BDE-237 dynamic host permissions granting

.github/workflows/ci.yml

@@ -1,5 +1,4 @@
 name: CI Build
-
 on: 
   pull_request:
 
@@ -17,29 +16,50 @@ on:
 
 jobs:
   build:
+    permissions:
+      contents: write # This is needed for release
+      actions: write # This is needed for upload-artifact
+
     runs-on:
       - ${{ github.repository_owner != github.actor && 'ubuntu-latest' || 'self-hosted' }}
-  
+
     steps:
 
       - name: Checkout Commit
         uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      
+
       - name: Setup Node
         uses: actions/setup-node@v4
         with:
-          node-version-file: '.nvmrc'
-      
-      - name: Install pnpm
+          node-version-file: '.nvmrc' 
+
+      - name: Setup pnpm
         run: |
-          corepack enable
-          corepack prepare pnpm@next-8 --activate
-
+          corepack enable pnpm
+
+      - name: Cache pnpm store
+        uses: actions/cache@v4
+        with:
+          path: ~/.local/share/pnpm/store/v3
+          key: |
+            ${{ runner.os }}-pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-
+
       - name: Install dependencies
         run: pnpm install
 
+      - name: Update package version for release
+        if: startsWith(github.ref, 'refs/tags/v')
+        run: |
+          VERSION=$(echo $GITHUB_REF | sed 's/refs\/tags\/v//')
+          pnpm version $VERSION --no-git-tag-version
+          cat <<! | tee -a $GITHUB_ENV
+          NODE_ENV=production
+          !
+
       - name: Build
         run: pnpm build:chrome