ci: pass release secrets explicitly

[JarbasAl]

Summary

The Release Alpha and Propose Stable run failed on merge: the notify step
exited with code 22 because MATRIX_TOKEN was empty, and PyPI publishing had
no token.

secrets: inherit does not deliver PYPI_TOKEN / MATRIX_TOKEN to the
gh-automations publish workflows for this repository. Pass them explicitly by
name in release_workflow.yml and publish_stable.yml.

Requires PYPI_TOKEN and MATRIX_TOKEN to be set as repo or org secrets.

Test plan

• Next merge to dev runs publish-alpha and reaches PyPI with a token

[coderabbitai]

Warning

Rate limit exceeded

@JarbasAl has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 51 minutes and 47 seconds before requesting another review.

You’ve run out of usage credits. Purchase more in the billing tab.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: ec8982f1-b38e-4f33-b061-4cca7e098ec8

📥 Commits

Reviewing files that changed from the base of the PR and between 5a0f0db and 5d73a11.

📒 Files selected for processing (2)

• .github/workflows/publish_stable.yml
• .github/workflows/release_workflow.yml

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix-release-secrets

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

The automated sentinels have completed their watch. 💂‍♂️

I've aggregated the results of the automated checks for this PR below.

📋 Repo Health

I've performed a digital acupuncture on the codebase. 📍

✅ All required files present.

Latest Version: 0.0.1a1

✅ markovonnx/version.py — Version file
✅ README.md — README
✅ LICENSE — License file
✅ pyproject.toml — pyproject.toml
⚠️ setup.py — setup.py
✅ CHANGELOG.md — Changelog
✅ markovonnx/version.py has valid version block markers

🔌 Plugin Detection

I've checked the plugin's 'logging' output. 🪵

❌ Plugin Status: ERRORS (14)

Plugin Info:

• Name: markovonnx
• Description: Markov chains and HMMs with ONNX export and inference

Plugin Types: lang.detect, postag, keywords, segmentation, g2p, agents.chat, transformer.text

OPM Detection:

Plugin Type	Wheel	Editable
agents.chat	❌	❌
g2p	❌	❌
keywords	❌	❌
lang.detect	❌	❌
postag	❌	❌
segmentation	❌	❌
transformer.text	❌	❌

Entry Point Validation:

Entry Point	Type	Import	Interface
ovos-markov-chat	agents.chat	❌	⊘
ovos-markov-g2p	g2p	❌	⊘
ovos-markov-keyword-extract	keywords	❌	⊘
ovos-markov-lang-detect	lang.detect	❌	⊘
ovos-markov-postag	postag	❌	⊘
ovos-markov-segmentation	segmentation	❌	⊘
ovos-markov-utterance-transformer	transformer.text	❌	⊘

⊘ No settingsmeta.json
✅ requires-python >=3.10 — running Python 3.11

Issues:

• ❌ OPM could not detect opm.lang.detect
• ❌ OPM could not detect opm.postag
• ❌ OPM could not detect opm.keywords
• ❌ OPM could not detect opm.segmentation
• ❌ OPM could not detect opm.g2p
• ❌ OPM could not detect opm.agents.chat
• ❌ OPM could not detect opm.transformer.text
• ❌ Could not import plugin class for ovos-markov-lang-detect
• ❌ Could not import plugin class for ovos-markov-postag
• ❌ Could not import plugin class for ovos-markov-keyword-extract
• ❌ Could not import plugin class for ovos-markov-segmentation
• ❌ Could not import plugin class for ovos-markov-g2p
• ❌ Could not import plugin class for ovos-markov-chat
• ❌ Could not import plugin class for ovos-markov-utterance-transformer
• ⚠️ No settingsmeta.json found

🏷️ Release Preview

Ensuring the version bump is correctly calculated. 🔢

Current: 0.0.1a1 → Next: 0.0.1a2

Signal	Value
Label	(none)
PR title	ci: pass release secrets explicitly
Bump	alpha

✅ PR title follows conventional commit format.

---

🚀 Release Channel Compatibility

Predicted next version: 0.0.1a2

Channel	Status	Note	Current Constraint
Stable	⚪	Not in channel	-
Testing	⚪	Not in channel	-
Alpha	⚪	Not in channel	-

🔒 Security (pip-audit)

I've checked for any hardcoded credentials. 🔑

✅ No known vulnerabilities found (39 packages scanned).

📊 Coverage

Is the code wearing its test-suit? Let's see. 👔

✅ 85.5% total coverage

Files below 80% coverage (1 file)

File	Coverage	Missing lines
markovonnx/opm.py	69.2%	139

Full report: download the coverage-report artifact.

🔨 Build Tests

A thorough inspection of the build process. 🔍

✅ All versions pass

Python	Build	Install	Tests
3.10	✅	✅	✅
3.11	✅	✅	✅
3.12	✅	✅	✅
3.13	✅	✅	✅

---

Standard Automated Signature v2.0 🏷️