ci: add emojis to workflow names and improve their security

.github/workflows/cr-comment.yml

@@ -1,4 +1,4 @@
-name: Add continuous release label
+name: 🔖 Add continuous release label
 
 on:
   issue_comment:

.github/workflows/cr.yml

@@ -1,8 +1,12 @@
-name: CR
+name: 🔄 CR
 
 env:
   PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: '1'
 
+permissions:
+  contents: read
+  packages: write
+
 on:
   pull_request:
     branches: [main]
@@ -24,8 +28,6 @@ on:
     tags-ignore:
       - '*'
 
-permissions: {}
-
 concurrency:
   group: ${{ github.workflow }}-${{ github.event.number }}
   cancel-in-progress: true
@@ -36,12 +38,26 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v3
-      - uses: actions/setup-node@v4
+      - name: 📥 Checkout
+        uses: actions/checkout@v4
+        with:
+          persist-credentials: false
+
+      - name: 📦 Setup pnpm
+        uses: pnpm/action-setup@v3
+
+      - name: 🛠️ Setup Node.js
+        uses: actions/setup-node@v4
         with:
           node-version: 22
           cache: pnpm
-      - run: pnpm install
-      - run: pnpm build
-      - run: npx pkg-pr-new publish --compact --no-template --pnpm
+          cache-dependency-path: pnpm-lock.yaml
+
+      - name: 📦 Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: 🛠️ Build
+        run: pnpm build
+
+      - name: 🚀 Publish Package
+        run: npx pkg-pr-new publish --compact --no-template --pnpm

.github/workflows/lock-threads.yml

@@ -1,4 +1,4 @@
-name: Lock Threads
+name: 🔒 Lock Threads
 
 on:
   schedule:

.github/workflows/release-tag.yml

@@ -1,4 +1,9 @@
-name: Release
+name: 🚀 Release
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
 
 on:
   push:
@@ -11,10 +16,12 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - name: Checkout
+      - name: 📥 Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: true
 
-      - name: Create Release for Tag
+      - name: 🔖 Create Release for Tag
         id: release_tag
         uses: yyx990803/release-tag@master
         env:

.github/workflows/stale.yml

@@ -1,4 +1,9 @@
-name: Close stale issues and PRs
+name: ⛔ Close stale issues and PRs
+
+permissions:
+  issues: write
+  pull-requests: write
+
 on:
   workflow_dispatch:
 

.github/workflows/test.yml

@@ -1,4 +1,4 @@
-name: Test
+name: 🧪 Test
 
 on:
   push:
@@ -26,25 +26,27 @@ jobs:
     runs-on: ${{ matrix.os }}
 
     steps:
-      - name: Checkout
+      - name: 📥 Checkout
         uses: actions/checkout@v4
+        with:
+          persist-credentials: false
 
-      - name: Install pnpm
+      - name: 📦 Install pnpm
         uses: pnpm/action-setup@v3
 
-      - name: Set node version to ${{ matrix.node_version }}
+      - name: 🛠️ Set node version to ${{ matrix.node_version }}
         uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node_version }}
           cache: pnpm
 
-      - name: Install deps
+      - name: 📦 Install dependencies
         run: pnpm install
         env:
           PLAYWRIGHT_SKIP_BROWSER_DOWNLOAD: 1
 
-      - name: Install Playwright
+      - name: 🎭 Install Playwright
         run: pnpm playwright install chromium
 
-      - name: Check
+      - name: ✅ Check
         run: pnpm check

README.md

@@ -19,7 +19,7 @@ Detailed changes for each release are documented in the [CHANGELOG](https://gith
 
 ## Contribution
 
-Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/.github/contributing.md) before making a pull request.
+Please make sure to read the [Contributing Guide](https://github.com/vuejs/vitepress/blob/main/contributing.md) before making a pull request.
 
 ## License