fix: set persist-credentials false only for the release job

otherwise default is true

Author: OmarJaroudi

install-dependencies/action.yaml

@@ -36,7 +36,6 @@ runs:
       if: inputs.checkout-repo == 'true'
       with:
         fetch-depth: 0
-        persist-credentials: false
     - name: Setup tools
       uses: open-turo/action-setup-tools@v2
     - name: Check for yarn.lock

release/action.yaml

@@ -62,9 +62,16 @@ outputs:
 runs:
   using: composite
   steps:
+    - name: Checkout
+      uses: actions/checkout@v4
+      if: inputs.checkout-repo == 'true'
+      with:
+        fetch-depth: ${{ inputs.checkout-fetch-depth }}
+        persist-credentials: false
     - name: Build
       uses: open-turo/actions-node/build@v6
       with:
+        checkout-repo: false
         npm-auth-token: ${{ inputs.npm-auth-token }}
         npm-token: ${{ inputs.npm-token }}
         s3-bucket-name: ${{ inputs.s3-bucket-name }}