normalize the workflow files

.github/workflows/bazel_worker.yaml

@@ -1,4 +1,5 @@
 name: package:bazel_worker
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/bazel_worker/

.github/workflows/benchmark_harness.yaml

@@ -1,4 +1,5 @@
 name: package:benchmark_harness
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,9 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
 defaults:
   run:
     working-directory: pkgs/benchmark_harness/

.github/workflows/boolean_selector.yaml

@@ -1,4 +1,5 @@
 name: package:boolean_selector
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/boolean_selector/

.github/workflows/browser_launcher.yaml

@@ -1,4 +1,5 @@
 name: package:browser_launcher
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -16,7 +17,6 @@ on:
     - cron: "0 0 * * 0"
 
 env:
-  PUB_ENVIRONMENT: bot.github
   DISPLAY: ':99'
 
 defaults:

.github/workflows/cli_config.yaml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        sdk: [stable, dev] # {pkgs.versions}
+        sdk: [stable, dev]
         include:
           - sdk: stable
             run-tests: true
@@ -61,7 +61,7 @@ jobs:
     runs-on: windows-latest
     strategy:
       matrix:
-        sdk: [stable, dev] # {pkgs.versions}
+        sdk: [stable, dev]
         include:
           - sdk: stable
             run-tests: true

.github/workflows/cli_util.yaml

@@ -1,4 +1,5 @@
 name: package:cli_util
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/cli_util/

.github/workflows/clock.yaml

@@ -1,4 +1,5 @@
 name: package:clock
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/clock/

.github/workflows/code_builder.yaml

@@ -1,4 +1,5 @@
 name: package:code_builder
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/code_builder/

.github/workflows/coverage.yaml

@@ -1,4 +1,5 @@
 name: package:coverage
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,9 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
 jobs:
   # Check code formatting and static analysis on a single OS (linux)
   # against Dart dev.

.github/workflows/csslib.yaml

@@ -1,4 +1,5 @@
 name: package:csslib
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/csslib/

.github/workflows/deploy_pages.yaml

@@ -1,6 +1,7 @@
 # Publish the GitHub Pages site for this repo.
 
 name: "Deploy Pages"
+permissions: read-all
 
 on:
   # Run on pushes to the default branch.

.github/workflows/extension_discovery.yaml

@@ -14,16 +14,17 @@ on:
   schedule:
     - cron: '0 0 * * 0' # weekly
 
+defaults:
+  run:
+    working-directory: pkgs/extension_discovery
+
 jobs:
   build:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: pkgs/extension_discovery
     strategy:
       fail-fast: false
       matrix:
-        sdk: [stable, dev] # {pkgs.versions}
+        sdk: [stable, dev]
         include:
           - sdk: stable
             check-formatting: true

.github/workflows/glob.yaml

@@ -1,5 +1,4 @@
 name: package:glob
-
 permissions: read-all
 
 on:

.github/workflows/graphs.yaml

@@ -1,5 +1,4 @@
 name: package:graphs
-
 permissions: read-all
 
 on:

.github/workflows/health.yaml

@@ -1,4 +1,6 @@
 name: Health
+permissions: read-all
+
 on:
   pull_request:
     branches: [ main ]

.github/workflows/html.yaml

@@ -15,10 +15,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/html/
@@ -28,11 +24,13 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
+      matrix:
+        sdk: [stable, dev]
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
       - uses: dart-lang/setup-dart@e630b99d28a3b71860378cafdc2a067c71107f94
         with:
-          sdk: dev
+          sdk: ${{ matrix.sdk }}
       - id: install
         run: dart pub get
       - run: dart format --output=none --set-exit-if-changed .

.github/workflows/io.yaml

@@ -1,4 +1,5 @@
 name: package:io
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,15 +16,10 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/io/
 
-
 jobs:
   # Check code formatting and static analysis on a single OS (linux)
   # against Dart dev and stable.

.github/workflows/json_rpc_2.yaml

@@ -1,4 +1,5 @@
 name: package:json_rpc_2
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,10 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
-
 defaults:
   run:
     working-directory: pkgs/json_rpc_2/

.github/workflows/markdown.yaml

@@ -1,4 +1,5 @@
 name: package:markdown
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,9 +16,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
 defaults:
   run:
     working-directory: pkgs/markdown/

.github/workflows/markdown_crash_test.yaml

@@ -2,6 +2,7 @@
 # to see if any can provoke a crash.
 
 name: "package:markdown: crash tests"
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.

.github/workflows/markdown_flutter.yaml

@@ -17,9 +17,6 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
-
 jobs:
   smoke-test:
     runs-on: ubuntu-latest

.github/workflows/mime.yaml

@@ -1,4 +1,5 @@
 name: package:mime
+permissions: read-all
 
 on:
   schedule:
@@ -15,13 +16,13 @@ on:
       - '.github/workflows/mime.yaml'
       - 'pkgs/mime/**'
 
+defaults:
+  run:
+    working-directory: pkgs/mime/
+
 jobs:
   build:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: pkgs/mime/
-
     strategy:
       matrix:
         os: [ubuntu-latest]

.github/workflows/no-response.yml

@@ -3,17 +3,17 @@
 
 name: No Response
 
+# All permissions not specified are set to 'none'.
+permissions:
+  issues: write
+  pull-requests: write
+
 # Run as a daily cron.
 on:
   schedule:
     # Every day at 8am
     - cron: '0 8 * * *'
 
-# All permissions not specified are set to 'none'.
-permissions:
-  issues: write
-  pull-requests: write
-
 jobs:
   no-response:
     runs-on: ubuntu-latest

.github/workflows/oauth2.yaml

@@ -1,4 +1,5 @@
 name: package:oauth2
+permissions: read-all
 
 on:
   # Run on PRs and pushes to the default branch.
@@ -15,17 +16,15 @@ on:
   schedule:
     - cron: "0 0 * * 0"
 
-env:
-  PUB_ENVIRONMENT: bot.github
+defaults:
+  run:
+    working-directory: pkgs/oauth2/
 
 jobs:
   # Check code formatting and lints against Dart dev, check analyzer warnings
   # against the oldest supported SDK.
   analyze:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: pkgs/oauth2/
     strategy:
       fail-fast: false
       matrix:
@@ -54,9 +53,6 @@ jobs:
   test:
     needs: analyze
     runs-on: ${{ matrix.os }}
-    defaults:
-      run:
-        working-directory: pkgs/oauth2/
     strategy:
       fail-fast: false
       matrix: