ci: regenerate workflows from the standard templates

Re-render every workflow from the shared gh-automations templates so they no
longer drift: publish_stable triggers on push to master/main (not pull_request
closed), the release workflows pass PYPI_TOKEN/MATRIX_TOKEN explicitly, and
publish_stable gains the publish_release and sync_dev inputs. build-tests and
coverage install the test and ovos extras so the OVOS plugin tests run.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: JarbasAl

.github/workflows/build-tests.yml

@@ -8,8 +8,7 @@ on:
 jobs:
   build:
     uses: OpenVoiceOS/gh-automations/.github/workflows/build-tests.yml@dev
-    secrets: inherit
     with:
-      python_versions: '["3.10", "3.11", "3.12", "3.13"]'
+      python_versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
       install_extras: 'test,ovos'
       test_path: 'test'

.github/workflows/conventional-label.yaml .github/workflows/conventional-label.yml.github/workflows/conventional-label.yaml renamed to .github/workflows/conventional-label.yml

@@ -8,9 +8,9 @@ on:
 jobs:
   coverage:
     uses: OpenVoiceOS/gh-automations/.github/workflows/coverage.yml@dev
-    secrets: inherit
     with:
       python_version: '3.11'
       coverage_source: 'markovonnx'
+      test_path: 'test/'
       install_extras: '-e .[test,ovos]'
-      test_path: 'test'
+      min_coverage: 0

.github/workflows/coverage.yml

@@ -8,4 +8,3 @@ on:
 jobs:
   license_check:
     uses: OpenVoiceOS/gh-automations/.github/workflows/license-check.yml@dev
-    secrets: inherit

.github/workflows/license_check.yml

@@ -7,14 +7,7 @@ on:
 
 jobs:
   lint:
-    runs-on: ubuntu-latest
-    continue-on-error: true
-    steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.11'
-      - name: Install ruff
-        run: pip install ruff
-      - name: Run ruff
-        run: ruff check . || true
+    uses: OpenVoiceOS/gh-automations/.github/workflows/lint.yml@dev
+    with:
+      ruff: true
+      pre_commit: false   # set true if .pre-commit-config.yaml exists

.github/workflows/lint.yml

@@ -1,4 +1,4 @@
-name: OPM Check
+name: OPM Plugin Check
 
 on:
   pull_request:
@@ -8,6 +8,11 @@ on:
 jobs:
   opm_check:
     uses: OpenVoiceOS/gh-automations/.github/workflows/opm-check.yml@dev
-    secrets: inherit
     with:
+      python_version: '3.11'
       plugin_type: 'auto'
+      entry_point: 'ovos-markov-lang-detect'
+      opm_require_found: true
+      opm_validate_interface: true
+      opm_test_import: true
+      opm_perf_threshold_ms: 500

.github/workflows/opm-check.yml

@@ -8,4 +8,3 @@ on:
 jobs:
   pip_audit:
     uses: OpenVoiceOS/gh-automations/.github/workflows/pip-audit.yml@dev
-    secrets: inherit

.github/workflows/pip_audit.yml

@@ -2,18 +2,22 @@ name: Publish Stable Release
 
 on:
   workflow_dispatch:
-  pull_request:
-    types: [closed]
+  push:
     branches: [master, main]
 
+permissions:
+  contents: write   # required for version bump commit and release tag
+
 jobs:
   publish_stable:
-    if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
+    if: github.actor != 'github-actions[bot]'
     uses: OpenVoiceOS/gh-automations/.github/workflows/publish-stable.yml@dev
     secrets:
       PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
       MATRIX_TOKEN: ${{ secrets.MATRIX_TOKEN }}
     with:
       version_file: 'markovonnx/version.py'
       publish_pypi: true
+      publish_release: true
+      sync_dev: true
       notify_matrix: true

.github/workflows/publish_stable.yml

@@ -8,7 +8,6 @@ on:
 jobs:
   release_preview:
     uses: OpenVoiceOS/gh-automations/.github/workflows/release-preview.yml@dev
-    secrets: inherit
     with:
       package_name: 'markovonnx'
       version_file: 'markovonnx/version.py'

.github/workflows/release-preview.yml

@@ -6,6 +6,10 @@ on:
     types: [closed]
     branches: [dev]
 
+permissions:
+  contents: write
+  pull-requests: write
+
 jobs:
   publish_alpha:
     if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch'
@@ -19,6 +23,6 @@ jobs:
       update_changelog: true
       publish_prerelease: true
       propose_release: true
-      changelog_max_issues: 100
+      changelog_max_issues: 50
       publish_pypi: true
       notify_matrix: true