ci(workflows): Standardize Git operations with custom actions

Author: arturcic

.github/workflows/mkdocs.yml

@@ -1,5 +1,6 @@
 name: Markdown Update
 on:
+  workflow_dispatch:
   push:
     paths:
       - 'docs/**'
@@ -24,19 +25,15 @@ defaults:
 
 jobs:
   docs:
-    permissions:
-      contents: write
     name: Update Markdown (embedded snippets)
     runs-on: ubuntu-24.04
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v6
-        if: github.event_name == 'push'
-      -
-        name: Checkout
-        uses: actions/checkout@v6
-        if: github.event_name == 'pull_request'
+        uses: gittools/cicd/checkout@v1
+        with:
+          op_service_account_token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          fetch-depth: 1
       -
         name: Setup .NET SDK
         uses: actions/setup-dotnet@v5
@@ -48,17 +45,9 @@ jobs:
           dotnet tool install --global MarkdownSnippets.Tool
           mdsnippets --write-header false
         working-directory: ${{ github.workspace }}/docs/input
+
       -
-        name: Check for changes
-        id: status
-        run: |
-          if ($null -ne (git status --porcelain)) { echo "has_changes=1"; echo "has_changes=1" >> $env:GITHUB_OUTPUT }
-      -
-        name: Push changes
-        run: |
-          git add --verbose .
-          git config user.name 'gittools-bot'
-          git config user.email 'gittoolsbot@outlook.com'
-          git commit -m 'Docs changes' --allow-empty
-          git push --force
-        if: steps.status.outputs.has_changes == '1' && github.event_name == 'push'
+        name: Commit and push markdown docs changes
+        uses: gittools/cicd/git-commit-push@v1
+        with:
+          message: "include markdown docs changes"

.github/workflows/public-api.yml

@@ -11,29 +11,20 @@ defaults:
 
 jobs:
   public-api:
-    permissions:
-      contents: write
     name: Mark public API as shipped
     runs-on: ubuntu-24.04
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v6
-        if: github.event_name == 'repository_dispatch' || github.event_name == 'workflow_dispatch'
+        uses: gittools/cicd/checkout@v1
+        with:
+          op_service_account_token: ${{ secrets.OP_SERVICE_ACCOUNT_TOKEN }}
+          fetch-depth: 0
       -
         name: Mark public API as shipped
         run: ./src/mark-shipped.ps1
       -
-        name: Check for changes
-        id: status
-        run: |
-          if ($null -ne (git status --porcelain)) { echo "has_changes=1"; echo "has_changes=1" >> $env:GITHUB_OUTPUT }
-      -
-        name: Push changes
-        run: |
-          git add --verbose .
-          git config user.name 'gittools-bot'
-          git config user.email 'gittoolsbot@outlook.com'
-          git commit -m 'Mark public API as shipped' --allow-empty
-          git push --force
-        if: steps.status.outputs.has_changes == '1'
+        name: Commit and push changes
+        uses: gittools/cicd/git-commit-push@v1
+        with:
+          message: "include public API changes"

.github/workflows/winget.yml

@@ -14,8 +14,6 @@ permissions:
 
 jobs:
   homebrew:
-    permissions:
-      contents: none
     name: Bump winget manifest
     runs-on: ubuntu-24.04
     steps: