inherit secrets so they reach the npm install for rust-rtc

.github/workflows/build-element-call.yaml

@@ -14,17 +14,13 @@ on:
         description: The build mode for vite. Must be either 'development' or 'production'
         required: false
         default: production
-    secrets:
+    # No `secrets:` block: every caller passes `secrets: inherit`, so the
-      SENTRY_ORG:
+    # repository's secrets reach this workflow without each one being declared
-        required: true
+    # here and threaded through by name at the call sites -- the same pattern
-      SENTRY_PROJECT:
+    # build-and-publish-docker.yaml uses. A secret this workflow starts using
-        required: true
+    # then needs no change to the callers. The ones read below are
-      SENTRY_URL:
+    # MATRIX_RTC_NPM_TOKEN, SENTRY_ORG, SENTRY_PROJECT, SENTRY_URL,
-        required: true
+    # SENTRY_AUTH_TOKEN and CODECOV_TOKEN.
-      SENTRY_AUTH_TOKEN:
-        required: true
-      CODECOV_TOKEN:
-        required: false
 
 jobs:
   build:

.github/workflows/build.yaml

@@ -15,12 +15,7 @@ jobs:
       package: full
       vite_app_version: ${{ github.event.release.tag_name || github.sha }}
       build_mode: ${{ github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'development build') && 'development' || 'production' }}
-    secrets:
+    secrets: inherit
-      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
-      SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
-      SENTRY_URL: ${{ secrets.SENTRY_URL }}
-      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
   deploy_develop:
     # Deploy main branch to call.element.dev after build completes
     if: github.ref == 'refs/heads/main'
@@ -65,12 +60,7 @@ jobs:
       package: embedded
       vite_app_version: ${{ github.event.release.tag_name || github.sha }}
       build_mode: ${{ github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'development build') && 'development' || 'production' }}
-    secrets:
+    secrets: inherit
-      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
-      SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
-      SENTRY_URL: ${{ secrets.SENTRY_URL }}
-      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   build_sdk_element_call:
     # Use the embedded package vite build
@@ -79,12 +69,7 @@ jobs:
       package: sdk
       vite_app_version: ${{ github.event.release.tag_name || github.sha }}
       build_mode: ${{ github.event_name == 'pull_request' && contains(github.event.pull_request.labels.*.name, 'development build') && 'development' || 'production' }}
-    secrets:
+    secrets: inherit
-      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
-      SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
-      SENTRY_URL: ${{ secrets.SENTRY_URL }}
-      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
-      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   build_storybook:
     name: Build Storybook

.github/workflows/publish-embedded-packages.yaml

@@ -66,11 +66,7 @@ jobs:
     with:
       vite_app_version: embedded-${{ needs.versioning.outputs.PREFIXED_VERSION }}
       package: embedded
-    secrets:
+    secrets: inherit
-      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
-      SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
-      SENTRY_URL: ${{ secrets.SENTRY_URL }}
-      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
 
   publish_tarball:
     needs: [build_element_call, versioning]

.github/workflows/publish.yaml

@@ -13,11 +13,7 @@ jobs:
     with:
       package: full
       vite_app_version: ${{ github.event.release.tag_name }} # Using ${{ env.VERSION }} here doesn't work
-    secrets:
+    secrets: inherit
-      SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
-      SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
-      SENTRY_URL: ${{ secrets.SENTRY_URL }}
-      SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
 
   publish_tarball:
     needs: build_element_call