From cc3b304043cc9624809030d37a64110e590f9b47 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Mon, 6 Apr 2026 16:54:07 +0530
Subject: [PATCH 1/6] chore: migrate npm publish workflows to use npm trust
 oidc action

---
 .github/workflows/on-merge-lib-infer-diffusion.yml           | 2 +-
 .github/workflows/on-merge-ocr-onnx.yml                      | 2 +-
 .github/workflows/on-merge-qvac-lib-decoder-audio.yml        | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml   | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml         | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml       | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-onnx.yml           | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-parakeet.yml       | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-whispercpp.yml     | 2 +-
 .github/workflows/publish-qvac-lib-registry-server.yml       | 4 ++--
 .github/workflows/publish-sdk.yml                            | 2 +-
 .github/workflows/trigger-reusable-lib-cli.yml               | 2 +-
 13 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/.github/workflows/on-merge-lib-infer-diffusion.yml b/.github/workflows/on-merge-lib-infer-diffusion.yml
index 0e7b640e31..5a79b096ab 100644
--- a/.github/workflows/on-merge-lib-infer-diffusion.yml
+++ b/.github/workflows/on-merge-lib-infer-diffusion.yml
@@ -212,7 +212,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-ocr-onnx.yml b/.github/workflows/on-merge-ocr-onnx.yml
index 2e9da6211a..ce3f0ee8cc 100644
--- a/.github/workflows/on-merge-ocr-onnx.yml
+++ b/.github/workflows/on-merge-ocr-onnx.yml
@@ -188,7 +188,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
index 7916a8affd..50fafbe55b 100644
--- a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
@@ -180,7 +180,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
index 8bc22f3cec..818973d2fd 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
@@ -180,7 +180,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
index 81a08e312e..fd410dad3c 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
@@ -213,7 +213,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
index c7a9f40dac..db4c8d40c1 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
@@ -182,7 +182,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
index 356022b5d6..7dae0a279b 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
@@ -178,7 +178,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
index dca50b21a2..d97c0071e5 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
@@ -181,7 +181,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
index dd609d4ec4..e7e06a2a66 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
@@ -206,7 +206,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
index 012ed1d3f8..9abe32df9c 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
@@ -216,7 +216,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/publish-qvac-lib-registry-server.yml b/.github/workflows/publish-qvac-lib-registry-server.yml
index b9b9d9d396..6dbaf9e488 100644
--- a/.github/workflows/publish-qvac-lib-registry-server.yml
+++ b/.github/workflows/publish-qvac-lib-registry-server.yml
@@ -270,7 +270,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
@@ -445,7 +445,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index fe65145ae9..b58d9207e6 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -377,7 +377,7 @@ jobs:
 
       - name: Publish to NPM Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
diff --git a/.github/workflows/trigger-reusable-lib-cli.yml b/.github/workflows/trigger-reusable-lib-cli.yml
index 0e978fc4f0..3a577343d5 100644
--- a/.github/workflows/trigger-reusable-lib-cli.yml
+++ b/.github/workflows/trigger-reusable-lib-cli.yml
@@ -179,7 +179,7 @@ jobs:
 
       - name: Publish to NPM
         id: publish
-        uses: ./.github/actions/publish-library-to-npm
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
           secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"

From b4435ac70f6d1390b060ef43fb310b706b779592 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Mon, 6 Apr 2026 17:16:08 +0530
Subject: [PATCH 2/6] fix: remove the secret token from the workflows

---
 .github/workflows/on-merge-lib-infer-diffusion.yml           | 1 -
 .github/workflows/on-merge-ocr-onnx.yml                      | 1 -
 .github/workflows/on-merge-qvac-lib-decoder-audio.yml        | 1 -
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml | 1 -
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml   | 1 -
 .github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml         | 1 -
 .github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml       | 1 -
 .github/workflows/on-merge-qvac-lib-infer-onnx.yml           | 1 -
 .github/workflows/on-merge-qvac-lib-infer-parakeet.yml       | 1 -
 .github/workflows/on-merge-qvac-lib-infer-whispercpp.yml     | 1 -
 .github/workflows/publish-qvac-lib-registry-server.yml       | 2 --
 .github/workflows/publish-sdk.yml                            | 1 -
 .github/workflows/trigger-reusable-lib-cli.yml               | 1 -
 13 files changed, 14 deletions(-)

