fix workflows github actions version

[egenthon-cmd]

remove broken dependency since last release (because of ubuntu-latest)
and fixed the future deprecated onepassword (september 2026)

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configurations for improved toolchain management and GitHub Actions versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: df29292a-3697-4d0c-a350-f279f58dfccd

📥 Commits

Reviewing files that changed from the base of the PR and between 40b1a40 and 3b36fa2.

📒 Files selected for processing (2)

• .github/workflows/publish.yml
• .github/workflows/release.yml

💤 Files with no reviewable changes (1)

• .github/workflows/publish.yml

---

📝 Walkthrough

Walkthrough

The pull request removes redundant global npm installation steps from GitHub Actions workflows and upgrades action versions in the release workflow. These changes simplify toolchain setup by relying on npm provided by the Node.js setup action.

Changes

Cohort / File(s)	Summary
npm Toolchain Simplification .github/workflows/publish.yml, .github/workflows/release.yml	Removed redundant npm install -g npm steps that globally installed npm after Node.js setup, eliminating duplicate npm configuration.
Action Version Upgrades .github/workflows/release.yml	Upgraded 1password/load-secrets-action from v2 to v4 and actions/create-github-app-token from v1 to v3 to use newer versions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Poem

🐰 Workflows lean and mean, we hop with glee,
No npm installed thrice—efficiency!
Actions upgraded, versions bright and new,
Tools simplified, workflows streamlined true. ✨

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'fix workflows github actions version' is partially related to the main changes but lacks specificity about what is being fixed and is somewhat vague.	Consider using a more specific title that clarifies the key fixes, such as 'Fix GitHub Actions versions and remove npm global install from workflows' to better reflect both the version upgrades and the npm dependency removal.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/workflows-github-actions-version

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}