Clean up earlier CI changes

Author: spautz

.github/reusable-workflows/setup-repo/action.yml

@@ -46,16 +46,14 @@ runs:
       if: ${{ inputs.use-lockfile == 'false' }}
       shell: bash
       run: |
-        echo "REMOVING LOCKFILES"
         rm -f bun.lockb package-lock.json pnpm-lock.yaml yarn.lock
     - name: Keep lockfile intact
       if: ${{ inputs.use-lockfile != 'false' }}
       shell: bash
       run: |
-        echo "KEEPING LOCKFILES"
+        echo "(not removing lockfile)"
 
     - name: Install dependencies
       shell: bash
       run: |
         ./scripts/setup-ci-environment.sh
-        git status

.github/workflows/publish-release.yml

@@ -17,6 +17,8 @@ jobs:
     # Only run for the original repo, and only the default branch, and only if it's properly protected
     if: |
       (! github.event.push.head.repo.fork)
+        && github.ref == format('refs/heads/{0}', github.event.repository.default_branch)
+        && github.ref_protected == true
     strategy:
       matrix:
         package-name: [limited-cache]
@@ -32,9 +34,7 @@ jobs:
       - name: Publish to NPM
         run: |
           cd packages/${{ matrix.package-name }}
-          git status
           pnpm pack
-          git status
           NPM_CONFIG_PROVENANCE=true  pnpm publish --dry-run --tag next *${{ matrix.package-name }}*.tgz
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NPM_PUBLISH_TOKEN }}