feat: update release workflow to use a preparation step

Author: PKief

.github/workflows/release.yml

@@ -6,8 +6,46 @@ on:
   workflow_dispatch:
 
 jobs:
+  preparation:
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      actions: read
+
+    outputs:
+      status: ${{ steps.check.outputs.status }}
+
+    steps:
+      - name: 📥 Checkout
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          persist-credentials: false
+
+      - name: 📦 Install dependencies
+        run: npm ci
+
+      - name: 🔍 Fetch release version
+        run: |
+          release_version=$(npm view material-icon-theme version)
+          current_version=$(npm list material-icon-theme --depth=0 | grep 'material-icon-theme@' | cut -d '@' -f 2)
+          echo "release_version=$release_version" >> $GITHUB_ENV
+          echo "current_version=$current_version" >> $GITHUB_ENV
+
+      - name: ❌ Check release conditions
+        id: check
+        run: |
+          status="skip"
+          if [ "$release_version" != "$current_version" ] || [ "$GITHUB_EVENT_NAME" != "schedule" ]; then
+            status="release"
+          fi
+          echo "status=$status" >> $GITHUB_OUTPUT
+
   release:
     runs-on: ubuntu-latest
+    needs: preparation
+    if: needs.preparation.outputs.status == 'release'
 
     permissions:
       contents: write
@@ -25,9 +63,9 @@ jobs:
       - name: 📥 Checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
-          # Required for fetching tags and generating release notes
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
+          persist-credentials: false
 
       - name: 🔧 Configure Git
         run: |
@@ -38,23 +76,9 @@ jobs:
       - name: 📦 Install dependencies
         run: npm ci
 
-      - name: 🔍 Fetch release version
-        id: upstream
-        run: |
-          release_version=$(npm view material-icon-theme version)
-          current_version=$(npm list material-icon-theme --depth=0 | grep 'material-icon-theme@' | cut -d '@' -f 2)
-          echo "release_version=$release_version" >> $GITHUB_ENV
-          echo "current_version=$current_version" >> $GITHUB_ENV
-
-      - name: ❌ Cancel if no new release is required
-        if: ${{ env.release_version == env.current_version && github.event_name == 'schedule' }}
-        run: echo "No new release required. Exiting..." && exit 0
-
       - name: 🔄 Attempt update
-        if: ${{ env.release_version != env.current_version }}
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        # Update the material icon theme dependency to the latest major version (to avoid breaking changes)
         run: |
           npm run update
           npm install [email protected]