diff --git a/.github/workflows/on-merge-lib-infer-diffusion.yml b/.github/workflows/on-merge-lib-infer-diffusion.yml
index 5a79b096ab..992bd6fb30 100644
--- a/.github/workflows/on-merge-lib-infer-diffusion.yml
+++ b/.github/workflows/on-merge-lib-infer-diffusion.yml
@@ -214,7 +214,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/lib-infer-diffusion
           repo_name: "diffusion-cpp"
diff --git a/.github/workflows/on-merge-ocr-onnx.yml b/.github/workflows/on-merge-ocr-onnx.yml
index ce3f0ee8cc..48c2905933 100644
--- a/.github/workflows/on-merge-ocr-onnx.yml
+++ b/.github/workflows/on-merge-ocr-onnx.yml
@@ -190,7 +190,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}
           repo_name: "onnx-ocr"
diff --git a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
index 50fafbe55b..f9408b852e 100644
--- a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
@@ -182,7 +182,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           repo_name: "decoder-audio"
           git-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
index 818973d2fd..c183d48784 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
@@ -182,7 +182,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-llamacpp-embed
           repo_name: "llamacpp-embed"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
index fd410dad3c..86e528fcca 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
@@ -215,7 +215,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-llamacpp-llm
           repo_name: "llamacpp-llm"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
index db4c8d40c1..0dc1d4a780 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
@@ -184,7 +184,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}
           repo_name: "nmtcpp"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
index 7dae0a279b..e3c404df3d 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
@@ -180,7 +180,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           path: ${{ env.WORKDIR }}
           repo_name: "onnx-tts"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
index d97c0071e5..374fe13929 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
@@ -183,7 +183,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-onnx
           repo_name: "onnx"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
index e7e06a2a66..6d96a7a2d1 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
@@ -208,7 +208,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-parakeet
           repo_name: "parakeet"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
index 9abe32df9c..c2bc1531d8 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
@@ -218,7 +218,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.WORKDIR }}
           repo_name: "whispercpp"
diff --git a/.github/workflows/publish-qvac-lib-registry-server.yml b/.github/workflows/publish-qvac-lib-registry-server.yml
index 6dbaf9e488..72b051b769 100644
--- a/.github/workflows/publish-qvac-lib-registry-server.yml
+++ b/.github/workflows/publish-qvac-lib-registry-server.yml
@@ -272,7 +272,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}/shared
           repo_name: "registry-server"
@@ -447,7 +446,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}/client
           repo_name: "registry-client"
diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index b58d9207e6..8ffa8ec4ee 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -379,7 +379,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           git-token: ${{ secrets.GITHUB_TOKEN }}
           repo_name: sdk
diff --git a/.github/workflows/trigger-reusable-lib-cli.yml b/.github/workflows/trigger-reusable-lib-cli.yml
index 3a577343d5..4af1713612 100644
--- a/.github/workflows/trigger-reusable-lib-cli.yml
+++ b/.github/workflows/trigger-reusable-lib-cli.yml
@@ -181,7 +181,6 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
-          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           git-token: ${{ secrets.GITHUB_TOKEN }}
           repo_name: cli

From 5b91606ad6712fe29444887c0645ceaf3497ed99 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Mon, 6 Apr 2026 17:33:17 +0530
Subject: [PATCH 3/6] fix: permissions on the workflows for npm trust

---
 .github/workflows/on-merge-lib-infer-diffusion.yml           | 1 +
 .github/workflows/on-merge-ocr-onnx.yml                      | 1 +
 .github/workflows/on-merge-qvac-lib-decoder-audio.yml        | 1 +
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml | 1 +
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml   | 1 +
 .github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml         | 1 +
 .github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml       | 1 +
 .github/workflows/on-merge-qvac-lib-infer-onnx.yml           | 1 +
 .github/workflows/on-merge-qvac-lib-infer-parakeet.yml       | 1 +
 .github/workflows/on-merge-qvac-lib-infer-whispercpp.yml     | 1 +
 .github/workflows/publish-qvac-lib-registry-server.yml       | 2 ++
 .github/workflows/publish-sdk.yml                            | 1 +
 12 files changed, 13 insertions(+)

diff --git a/.github/workflows/on-merge-lib-infer-diffusion.yml b/.github/workflows/on-merge-lib-infer-diffusion.yml
index 992bd6fb30..c6214de5f6 100644
--- a/.github/workflows/on-merge-lib-infer-diffusion.yml
+++ b/.github/workflows/on-merge-lib-infer-diffusion.yml
@@ -185,6 +185,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/on-merge-ocr-onnx.yml b/.github/workflows/on-merge-ocr-onnx.yml
index 48c2905933..acb05a72d4 100644
--- a/.github/workflows/on-merge-ocr-onnx.yml
+++ b/.github/workflows/on-merge-ocr-onnx.yml
@@ -172,6 +172,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     env:
       PKG_DIR: packages/ocr-onnx
     steps:
diff --git a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
index f9408b852e..efbff08ebc 100644
--- a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
@@ -174,6 +174,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
index c183d48784..097b2d3a30 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
@@ -166,6 +166,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
index 86e528fcca..0f4f853383 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
@@ -186,6 +186,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
index 0dc1d4a780..f604bd10e9 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
@@ -168,6 +168,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     env:
       PKG_DIR: packages/qvac-lib-infer-nmtcpp
     steps:
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
index e3c404df3d..bcb54afb8d 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
@@ -164,6 +164,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     env:
       WORKDIR: packages/qvac-lib-infer-onnx-tts
     steps:
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
index 374fe13929..282c25e208 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
@@ -165,6 +165,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     env:
       PKG_DIR: packages/qvac-lib-infer-onnx
     steps:
diff --git a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
index 6d96a7a2d1..6f816c698c 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
@@ -194,6 +194,7 @@ jobs:
     permissions:
       contents: read
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
index c2bc1531d8..3282b35c3b 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
@@ -200,6 +200,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     env:
       WORKDIR: packages/qvac-lib-infer-whispercpp
     steps:
diff --git a/.github/workflows/publish-qvac-lib-registry-server.yml b/.github/workflows/publish-qvac-lib-registry-server.yml
index 72b051b769..0f102e214f 100644
--- a/.github/workflows/publish-qvac-lib-registry-server.yml
+++ b/.github/workflows/publish-qvac-lib-registry-server.yml
@@ -252,6 +252,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
@@ -424,6 +425,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index 8ffa8ec4ee..027b50814e 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -365,6 +365,7 @@ jobs:
     permissions:
       contents: write
       packages: write
+      id-token: write
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2

