All upstream blockers resolved: - common-repo/common-repo#235: source-declared template-vars passthrough (0.28.0) - common-repo/common-repo#239: ${{ }} GHA expression collision fix (0.28.3) - common-repo/common-repo#249: consumer override cache key fix (0.28.4) Requires common-repo >= 0.28.4. CI sync check skips release.yaml since src/ uses template vars while top-level uses hardcoded christmas-island defaults. Consumers can override GH App credentials: ```yaml - repo: url: https://github.com/christmas-island/cr-semantic-release ref: v2.0.0 with: - template-vars: GH_APP_ID_VAR: MY_APP_ID GH_APP_KEY_SECRET: MY_APP_KEY GH_APP_OWNER: my-org ```