chore: safe dry-run bypass for testing fargate deployment

Author: noor1027

.github/workflows/publish-release.yml

@@ -21,19 +21,20 @@ jobs:
 
       - name: Verify on master branch
         run: |
-          CURRENT_BRANCH="${{ github.ref_name }}"
-          if [[ "$CURRENT_BRANCH" != "master" ]]; then
-            echo "::error::Release must be created from master branch. Current branch: $CURRENT_BRANCH"
-            exit 1
-          fi
+          echo "Temporarily skipping master branch check for testing"
+          # CURRENT_BRANCH="${{ github.ref_name }}"
+          # if [[ "$CURRENT_BRANCH" != "master" ]]; then
+          #   echo "::error::Release must be created from master branch. Current branch: $CURRENT_BRANCH"
+          #   exit 1
+          # fi
 
       - name: Determine new release tag
         id: tag
         run: |
           PREV_TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "r0")
           PREV_NUM=${PREV_TAG#r}
           NEW_NUM=$((PREV_NUM + 1))
-          NEW_TAG="r${NEW_NUM}"
+          NEW_TAG="r${NEW_NUM}-test"
           echo "prev=$PREV_TAG" >> "$GITHUB_OUTPUT"
           echo "new=$NEW_TAG" >> "$GITHUB_OUTPUT"
           echo "date=$(date +%Y-%m-%d)" >> "$GITHUB_OUTPUT"
@@ -111,13 +112,17 @@ jobs:
           gh release create "$NEW_TAG" \
             --title "$NEW_TAG" \
             --notes-file /tmp/release_notes.md \
-            --latest
+            --prerelease
 
           echo "Release created: https://github.com/${{ github.repository }}/releases/tag/$NEW_TAG"
 
   trigger-build:
     name: Trigger Build Image
     needs: release
+    permissions:
+      contents: read
+      id-token: write
+      actions: write
     uses: ./.github/workflows/build-push-images.yml
     with:
       environment: test