From ee1b318c55cfb108f77d68554d945a9678d97824 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Mon, 6 Apr 2026 20:34:52 +0530
Subject: [PATCH 4/6] refactor: changed the qvac-devops actions to v1.1.8

---
 .github/workflows/approval-worker.yml                     | 2 +-
 .github/workflows/on-merge-lib-infer-diffusion.yml        | 2 +-
 .github/workflows/on-merge-ocr-onnx.yml                   | 2 +-
 .github/workflows/on-merge-qvac-lib-decoder-audio.yml     | 2 +-
 .../workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml  | 2 +-
 .../workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml    | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml      | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml    | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-onnx.yml        | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-parakeet.yml    | 2 +-
 .github/workflows/on-merge-qvac-lib-infer-whispercpp.yml  | 2 +-
 .github/workflows/on-pr-close-lib-infer-diffusion.yml     | 2 +-
 .github/workflows/on-pr-close-ocr-onnx.yml                | 2 +-
 .github/workflows/on-pr-close-qvac-lib-decoder-audio.yml  | 2 +-
 .../on-pr-close-qvac-lib-infer-llamacpp-embed.yml         | 2 +-
 .../workflows/on-pr-close-qvac-lib-infer-llamacpp-llm.yml | 2 +-
 .github/workflows/on-pr-close-qvac-lib-infer-nmtcpp.yml   | 2 +-
 .github/workflows/on-pr-close-qvac-lib-infer-onnx-tts.yml | 2 +-
 .github/workflows/on-pr-close-qvac-lib-infer-onnx.yml     | 2 +-
 .github/workflows/on-pr-close-qvac-lib-infer-parakeet.yml | 2 +-
 .../workflows/on-pr-close-qvac-lib-infer-whispercpp.yml   | 2 +-
 .github/workflows/on-pr-lib-infer-diffusion.yml           | 6 +++---
 .github/workflows/on-pr-ocr-onnx.yml                      | 8 ++++----
 .github/workflows/on-pr-qvac-lib-decoder-audio.yml        | 4 ++--
 .github/workflows/on-pr-qvac-lib-infer-llamacpp-embed.yml | 6 +++---
 .github/workflows/on-pr-qvac-lib-infer-llamacpp-llm.yml   | 6 +++---
 .github/workflows/on-pr-qvac-lib-infer-nmtcpp.yml         | 6 +++---
 .github/workflows/on-pr-qvac-lib-infer-onnx-tts.yml       | 6 +++---
 .github/workflows/on-pr-qvac-lib-infer-onnx.yml           | 8 ++++----
 .github/workflows/on-pr-qvac-lib-infer-parakeet.yml       | 6 +++---
 .github/workflows/on-pr-qvac-lib-infer-whispercpp.yml     | 6 +++---
 .../workflows/pr-test-qvac-lib-inference-addon-cpp.yml    | 2 +-
 .github/workflows/publish-qvac-lib-registry-server.yml    | 4 ++--
 .github/workflows/publish-sdk.yml                         | 2 +-
 .github/workflows/trigger-reusable-lib-cli.yml            | 6 +++---
 .github/workflows/trigger-reusable-lib-error.yml          | 8 ++++----
 .github/workflows/trigger-reusable-lib-logging.yml        | 8 ++++----
 .../trigger-reusable-lib-qvac-lib-diagnostics.yml         | 8 ++++----
 .../workflows/trigger-reusable-lib-qvac-lib-dl-base.yml   | 8 ++++----
 .../trigger-reusable-lib-qvac-lib-dl-filesystem.yml       | 8 ++++----
 .../trigger-reusable-lib-qvac-lib-dl-hyperdrive.yml       | 8 ++++----
 .../trigger-reusable-lib-qvac-lib-infer-base.yml          | 8 ++++----
 ...trigger-reusable-lib-qvac-lib-langdetect-text-cld2.yml | 8 ++++----
 .../trigger-reusable-lib-qvac-lib-langdetect-text.yml     | 8 ++++----
 .github/workflows/trigger-reusable-lib-rag.yml            | 8 ++++----
 45 files changed, 99 insertions(+), 99 deletions(-)

