Use workflow inputs for store upload gates

.forgejo/workflows/publish-store-uploads.yml

@@ -48,7 +48,7 @@ permissions:
   contents: read
 
 concurrency:
-  group: burrow-publish-store-uploads-${{ github.event.inputs.build_number }}
+  group: burrow-publish-store-uploads-${{ inputs.build_number }}
   cancel-in-progress: true
 
 env:
@@ -81,7 +81,7 @@ env:
 jobs:
   sign-apple-kms:
     name: Sign (Apple KMS)
-    if: ${{ github.event.inputs.upload_app_store == 'true' || github.event.inputs.upload_sparkle == 'true' }}
+    if: ${{ inputs.upload_app_store == 'true' || inputs.upload_sparkle == 'true' }}
     runs-on: namespace-profile-linux-medium
     steps:
       - name: Checkout
@@ -110,7 +110,7 @@ jobs:
       - name: Download Staged Apple Artifacts
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
         run: |
           set -euo pipefail
           nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@@ -125,8 +125,8 @@ jobs:
       - name: Sign Apple Artifacts With KMS
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
-          SPARKLE_CHANNEL_INPUT: ${{ github.event.inputs.sparkle_channel }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
+          SPARKLE_CHANNEL_INPUT: ${{ inputs.sparkle_channel }}
         run: |
           set -euo pipefail
           channel="${SPARKLE_CHANNEL_INPUT:-}"
@@ -138,13 +138,13 @@ jobs:
       - name: Upload Signed Apple Artifacts
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
         run: nix develop .#ci -c Scripts/ci/upload-release-storage.sh
 
   upload-app-store:
     name: Upload (App Store Connect)
     needs: sign-apple-kms
-    if: ${{ github.event.inputs.upload_app_store == 'true' }}
+    if: ${{ inputs.upload_app_store == 'true' }}
     runs-on: namespace-profile-macos-large
     steps:
       - name: Checkout
@@ -173,7 +173,7 @@ jobs:
       - name: Download Apple Artifacts From GCS
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
         run: |
           set -euo pipefail
           nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@@ -204,7 +204,7 @@ jobs:
             artifacts+=("$artifact")
           done
           if (( ${#artifacts[@]} == 0 )); then
-            echo "::error ::No Apple upload artifacts found for build ${{ github.event.inputs.build_number }}."
+            echo "::error ::No Apple upload artifacts found for build ${{ inputs.build_number }}."
             exit 1
           fi
           for artifact in "${artifacts[@]}"; do
@@ -222,7 +222,7 @@ jobs:
   release-ios-testflight:
     name: Release (TestFlight iOS Testers)
     needs: upload-app-store
-    if: ${{ github.event.inputs.upload_app_store == 'true' }}
+    if: ${{ inputs.upload_app_store == 'true' }}
     runs-on: namespace-profile-linux-medium
     steps:
       - name: Checkout
@@ -251,16 +251,16 @@ jobs:
       - name: Distribute iOS Build To TestFlight
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
-          TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ github.event.inputs.testflight_distribute_external || 'false' }}
-          TESTFLIGHT_GROUPS: ${{ github.event.inputs.testflight_groups || '' }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
+          TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ inputs.testflight_distribute_external || 'false' }}
+          TESTFLIGHT_GROUPS: ${{ inputs.testflight_groups || '' }}
           TESTFLIGHT_INTERNAL_GROUP: Internal
-          IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ github.event.inputs.ios_uses_non_exempt_encryption || 'false' }}
+          IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ inputs.ios_uses_non_exempt_encryption || 'false' }}
         run: Scripts/ci/distribute-testflight.sh
 
   distribute-ios-testflight:
     name: Distribute (TestFlight iOS Testers)
-    if: ${{ github.event.inputs.upload_app_store != 'true' && github.event.inputs.distribute_testflight == 'true' }}
+    if: ${{ inputs.upload_app_store != 'true' && inputs.distribute_testflight == 'true' }}
     runs-on: namespace-profile-linux-medium
     steps:
       - name: Checkout
@@ -289,17 +289,17 @@ jobs:
       - name: Distribute iOS Build To TestFlight
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
-          TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ github.event.inputs.testflight_distribute_external || 'false' }}
-          TESTFLIGHT_GROUPS: ${{ github.event.inputs.testflight_groups || '' }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
+          TESTFLIGHT_DISTRIBUTE_EXTERNAL: ${{ inputs.testflight_distribute_external || 'false' }}
+          TESTFLIGHT_GROUPS: ${{ inputs.testflight_groups || '' }}
           TESTFLIGHT_INTERNAL_GROUP: Internal
-          IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ github.event.inputs.ios_uses_non_exempt_encryption || 'false' }}
+          IOS_USES_NON_EXEMPT_ENCRYPTION: ${{ inputs.ios_uses_non_exempt_encryption || 'false' }}
         run: Scripts/ci/distribute-testflight.sh
 
   upload-sparkle:
     name: Upload (Sparkle)
     needs: sign-apple-kms
-    if: ${{ github.event.inputs.upload_sparkle == 'true' }}
+    if: ${{ inputs.upload_sparkle == 'true' }}
     runs-on: namespace-profile-linux-medium
     steps:
       - name: Checkout
@@ -312,10 +312,10 @@ jobs:
         id: channel
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
         run: |
           set -euo pipefail
-          channel="${{ github.event.inputs.sparkle_channel }}"
+          channel="${{ inputs.sparkle_channel }}"
           if [[ -z "$channel" ]]; then
             channel="build-${BUILD_NUMBER}"
           fi
@@ -328,9 +328,9 @@ jobs:
       - name: Publish Sparkle Channel
         shell: bash
         env:
-          BUILD_NUMBER: ${{ github.event.inputs.build_number }}
+          BUILD_NUMBER: ${{ inputs.build_number }}
           CHANNEL: ${{ steps.channel.outputs.channel }}
-          SPARKLE_POINT_MAIN: ${{ github.event.inputs.sparkle_point_main }}
+          SPARKLE_POINT_MAIN: ${{ inputs.sparkle_point_main }}
         run: |
           set -euo pipefail
           nix develop .#ci -c Scripts/ci/google-wif-auth.sh
@@ -351,7 +351,7 @@ jobs:
 
   upload-microsoft-store:
     name: Upload (Microsoft Store Beta)
-    if: ${{ github.event.inputs.upload_microsoft_store == 'true' }}
+    if: ${{ inputs.upload_microsoft_store == 'true' }}
     runs-on: namespace-profile-windows-large
     steps:
       - name: Checkout