ci: refine to Cysharp GitHub Actions style

.github/workflows/build.yml

@@ -15,19 +15,22 @@ on:
 
 jobs:
   dotnet-build:
-    runs-on: windows-latest
+    permissions:
+      contents: read
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: Cysharp/Actions/.github/actions/checkout@main
 
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: microsoft
           java-version: 17
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: Cysharp/Actions/.github/actions/setup-dotnet@main
         with:
           dotnet-version: 10.0.x
 
@@ -82,8 +85,17 @@ jobs:
           "apk_path=$($pick.FullName)" >> $env:GITHUB_OUTPUT
 
       - name: Upload signed APK
-        uses: actions/upload-artifact@v7
+        uses: Cysharp/Actions/.github/actions/upload-artifact@main
         with:
+          name: ringcontroller-apk
           path: ${{ steps.signed_apk.outputs.apk_path }}
           archive: false
           if-no-files-found: error
+
+  actions-timeline:
+    needs: [dotnet-build]
+    permissions:
+      contents: read
+    uses: Cysharp/Actions/.github/workflows/actions-timeline.yaml@main
+    secrets:
+      github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/prevent-github-change.yml

@@ -0,0 +1,13 @@
+name: Prevent .github change
+
+on:
+  pull_request:
+    paths:
+      - ".github/**/*.yaml"
+      - ".github/**/*.yml"
+
+jobs:
+  detect:
+    permissions:
+      contents: read
+    uses: Cysharp/Actions/.github/workflows/prevent-github-change.yaml@main

.github/workflows/publish.yml

@@ -11,25 +11,25 @@ on:
         required: true
         type: string
 
-permissions:
-  contents: write
-
 concurrency:
   group: publish-release
   cancel-in-progress: false
 
 jobs:
   publish:
-    runs-on: windows-latest
+    permissions:
+      contents: write
+    runs-on: ubuntu-24.04
+    timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: Cysharp/Actions/.github/actions/checkout@main
 
       - name: Parse version and tag
         id: ver
         shell: pwsh
         run: |
-          $raw = "${{ inputs.tag }}".Trim()
+          $raw = "$env:TAG".Trim()
           if ([string]::IsNullOrWhiteSpace($raw)) { throw "tag is required" }
           if ($raw -match '^v\d') {
             $tagV = $raw
@@ -49,14 +49,16 @@ jobs:
           "app_version=$code" >> $env:GITHUB_OUTPUT
           Write-Host "Release tag: $tagV  |  Version: $num  |  ApplicationVersion (code): $code"
 
+        env:
+          TAG: ${{ inputs.tag }}
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: microsoft
           java-version: 17
 
       - name: Setup .NET SDK
-        uses: actions/setup-dotnet@v4
+        uses: Cysharp/Actions/.github/actions/setup-dotnet@main
         with:
           dotnet-version: 10.0.x