diff --git a/.github/workflows/approval-worker.yml b/.github/workflows/approval-worker.yml
index d8dd166576..f4ba7c7b36 100644
--- a/.github/workflows/approval-worker.yml
+++ b/.github/workflows/approval-worker.yml
@@ -48,7 +48,7 @@ jobs:
       pull-requests: write
       statuses: write
       issues: write
-    uses: tetherto/qvac-devops/.github/workflows/approval-check-worker.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/approval-check-worker.yml@v1.1.8
     secrets:
       pat_token: ${{ secrets.PAT_TOKEN }}
     with:
diff --git a/.github/workflows/on-merge-lib-infer-diffusion.yml b/.github/workflows/on-merge-lib-infer-diffusion.yml
index c6214de5f6..895f251c66 100644
--- a/.github/workflows/on-merge-lib-infer-diffusion.yml
+++ b/.github/workflows/on-merge-lib-infer-diffusion.yml
@@ -163,7 +163,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-ocr-onnx.yml b/.github/workflows/on-merge-ocr-onnx.yml
index acb05a72d4..941bf506ba 100644
--- a/.github/workflows/on-merge-ocr-onnx.yml
+++ b/.github/workflows/on-merge-ocr-onnx.yml
@@ -150,7 +150,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
index efbff08ebc..4d76e2b09a 100644
--- a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
@@ -152,7 +152,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
index 097b2d3a30..8d1f26c87a 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
@@ -144,7 +144,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
index 0f4f853383..2f62a363bc 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
@@ -164,7 +164,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
index f604bd10e9..f6cc506a03 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
@@ -147,7 +147,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
index bcb54afb8d..694500be79 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
@@ -142,7 +142,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
index 282c25e208..bf7044da62 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
@@ -144,7 +144,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
index 6f816c698c..7439fd82d4 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
@@ -157,7 +157,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
index 3282b35c3b..e6b41f322e 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
@@ -160,7 +160,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ (github.event_name == 'workflow_dispatch' && github.event.inputs.tag) || needs.publish-logic.outputs.gpr_tag }}
diff --git a/.github/workflows/on-pr-close-lib-infer-diffusion.yml b/.github/workflows/on-pr-close-lib-infer-diffusion.yml
index 89b9fd6896..6085faddf6 100644
--- a/.github/workflows/on-pr-close-lib-infer-diffusion.yml
+++ b/.github/workflows/on-pr-close-lib-infer-diffusion.yml
@@ -52,7 +52,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-ocr-onnx.yml b/.github/workflows/on-pr-close-ocr-onnx.yml
index 46d5f24a83..94fe04b308 100644
--- a/.github/workflows/on-pr-close-ocr-onnx.yml
+++ b/.github/workflows/on-pr-close-ocr-onnx.yml
@@ -49,7 +49,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-decoder-audio.yml b/.github/workflows/on-pr-close-qvac-lib-decoder-audio.yml
index 42dff87fe6..690cfb7ab8 100644
--- a/.github/workflows/on-pr-close-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-decoder-audio.yml
@@ -57,7 +57,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-embed.yml
index 4ad8d1a4ae..4c46411f14 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-embed.yml
@@ -56,7 +56,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-llm.yml
index 86e07cba84..44591da737 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-llamacpp-llm.yml
@@ -52,7 +52,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-pr-close-qvac-lib-infer-nmtcpp.yml
index 7214bd5acd..21a05dc876 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-nmtcpp.yml
@@ -47,7 +47,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-pr-close-qvac-lib-infer-onnx-tts.yml
index 9970c3b402..26c00cf432 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-onnx-tts.yml
@@ -57,7 +57,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-onnx.yml b/.github/workflows/on-pr-close-qvac-lib-infer-onnx.yml
index f0853e318e..c7e6db078c 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-onnx.yml
@@ -49,7 +49,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-parakeet.yml b/.github/workflows/on-pr-close-qvac-lib-infer-parakeet.yml
index 35b6640d26..70f97d435d 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-parakeet.yml
@@ -57,7 +57,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || inputs.pr-number }}
diff --git a/.github/workflows/on-pr-close-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-pr-close-qvac-lib-infer-whispercpp.yml
index 4d6890473f..98fb3798bb 100644
--- a/.github/workflows/on-pr-close-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-pr-close-qvac-lib-infer-whispercpp.yml
@@ -57,7 +57,7 @@ jobs:
   delete-npm-versions-trigger:
     permissions:
       packages: write
-    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-delete-npm-versions.yml@v1.1.8
     with:
       version: ${{ inputs.version }}
       pr-number: ${{ github.event_name == 'pull_request' && github.event.pull_request.number || inputs.pr-number }}
diff --git a/.github/workflows/on-pr-lib-infer-diffusion.yml b/.github/workflows/on-pr-lib-infer-diffusion.yml
index 464015808e..63ea0bf835 100644
--- a/.github/workflows/on-pr-lib-infer-diffusion.yml
+++ b/.github/workflows/on-pr-lib-infer-diffusion.yml
@@ -51,7 +51,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -71,7 +71,7 @@ jobs:
 
   cpp-lint:
     if: needs.authorize.outputs.allowed == 'true'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     needs: authorize
     secrets: inherit
     with:
@@ -158,7 +158,7 @@ jobs:
         ts-checks,
       ]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/on-pr-ocr-onnx.yml b/.github/workflows/on-pr-ocr-onnx.yml
index 71315ee801..31af629170 100644
--- a/.github/workflows/on-pr-ocr-onnx.yml
+++ b/.github/workflows/on-pr-ocr-onnx.yml
@@ -106,7 +106,7 @@ jobs:
 
