Apply suggestions from code reviews

Author: lucianopaz

.github/workflows/pypi.yml

@@ -3,7 +3,6 @@ on:
   push:
     branches:
       - main
-      - auto-release
   pull_request:
     branches: [main]
   release:
@@ -16,11 +15,19 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.head_ref || github.sha }}
   cancel-in-progress: true
 
+permissions: {}
+
 jobs:
   check_changes:
     runs-on: ubuntu-latest
     outputs:
-      should_run: ${{ steps.filter.outputs.any_changed }}
+      should_run: |
+        echo "${{ github.event_name == 'release' || 
+              (
+                github.ref == 'refs/heads/main' || 
+                github.event_name == 'pull_request' 
+              ) && steps.filter.outputs.any_changed == 'true' 
+            }}"
     steps:
       - uses: actions/checkout@v4
       - uses: dorny/paths-filter@v2
@@ -39,10 +46,9 @@ jobs:
   make_sdist:
     name: Make SDist
     needs: check_changes
-    # Run if it's a release, auto-release branch, or if relevant files changed on main
+    # Run if it's a release or if relevant files changed on main
     if: |
       github.event_name == 'release' || 
-      github.ref == 'refs/heads/auto-release' || 
       (github.ref == 'refs/heads/main' && needs.check_changes.outputs.should_run == 'true') ||
       (github.event_name == 'pull_request' && needs.check_changes.outputs.should_run == 'true')
     runs-on: ubuntu-latest
@@ -75,10 +81,9 @@ jobs:
   run_checks:
     name: Build & inspect our package.
     needs: check_changes
-    # Run if it's a release, auto-release branch, or if relevant files changed on main
+    # Run if it's a release or if relevant files changed on main
     if: |
       github.event_name == 'release' || 
-      github.ref == 'refs/heads/auto-release' || 
       (github.ref == 'refs/heads/main' && needs.check_changes.outputs.should_run == 'true') ||
       (github.event_name == 'pull_request' && needs.check_changes.outputs.should_run == 'true')
     # Note: the resulting builds are not actually published.
@@ -95,10 +100,9 @@ jobs:
   build_wheels:
     name: Build wheels for ${{ matrix.platform }}
     needs: check_changes
-    # Run if it's a release, auto-release branch, or if relevant files changed on main
+    # Run if it's a release or if relevant files changed on main
     if: |
       github.event_name == 'release' || 
-      github.ref == 'refs/heads/auto-release' || 
       (github.ref == 'refs/heads/main' && needs.check_changes.outputs.should_run == 'true') ||
       (github.event_name == 'pull_request' && needs.check_changes.outputs.should_run == 'true')
     runs-on: ${{ matrix.platform }}
@@ -136,10 +140,9 @@ jobs:
   build_universal_wheel:
     name: Build universal wheel for Pyodide
     needs: check_changes
-    # Run if it's a release, auto-release branch, or if relevant files changed on main
+    # Run if it's a release or if relevant files changed on main
     if: |
       github.event_name == 'release' || 
-      github.ref == 'refs/heads/auto-release' || 
       (github.ref == 'refs/heads/main' && needs.check_changes.outputs.should_run == 'true') ||
       (github.event_name == 'pull_request' && needs.check_changes.outputs.should_run == 'true')
     runs-on: ubuntu-latest
@@ -182,7 +185,6 @@ jobs:
     needs: [check_changes, make_sdist, build_wheels]
     if: |
       github.event_name == 'release' || 
-      github.ref == 'refs/heads/auto-release' || 
       (github.ref == 'refs/heads/main' && needs.check_changes.outputs.should_run == 'true') ||
       (github.event_name == 'pull_request' && needs.check_changes.outputs.should_run == 'true')
     runs-on: ubuntu-22.04