From 79bb38c42708a84c779dfece57a36578bcf4d971 Mon Sep 17 00:00:00 2001
From: Ed Burns <edburns@microsoft.com>
Date: Mon, 1 Jun 2026 00:47:07 -0700
Subject: [PATCH] =?UTF-8?q?Remove=20MONOREPO=5FREAD=5FTOKEN=20validation?=
 =?UTF-8?q?=20step=20=E2=80=94=20monorepo=20is=20public?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Also fix version validation: the 'version' input is a bare version string
(e.g. 1.0.0-beta-10-java.5), not a tag. Validate monorepo_tag instead.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .github/workflows/deploy-site.yml | 23 ++++++++++-------------
 1 file changed, 10 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/deploy-site.yml b/.github/workflows/deploy-site.yml
index 871ca9d33..4f6ddd928 100644
--- a/.github/workflows/deploy-site.yml
+++ b/.github/workflows/deploy-site.yml
@@ -35,26 +35,23 @@ jobs:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
-      # 0. Validate required secrets and inputs
-      - name: Validate inputs and secrets
-        env:
-          MONOREPO_READ_TOKEN: ${{ secrets.MONOREPO_READ_TOKEN }}
+      # 0. Validate inputs
+      - name: Validate inputs
         run: |
-          if [[ -z "${MONOREPO_READ_TOKEN}" ]]; then
-            echo "::error::MONOREPO_READ_TOKEN secret is required but not configured."
-            exit 1
-          fi
           VERSION="${{ inputs.version }}"
-          if [[ "${VERSION}" != java/v* ]]; then
-            echo "::error::VERSION must start with 'java/v' (got: '${VERSION}')"
+          if [[ -z "${VERSION}" ]]; then
+            echo "::error::version input is required"
             exit 1
           fi
           if [[ "${VERSION}" == *"../"* ]]; then
-            echo "::error::VERSION must not contain '../'"
+            echo "::error::version must not contain '../'"
+            exit 1
+          fi
+          TAG="${{ inputs.monorepo_tag }}"
+          if [[ "${TAG}" != java/v* ]]; then
+            echo "::error::monorepo_tag must start with 'java/v' (got: '${TAG}')"
             exit 1
           fi
-          DEPLOY_VERSION="${VERSION#java/v}"
-          echo "DEPLOY_VERSION=${DEPLOY_VERSION}" >> "$GITHUB_ENV"
 
       # 1. Checkout this (standalone) repo — has src/site/, pom.xml, templates
       - name: Checkout standalone repo