       - name: Verify that yaml files are formatted
         id: yamlfmt
-        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.8
         continue-on-error: true
 
       - name: Check for disallowed dependencies
@@ -122,7 +122,7 @@ jobs:
       - name: Run JavaScript tests
         id: run_js_tests
         continue-on-error: true
-        uses: tetherto/qvac-devops/.github/actions/run-lint-and-unit-tests@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/run-lint-and-unit-tests@v1.1.8
         with:
           npm-token: ${{ secrets.NPM_TOKEN }}
           gpr-token: ${{ secrets.GITHUB_TOKEN }}
@@ -161,7 +161,7 @@ jobs:
   cpp-lint:
     needs: [authorize, changes]
     if: needs.authorize.outputs.allowed == 'true' || github.event_name == 'workflow_dispatch'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ github.event.pull_request.base.sha || github.sha }}
@@ -224,7 +224,7 @@ jobs:
   merge-guard:
     needs: [authorize, changes, sanity-checks, prebuild, run-integration-tests, run-mobile-integration-tests]
     if: always() && (needs.changes.outputs.pkg == 'true' || github.event_name == 'workflow_dispatch')
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' }}
       build-status: ${{ needs.prebuild.result == 'success' }}
diff --git a/.github/workflows/on-pr-qvac-lib-decoder-audio.yml b/.github/workflows/on-pr-qvac-lib-decoder-audio.yml
index d6b409c950..13030b040d 100644
--- a/.github/workflows/on-pr-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-pr-qvac-lib-decoder-audio.yml
@@ -138,7 +138,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -173,7 +173,7 @@ jobs:
   merge-guard:
     needs: [authorize, sanity-checks, run-integration-tests, run-mobile-integration-tests]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' }}
       build-status: ${{ needs.run-integration-tests.result == 'success' || needs.run-integration-tests.result == 'skipped' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-pr-qvac-lib-infer-llamacpp-embed.yml
index 8eaa2da3be..d25a180a93 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-llamacpp-embed.yml
@@ -46,7 +46,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -57,7 +57,7 @@ jobs:
   cpp-lint:
     if: needs.authorize.outputs.allowed == 'true'
     needs: authorize
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ github.event.pull_request.base.sha }}
@@ -146,7 +146,7 @@ jobs:
   merge-guard:
     needs: [authorize, sanity-checks, cpp-lint, cpp-tests, prebuild, integration-tests, run-mobile-integration-tests, ts-checks]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' }}
       build-status: ${{ needs.prebuild.result == 'success' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-pr-qvac-lib-infer-llamacpp-llm.yml
index df9cce0ae2..d4a51fe824 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-llamacpp-llm.yml
@@ -51,7 +51,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -71,7 +71,7 @@ jobs:
 
   cpp-lint:
     if: needs.authorize.outputs.allowed == 'true'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     needs: authorize
     secrets: inherit
     with:
@@ -158,7 +158,7 @@ jobs:
         ts-checks,
       ]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' }}
       build-status: ${{ needs.prebuild.result == 'success'}}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-pr-qvac-lib-infer-nmtcpp.yml
index c91b5a392e..6900532d22 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-nmtcpp.yml
@@ -64,7 +64,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -112,7 +112,7 @@ jobs:
       always() &&
        needs.authorize.outputs.allowed == 'true' &&
       (needs.changes.outputs.pkg == 'true' || github.event_name == 'workflow_dispatch')
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ github.event.pull_request.base.sha || github.event.before || 'HEAD~1' }}
@@ -193,7 +193,7 @@ jobs:
         run-mobile-integration-tests,
       ]
     if: always() && (needs.changes.outputs.pkg == 'true' || github.event_name == 'workflow_dispatch')
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' && needs.cpp-tests.result == 'success' && needs.ts-checks.result == 'success' }}
       build-status: ${{ needs.prebuild.result == 'success' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-pr-qvac-lib-infer-onnx-tts.yml
index 50e8004632..06389bf8de 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-onnx-tts.yml
@@ -138,7 +138,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -149,7 +149,7 @@ jobs:
   cpp-lint:
     needs: [authorize, context]
     if: needs.authorize.outputs.allowed == 'true'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ needs.context.outputs.base_sha }}
@@ -221,7 +221,7 @@ jobs:
         run-mobile-integration-tests,
       ]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' && (needs.cpp-lint.result == 'success' || needs.cpp-lint.result == 'skipped') && (needs.cpp-tests-coverage.result == 'success' || needs.cpp-tests-coverage.result == 'skipped') }}
       build-status: ${{ needs.prebuild.result == 'success' || needs.prebuild.result == 'skipped' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-onnx.yml b/.github/workflows/on-pr-qvac-lib-infer-onnx.yml
index fc4805f54e..2a07d65d83 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-onnx.yml
@@ -104,7 +104,7 @@ jobs:
 
