Matiss Janis Aboltins 1f101077d6 [AI] zizmor: add environment references to secret-consuming workflows (#7856) ...

* [AI] Reference dedicated environments for workflows using secrets

Assigns each secret-consuming workflow to a dedicated GitHub
environment so zizmor's secrets-without-environment audit passes:

- ai-generated-release-notes.yml -> ai-release-notes
- docs-spelling.yml (update job) -> docs-spelling
- i18n-string-extract-master.yml -> i18n
- release-notes.yml -> pr-automation
- vrt-update-apply.yml -> pr-automation

* [AI] Rename release notes file to match PR #7856

---------

Co-authored-by: Claude <noreply@anthropic.com>

2026-05-15 21:45:12 +00:00

..

ai-generated-label.yml

[AI] Add workflow to auto-label AI-generated PRs (#7817)

2026-05-13 05:17:11 +00:00

ai-generated-release-notes.yml

[AI] zizmor: add environment references to secret-consuming workflows (#7856)

2026-05-15 21:45:12 +00:00

autofix.yml

Run zizmor auto-fix tool (#7533)

2026-04-20 19:40:04 +00:00

build.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

check.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

codeql.yml

Run zizmor auto-fix tool (#7533)

2026-04-20 19:40:04 +00:00

count-points.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

crdt-version-check.yml

[AI] automated publishing workflow for crdt package (#7805)

2026-05-12 21:23:47 +00:00

cut-release-branch.yml

Fix some issues caught by zizmor (#7826)

2026-05-13 13:19:16 +00:00

docker-edge.yml

fix healthcheck script (#7840)

2026-05-14 21:39:10 +00:00

docker-release.yml

fix healthcheck script (#7840)

2026-05-14 21:39:10 +00:00

docs-spelling.yml

[AI] zizmor: add environment references to secret-consuming workflows (#7856)

2026-05-15 21:45:12 +00:00

e2e-test.yml

Fix some issues caught by zizmor (#7826)

2026-05-13 13:19:16 +00:00

e2e-vrt-comment.yml

⬆️ bump gh actions (#7507)

2026-04-15 14:36:28 +00:00

electron-master.yml

[AI] Replace GitHub Actions with native gh CLI commands (#7852)

2026-05-15 19:51:40 +00:00

electron-pr.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

fork-pr-welcome.yml

⬆️ bump gh actions (#7507)

2026-04-15 14:36:28 +00:00

i18n-string-extract-master.yml

[AI] zizmor: add environment references to secret-consuming workflows (#7856)

2026-05-15 21:45:12 +00:00

issues-close-feature-requests.yml

[AI] Replace GitHub Actions with native gh CLI commands (#7852)

2026-05-15 19:51:40 +00:00

issues-close-tech-support.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

issues-feature-implemented.yml

Run zizmor auto-fix tool (#7533)

2026-04-20 19:40:04 +00:00

issues-remove-help-wanted.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

netlify-release.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

nightly-theme-catalog-scan.yml

Add Discord notification for nightly theme catalog scan failures (#7595)

2026-04-23 06:58:21 +00:00

publish-crdt.yml

Fix some issues caught by zizmor (#7826)

2026-05-13 13:19:16 +00:00

publish-flathub.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

publish-microsoft-store.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

publish-nightly-electron.yml

Add explicit permissions to GitHub Actions workflows (#7846)

2026-05-14 20:17:50 +00:00

publish-npm-packages.yml

Fix some issues caught by zizmor (#7826)

2026-05-13 13:19:16 +00:00

release-notes.yml

[AI] zizmor: add environment references to secret-consuming workflows (#7856)

2026-05-15 21:45:12 +00:00

size-compare.yml

[AI] Stabilize size-compare job by pinning downloads to run_id (#7780)

2026-05-14 19:41:13 +00:00

stale.yml

Reduce permissions in stale workflow (#7555)

2026-04-22 15:17:35 +00:00

vrt-update-apply.yml

[AI] zizmor: add environment references to secret-consuming workflows (#7856)

2026-05-15 21:45:12 +00:00

vrt-update-generate.yml

[AI] Fix /update-vrt merge step when only one shard has changes (#7802)

2026-05-11 20:38:27 +00:00