Revert "CI: Protect manual package publishing workflows (#34733)"

.github/workflows/packages_publishing.yml

@@ -15,53 +15,22 @@ on:
         type: string
         description: Package file filter pattern
         required: false
-  workflow_call:
-    inputs:
-      tag:
-        type: string
-        default: daily
-        required: false
-      filter:
-        type: string
-        default: ''
-        required: false
-      branch:
-        type: string
-        default: ''
-        required: false
-
-permissions:
-  contents: read
-  packages: write
 
 env:
   NX_SKIP_NX_CACHE: true
-  FILTER: ${{ inputs.filter || '' }}
+  FILTER: ${{ github.event_name == 'workflow_dispatch' && inputs.filter || '' }}
   SET_TIMESTAMP_VERSION:  ${{ inputs.tag == 'daily' }}
   SBOM_PACKAGE_NAMES: devextreme,devextreme-angular,devextreme-react,devextreme-vue,devextreme-themebuilder
 
 jobs:
-  approve-package-publishing:
-    name: Approve package publishing
-    if: ${{ inputs.tag == 'stable' || (github.event_name == 'workflow_dispatch' && !contains(github.workflow_ref, '/.github/workflows/packages_publishing_scheduler.yml@')) }}
-    runs-on: ubuntu-slim
-    environment: packages-publishing
-    steps:
-      - name: Approve publishing
-        run: echo "Package publishing approved"
-
   build:
     name: Build packages
     runs-on: ubuntu-latest
-    needs: approve-package-publishing
-    if: ${{ always() && !cancelled() && (needs.approve-package-publishing.result == 'success' || needs.approve-package-publishing.result == 'skipped') }}
     outputs:
       packages: ${{ steps.filter.outputs.packages }}
     steps:
       - name: Get sources
         uses: actions/checkout@v6
-        with:
-          ref: ${{ inputs.branch || github.ref }}
 
       - name: Set up nodejs
         uses: actions/setup-node@v6
@@ -184,8 +153,6 @@ jobs:
     steps:
       - name: Get sources
         uses: actions/checkout@v6
-        with:
-          ref: ${{ inputs.branch || github.ref }}
 
       - name: Download packages
         uses: actions/download-artifact@v8

.github/workflows/packages_publishing_scheduler.yml

@@ -3,19 +3,26 @@ name: Publishing to GitHub Packages (scheduler)
 on:
   schedule:
     - cron: '00 18 * * *'
-
-permissions:
-  contents: read
-  packages: write
+  workflow_dispatch:
 
 jobs:
   publish:
+    runs-on: ubuntu-latest
+    env:
+      GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     strategy:
       matrix:
         branch: ['24_2', '25_1', '25_2', '26_1', 'main']
+
     name: Run Packages Publishing workflow
-    uses: ./.github/workflows/packages_publishing.yml
-    with:
-      tag: daily
-      branch: ${{ matrix.branch }}
-    secrets: inherit
+    steps:
+      - name: Get sources
+        uses: actions/checkout@v6
+        with:
+          sparse-checkout: |
+            README.md
+          sparse-checkout-cone-mode: false
+
+      - name: Publish Packages (${{ matrix.branch }})
+        run: |
+          gh workflow run packages_publishing.yml -f tag=daily --ref ${{ matrix.branch }}          

.github/workflows/pr-storybook-cleanup.yml

@@ -3,6 +3,7 @@ name: PR Storybook - Preview Cleanup
 on:
   schedule:
     - cron: '0 3 * * 1'  # Every Monday at 03:00 UTC
+  workflow_dispatch:
 
 permissions:
   contents: write

.github/workflows/pr-storybook-deploy.yml

@@ -136,9 +136,6 @@ jobs:
     name: Remove storybook
     runs-on: ubuntu-latest
     timeout-minutes: 10
-    environment:
-      name: storybook
-      url: https://devexpress.github.io/DevExtreme/storybook/pr-${{ github.event.pull_request.number }}
     if: >-
       github.event.pull_request.head.repo.full_name == github.repository &&
       (

.github/workflows/publish-demos.yml

@@ -3,9 +3,6 @@ name: Publishing to GitHub Pages step 1 (to branch)
 on:
   workflow_dispatch:
 
-permissions:
-  contents: read
-
 jobs:
   build-devextreme-all:
     runs-on: ubuntu-latest
@@ -279,9 +276,6 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     needs: [build-devextreme-all, publish-ES, publish-angular]
-    permissions:
-      contents: write
-    environment: gh-pages-demos
     steps: 
       - name: Download publish-demos artifact
         uses: actions/download-artifact@v8