       - name: Verify that yaml files are formatted
         id: yamlfmt
-        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.8
         continue-on-error: true
 
       - name: Check for disallowed dependencies
@@ -120,7 +120,7 @@ jobs:
       - name: Run JavaScript tests
         id: run_js_tests
         continue-on-error: true
-        uses: tetherto/qvac-devops/.github/actions/run-lint-and-unit-tests@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/run-lint-and-unit-tests@v1.1.8
         with:
           npm-token: ${{ secrets.NPM_TOKEN }}
           gpr-token: ${{ secrets.GITHUB_TOKEN }}
@@ -159,7 +159,7 @@ jobs:
   cpp-lint:
     needs: [authorize, changes]
     if: needs.authorize.outputs.allowed == 'true' || github.event_name == 'workflow_dispatch'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ github.event.pull_request.base.sha || github.sha }}
@@ -187,7 +187,7 @@ jobs:
   merge-guard:
     needs: [authorize, changes, sanity-checks, prebuild]
     if: always() && (needs.changes.outputs.pkg == 'true' || github.event_name == 'workflow_dispatch')
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' }}
       build-status: ${{ needs.prebuild.result == 'success' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-parakeet.yml b/.github/workflows/on-pr-qvac-lib-infer-parakeet.yml
index 1d8e5abb4c..bddbfc3802 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-parakeet.yml
@@ -123,7 +123,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -134,7 +134,7 @@ jobs:
   cpp-lint:
     needs: context
     if: needs.context.outputs.run_verify == 'true' || github.event_name == 'workflow_dispatch'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ needs.context.outputs.base_sha }}
@@ -193,7 +193,7 @@ jobs:
   merge-guard:
     needs: [authorize, sanity-checks, cpp-lint, cpp-tests-coverage, prebuild, run-integration-tests, run-mobile-integration-tests]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' && (needs.cpp-lint.result == 'success' || needs.cpp-lint.result == 'skipped') && (needs.cpp-tests-coverage.result == 'success' || needs.cpp-tests-coverage.result == 'skipped') }}
       build-status: ${{ needs.prebuild.result == 'success' || needs.prebuild.result == 'skipped' }}
diff --git a/.github/workflows/on-pr-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-pr-qvac-lib-infer-whispercpp.yml
index 1846f919c3..09ae1fde58 100644
--- a/.github/workflows/on-pr-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-pr-qvac-lib-infer-whispercpp.yml
@@ -138,7 +138,7 @@ jobs:
     environment: release
     steps:
       - name: Run Sanity checks
-        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/sanity-checks@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           npm-token: ${{ secrets.NPM_TOKEN }}
@@ -149,7 +149,7 @@ jobs:
   cpp-lint:
     needs: [authorize, context]
     if: needs.authorize.outputs.allowed == 'true'
-    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/cpp-lint.yaml@v1.1.8
     secrets: inherit
     with:
       sha: ${{ needs.context.outputs.base_sha }}
@@ -209,7 +209,7 @@ jobs:
   merge-guard:
     needs: [authorize, sanity-checks, cpp-lint, cpp-tests-coverage, prebuild, run-integration-tests, run-mobile-integration-tests]
     if: always()
-    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-pr.yml@v1.1.8
     with:
       sanity-checks-status: ${{ needs.sanity-checks.result == 'success' && (needs.cpp-lint.result == 'success' || needs.cpp-lint.result == 'skipped') && (needs.cpp-tests-coverage.result == 'success' || needs.cpp-tests-coverage.result == 'skipped') }}
       build-status: ${{ needs.prebuild.result == 'success' || needs.prebuild.result == 'skipped' }}
diff --git a/.github/workflows/pr-test-qvac-lib-inference-addon-cpp.yml b/.github/workflows/pr-test-qvac-lib-inference-addon-cpp.yml
index 24a47b6824..ea94cdf867 100644
--- a/.github/workflows/pr-test-qvac-lib-inference-addon-cpp.yml
+++ b/.github/workflows/pr-test-qvac-lib-inference-addon-cpp.yml
@@ -74,7 +74,7 @@ jobs:
           token: ${{ secrets.PAT_TOKEN }}
 
       - name: yamlfmt
-        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/yamlfmt@v1.1.8
         with:
           workdir: ${{ env.PKG_DIR }}
         
diff --git a/.github/workflows/publish-qvac-lib-registry-server.yml b/.github/workflows/publish-qvac-lib-registry-server.yml
index 0f102e214f..dbf6d53722 100644
--- a/.github/workflows/publish-qvac-lib-registry-server.yml
+++ b/.github/workflows/publish-qvac-lib-registry-server.yml
@@ -230,7 +230,7 @@ jobs:
           echo "//npm.pkg.github.com/:_authToken=${{ secrets.GITHUB_TOKEN }}" >> ~/.npmrc
 
       - name: Publish to GitHub Package Registry
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           workdir: ${{ env.PKG_DIR }}/shared
@@ -403,7 +403,7 @@ jobs:
           echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" >> ~/.npmrc
 
