+      - beta
   pull_request:
     branches:
       - "**"