fix(ci): update publish workflow ci-templates SHA

[Jesssullivan]

Summary

• Publish workflow (publish.yml) still pinned to ci-templates @0e13cc4 which has per-job permissions blocks causing startup_failure
• CI workflow was updated in fix(ci): update ci-templates SHA (permissions fix) #66 but publish was missed
• Updates to @f2e12c1 (ci-templates PRs refactor!: remove middleware (belongs in acuity-middleware) #10 + feat: v0.5.0 - remove acuity-scraper, add Bazel 8 config #11)

Without this fix, any tag push or release creation will fail with startup_failure before jobs are created.

Tracked

• TIN-104 (Bazel artifact truth)
• TIN-164 (ci-templates Bazel workflow)

[greptile-apps]

Greptile Summary

This PR updates the publish.yml workflow's ci-templates SHA from 0e13cc4 to f2e12c1, matching the SHA already used in ci.yml (updated in #66). The old SHA had per-job permissions blocks that caused startup_failure, preventing tag pushes and release events from working at all.

Confidence Score: 5/5

Safe to merge — single-line SHA bump that aligns publish.yml with the already-working ci.yml reference.

The change is a one-line SHA update with a clear, documented rationale. Both workflows now reference the same ci-templates commit, restoring the publish path that was broken by the missed update in #66. No logic, configuration, or secrets handling is modified.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/publish.yml	SHA bump for ci-templates reusable workflow from 0e13cc4 to f2e12c1, aligning with the SHA already used in ci.yml; no other changes.

Sequence Diagram

sequenceDiagram
    participant GH as GitHub
    participant PW as publish.yml
    participant CT as ci-templates<br/>js-bazel-package.yml<br/>@f2e12c1
    participant Runner as Self-hosted Runner

    GH->>PW: release published / workflow_dispatch
    PW->>CT: uses: reusable workflow (top-level permissions)
    CT->>Runner: spawn jobs (lint, typecheck, test, build, package)
    Runner-->>CT: job results
    CT-->>PW: workflow conclusion
    PW-->>GH: publish outcome

Loading

_{Reviews (1): Last reviewed commit: "fix(ci): update publish workflow ci-temp..." | Re-trigger Greptile}