       - name: Publish to GitHub Package Registry
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           workdir: ${{ env.PKG_DIR }}/client
diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index 027b50814e..b953041373 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -345,7 +345,7 @@ jobs:
 
       - name: Publish to GitHub Package Registry
         id: publish
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           tag: ${{ inputs.tag || github.event.inputs.tag || needs.publish-logic.outputs.gpr_tag || 'dev'}}
diff --git a/.github/workflows/trigger-reusable-lib-cli.yml b/.github/workflows/trigger-reusable-lib-cli.yml
index 4af1713612..6ac87aac7b 100644
--- a/.github/workflows/trigger-reusable-lib-cli.yml
+++ b/.github/workflows/trigger-reusable-lib-cli.yml
@@ -145,7 +145,7 @@ jobs:
         uses: ./.github/actions/cli-rewrite-sdk-scope-for-gpr
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -222,7 +222,7 @@ jobs:
         uses: ./.github/actions/cli-rewrite-sdk-scope-for-gpr
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -254,7 +254,7 @@ jobs:
         uses: ./.github/actions/cli-rewrite-sdk-scope-for-gpr
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-error.yml b/.github/workflows/trigger-reusable-lib-error.yml
index c551e79068..06c28240e2 100644
--- a/.github/workflows/trigger-reusable-lib-error.yml
+++ b/.github/workflows/trigger-reusable-lib-error.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/error
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-logging.yml b/.github/workflows/trigger-reusable-lib-logging.yml
index e2ea3bb38b..8d7c20624b 100644
--- a/.github/workflows/trigger-reusable-lib-logging.yml
+++ b/.github/workflows/trigger-reusable-lib-logging.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/logging
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-diagnostics.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-diagnostics.yml
index 427814cdfe..d2718281eb 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-diagnostics.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-diagnostics.yml
@@ -99,7 +99,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -115,7 +115,7 @@ jobs:
       packages: write
       id-token: write
     if: needs.publish-logic.outputs.publish_release == 'true'
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-diagnostics
@@ -150,7 +150,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -173,7 +173,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-base.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-base.yml
index 285ebc376b..e600f38124 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-base.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-base.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-dl-base
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-filesystem.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-filesystem.yml
index 9ac75ac3aa..bcf6439b54 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-filesystem.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-filesystem.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-dl-filesystem
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-hyperdrive.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-hyperdrive.yml
index 4bcd8beeeb..1d41d93123 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-dl-hyperdrive.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-dl-hyperdrive.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-dl-hyperdrive
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-infer-base.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-infer-base.yml
index 92551969a6..0ab66209a9 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-infer-base.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-infer-base.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-infer-base
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text-cld2.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text-cld2.yml
index b13044ec03..9ab3652bb7 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text-cld2.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text-cld2.yml
@@ -149,7 +149,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -168,7 +168,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-langdetect-text-cld2
@@ -189,7 +189,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -212,7 +212,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text.yml b/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text.yml
index 56aed5ab37..16008fe4c4 100644
--- a/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text.yml
+++ b/.github/workflows/trigger-reusable-lib-qvac-lib-langdetect-text.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/qvac-lib-langdetect-text
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/trigger-reusable-lib-rag.yml b/.github/workflows/trigger-reusable-lib-rag.yml
index 70a8b293f9..1264b4cedd 100644
--- a/.github/workflows/trigger-reusable-lib-rag.yml
+++ b/.github/workflows/trigger-reusable-lib-rag.yml
@@ -109,7 +109,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (dev)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -128,7 +128,7 @@ jobs:
       always() &&
       needs.publish-logic.outputs.publish_release == 'true' &&
       (needs.release-merge-guard.result == 'success' || needs.release-merge-guard.result == 'skipped')
-    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.7
+    uses: tetherto/qvac-devops/.github/workflows/public-reusable-npm.yml@v1.1.8
     secrets: inherit
     with:
       workdir: packages/rag
@@ -163,7 +163,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (feature)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}
@@ -186,7 +186,7 @@ jobs:
           fetch-depth: 0
 
       - name: Publish to GitHub Packages (tmp)
-        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.7
+        uses: tetherto/qvac-devops/.github/actions/publish-library-to-gpr@v1.1.8
         with:
           secret-token: ${{ secrets.GITHUB_TOKEN }}
           pat-token: ${{ secrets.PAT_TOKEN }}

From fb1c58ec9e4c48ab602a67ae21a41463d39320c5 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Mon, 6 Apr 2026 20:45:58 +0530
Subject: [PATCH 5/6] refactor: added NPM_TOKEN

