From 94bd2e52b6c2be4f869d3b19484af77c00aa7e43 Mon Sep 17 00:00:00 2001
From: Michael Panchenko <michael.panchenko@oraios-ai.de>
Date: Tue, 14 Apr 2026 18:30:43 +0200
Subject: [PATCH] CI, minor: remove junie workflow, use persist-credentials:
 false on checkout action

---
 .github/workflows/codespell.yml |  2 ++
 .github/workflows/docker.yml    |  2 ++
 .github/workflows/docs.yaml     |  2 ++
 .github/workflows/junie.yml     | 21 ---------------------
 .github/workflows/publish.yml   |  6 +++++-
 .github/workflows/pytest.yml    |  4 +++-
 6 files changed, 14 insertions(+), 23 deletions(-)
 delete mode 100644 .github/workflows/junie.yml

diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml
index 6df6169c..32301680 100644
--- a/.github/workflows/codespell.yml
+++ b/.github/workflows/codespell.yml
@@ -20,6 +20,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Annotate locations with typos
         uses: codespell-project/codespell-problem-matcher@v1
       - name: Codespell
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 724837aa..5513b734 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -20,6 +20,8 @@ jobs:
     steps:
     - name: Checkout repository
       uses: actions/checkout@v4
+      with:
+        persist-credentials: false
 
     - name: Set up Docker Buildx
       uses: docker/setup-buildx-action@v3
diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml
index b2487a03..f69960c4 100644
--- a/.github/workflows/docs.yaml
+++ b/.github/workflows/docs.yaml
@@ -20,6 +20,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Set up Python
         uses: actions/setup-python@v5
diff --git a/.github/workflows/junie.yml b/.github/workflows/junie.yml
deleted file mode 100644
index 9860e79e..00000000
--- a/.github/workflows/junie.yml
+++ /dev/null
@@ -1,21 +0,0 @@
-name: Junie
-run-name: Junie run ${{ inputs.run_id }}
-
-permissions:
-  contents: write
-
-on:
-  workflow_dispatch:
-    inputs:
-      run_id:
-        description: "id of workflow process"
-        required: true
-      workflow_params:
-        description: "stringified params"
-        required: true
-
-jobs:
-  call-workflow-passing-data:
-    uses: jetbrains-junie/junie-workflows/.github/workflows/ej-issue.yml@main
-    with:
-      workflow_params: ${{ inputs.workflow_params }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 04127f48..f4280d1f 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -15,7 +15,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Create Release
         id: create_release
         uses: actions/create-release@v1
@@ -39,6 +41,8 @@ jobs:
     steps:
       - name: Checkout code
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
       - name: Install the latest version of uv
         uses: astral-sh/setup-uv@v6
diff --git a/.github/workflows/pytest.yml b/.github/workflows/pytest.yml
index f1d969e9..768575ac 100644
--- a/.github/workflows/pytest.yml
+++ b/.github/workflows/pytest.yml
@@ -20,7 +20,9 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
         python-version: ["3.11"]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - name: Free disk space
         if: runner.os == 'Linux'
         run: |