---
 .github/workflows/on-merge-lib-infer-diffusion.yml           | 1 +
 .github/workflows/on-merge-ocr-onnx.yml                      | 1 +
 .github/workflows/on-merge-qvac-lib-decoder-audio.yml        | 1 +
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml | 1 +
 .github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml   | 1 +
 .github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml         | 1 +
 .github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml       | 1 +
 .github/workflows/on-merge-qvac-lib-infer-onnx.yml           | 1 +
 .github/workflows/on-merge-qvac-lib-infer-parakeet.yml       | 1 +
 .github/workflows/on-merge-qvac-lib-infer-whispercpp.yml     | 1 +
 .github/workflows/publish-qvac-lib-registry-server.yml       | 2 ++
 .github/workflows/publish-sdk.yml                            | 1 +
 .github/workflows/trigger-reusable-lib-cli.yml               | 1 +
 13 files changed, 14 insertions(+)

diff --git a/.github/workflows/on-merge-lib-infer-diffusion.yml b/.github/workflows/on-merge-lib-infer-diffusion.yml
index 895f251c66..a5d85c6362 100644
--- a/.github/workflows/on-merge-lib-infer-diffusion.yml
+++ b/.github/workflows/on-merge-lib-infer-diffusion.yml
@@ -215,6 +215,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/lib-infer-diffusion
           repo_name: "diffusion-cpp"
diff --git a/.github/workflows/on-merge-ocr-onnx.yml b/.github/workflows/on-merge-ocr-onnx.yml
index 941bf506ba..cde216c77c 100644
--- a/.github/workflows/on-merge-ocr-onnx.yml
+++ b/.github/workflows/on-merge-ocr-onnx.yml
@@ -191,6 +191,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}
           repo_name: "onnx-ocr"
diff --git a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
index 4d76e2b09a..21ef4671e2 100644
--- a/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
+++ b/.github/workflows/on-merge-qvac-lib-decoder-audio.yml
@@ -183,6 +183,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           repo_name: "decoder-audio"
           git-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
index 8d1f26c87a..765702f7e5 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-embed.yml
@@ -183,6 +183,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-llamacpp-embed
           repo_name: "llamacpp-embed"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
index 2f62a363bc..3d45ee2838 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-llamacpp-llm.yml
@@ -216,6 +216,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-llamacpp-llm
           repo_name: "llamacpp-llm"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
index f6cc506a03..f0f15a029c 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-nmtcpp.yml
@@ -185,6 +185,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}
           repo_name: "nmtcpp"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
index 694500be79..1a425c8879 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx-tts.yml
@@ -181,6 +181,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           path: ${{ env.WORKDIR }}
           repo_name: "onnx-tts"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
index bf7044da62..8b5238dbbc 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-onnx.yml
@@ -184,6 +184,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-onnx
           repo_name: "onnx"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
index 7439fd82d4..6343498773 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-parakeet.yml
@@ -209,6 +209,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: packages/qvac-lib-infer-parakeet
           repo_name: "parakeet"
diff --git a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
index e6b41f322e..32a836e8e4 100644
--- a/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
+++ b/.github/workflows/on-merge-qvac-lib-infer-whispercpp.yml
@@ -219,6 +219,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.WORKDIR }}
           repo_name: "whispercpp"
diff --git a/.github/workflows/publish-qvac-lib-registry-server.yml b/.github/workflows/publish-qvac-lib-registry-server.yml
index dbf6d53722..3e3133504b 100644
--- a/.github/workflows/publish-qvac-lib-registry-server.yml
+++ b/.github/workflows/publish-qvac-lib-registry-server.yml
@@ -273,6 +273,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}/shared
           repo_name: "registry-server"
@@ -448,6 +449,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           workdir: ${{ env.PKG_DIR }}/client
           repo_name: "registry-client"
diff --git a/.github/workflows/publish-sdk.yml b/.github/workflows/publish-sdk.yml
index b953041373..ad2f3bd88c 100644
--- a/.github/workflows/publish-sdk.yml
+++ b/.github/workflows/publish-sdk.yml
@@ -380,6 +380,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           git-token: ${{ secrets.GITHUB_TOKEN }}
           repo_name: sdk
diff --git a/.github/workflows/trigger-reusable-lib-cli.yml b/.github/workflows/trigger-reusable-lib-cli.yml
index 6ac87aac7b..6b499c2938 100644
--- a/.github/workflows/trigger-reusable-lib-cli.yml
+++ b/.github/workflows/trigger-reusable-lib-cli.yml
@@ -181,6 +181,7 @@ jobs:
         id: publish
         uses: tetherto/qvac-devops/.github/actions/publish-library-to-npm-oidc@v1.1.8
         with:
+          secret-token: ${{ secrets.NPM_TOKEN }}
           tag: "latest"
           git-token: ${{ secrets.GITHUB_TOKEN }}
           repo_name: cli

From eab1655702bb05947c8abd5bfaa2f4e426c870d9 Mon Sep 17 00:00:00 2001
From: sidj-thr <siddharth.jain@tether.io>
Date: Tue, 7 Apr 2026 19:47:15 +0530
Subject: [PATCH 6/6] feat: reflect package.json changes on the PR

---
 packages/qvac-lib-decoder-audio/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/qvac-lib-decoder-audio/package.json b/packages/qvac-lib-decoder-audio/package.json
index fc8666e8b1..7243715795 100644
--- a/packages/qvac-lib-decoder-audio/package.json
+++ b/packages/qvac-lib-decoder-audio/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/decoder-audio",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "",
   "license": "Apache-2.0",
   "author": "Tether",