From ac6e70809b6d32cff4c2281bb6ee493984761250 Mon Sep 17 00:00:00 2001
From: Ludovic Henry <git@ludovic.dev>
Date: Fri, 18 Sep 2026 11:06:53 +0000
Subject: [PATCH 1/2] ci: open the nightly PRs as the riseproject-dev App

Branches pushed and PRs opened with GITHUB_TOKEN raise no events, so the
per-package upgrade PRs ended up with no checks at all. Mint a riseproject-dev
installation token when RISEPROJECT_APP_ID is set and commit as its bot,
falling back to GITHUB_TOKEN otherwise.
---
 .github/workflows/nightly.yml | 21 +++++++++++++++++----
 ci_scripts/git-identity.sh    | 21 +++++++++++++++++++++
 ci_scripts/update_doc.py      |  5 +----
 docs/workflows.md             | 13 +++++++++++++
 4 files changed, 52 insertions(+), 8 deletions(-)
 create mode 100755 ci_scripts/git-identity.sh

diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index b5ed98e57668..3633ab3b7382 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -25,9 +25,22 @@ jobs:
   check_versions:
     runs-on: ubuntu-latest
     steps:
+      # A branch pushed or a PR opened with GITHUB_TOKEN raises no events, so
+      # the per-package PRs would sit there with no checks at all. Push and open
+      # them as the App instead; without its credentials, or on a pull request
+      # (where a fork or Dependabot has none), the job still runs, it just falls
+      # back to the checkless GITHUB_TOKEN.
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        id: app-token
+        if: ${{ vars.RISEPROJECT_APP_CLIENT_ID != '' && github.event_name != 'pull_request' }}
+        with:
+          client-id: ${{ vars.RISEPROJECT_APP_CLIENT_ID }}
+          private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
+
       - uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
 
       - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
         with:
@@ -37,7 +50,7 @@ jobs:
       # declared again per package, on that package's own branch, below.
       - name: Check versions
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
           SINCE: "2026-09-01"
         run: |
           uv run --with-requirements ci_scripts/requirements.txt python3 ci_scripts/check_versions.py \
@@ -49,14 +62,14 @@ jobs:
       - name: Open or update one PR per package
         if: github.event_name != 'pull_request'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
           REPORTS: ${{ runner.temp }}/reports
         run: |
           set -euo pipefail
 
           base=$(git rev-parse HEAD)
-          git config user.name "github-actions[bot]"
-          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          ci_scripts/git-identity.sh
 
           # Branch off main and re-declare this package alone, so the PR only
           # ever touches its own docs/packages/<pkg>.yaml (plus packages.txt and
diff --git a/ci_scripts/git-identity.sh b/ci_scripts/git-identity.sh
new file mode 100755
index 000000000000..c009ba4219d2
--- /dev/null
+++ b/ci_scripts/git-identity.sh
@@ -0,0 +1,21 @@
+#!/bin/sh
+# SPDX-FileCopyrightText: 2026 The RISE Project
+# SPDX-License-Identifier: MIT
+
+# Configure the identity the automation commits under: the GitHub App bot when
+# the workflow minted an App token (APP_SLUG set by create-github-app-token),
+# the Actions bot otherwise. The numeric account id in the address is what ties
+# a commit to that bot on GitHub, and only the API knows it.
+
+set -eu
+
+if [ -n "${APP_SLUG:-}" ]; then
+    name="${APP_SLUG}[bot]"
+    id=$(gh api "/users/${APP_SLUG}%5Bbot%5D" --jq '.id')
+else
+    name="github-actions[bot]"
+    id=41898282
+fi
+
+git config user.name "$name"
+git config user.email "${id}+${name}@users.noreply.github.com"
diff --git a/ci_scripts/update_doc.py b/ci_scripts/update_doc.py
index 08b7cebcff16..b3c5cc386e80 100644
--- a/ci_scripts/update_doc.py
+++ b/ci_scripts/update_doc.py
@@ -321,10 +321,7 @@ def pr_exists(branch):
 
 
 def configure_git_identity():
-    git_run("config", "user.name", "github-actions[bot]")
-    git_run(
-        "config", "user.email", "41898282+github-actions[bot]@users.noreply.github.com"
-    )
+    subprocess.run([CI_SCRIPTS_DIR / "git-identity.sh"], check=True)
 
 
 def extract_pr_url(stdout):
diff --git a/docs/workflows.md b/docs/workflows.md
index a10b3ff57438..c5eacf3ba86f 100644
--- a/docs/workflows.md
+++ b/docs/workflows.md
@@ -111,6 +111,19 @@ following workflows beyond those used for specific package builds:
    pending ones, or those matching the `version` glob of a
    `workflow_dispatch`).
 
+### The riseproject-dev App
+
+Branches pushed and pull requests opened with the default `GITHUB_TOKEN` raise
+no events, so nothing ever runs on them: the nightly upgrade PRs would sit
+there with no checks. `nightly.yml` therefore mints an installation token for
+the `riseproject-dev` GitHub App and commits as `riseproject-dev[bot]`. It
+needs the repository variable `RISEPROJECT_APP_CLIENT_ID` (the App's Client ID)
+and the repository secret `RISEPROJECT_APP_PRIVATE_KEY` (the App's private key,
+PEM included), and the App must be installed on this repository with read and
+write access to contents and pull requests, plus read access to issues. With
+the variable unset the workflow falls back to `GITHUB_TOKEN` and the
+`github-actions[bot]` identity, checkless as before.
+
 ## The RISC-V Wheels Dashboard
 
 RISE makes use of the [RISC-V

From 1059b2ff1ea6fec5b0fdd41b6d541a3571122b68 Mon Sep 17 00:00:00 2001
From: Ludovic Henry <git@ludovic.dev>
Date: Fri, 18 Sep 2026 12:26:25 +0000
Subject: [PATCH 2/2] ci: publish and document as the riseproject-dev App

The documentation PR is opened from _publish-wheel.yml, so it needs the App
token too, or it keeps landing without checks. A reusable workflow gets no
secret it is not handed, hence the one line in each build workflow.
---
 .github/workflows/_publish-wheel.yml          | 25 ++++++++++++++--
 .github/workflows/build-ada-url.yml           |  2 ++
 .../workflows/build-adbc-driver-manager.yml   |  2 ++
 .../build-adbc-driver-postgresql.yml          |  2 ++
 .../workflows/build-adbc-driver-sqlite.yml    |  2 ++
 .github/workflows/build-aggdraw.yml           |  2 ++
 .github/workflows/build-ahocorasick-rs.yml    |  2 ++
 .github/workflows/build-aiocsv.yml            |  2 ++
 .github/workflows/build-aiokafka.yml          |  2 ++
 .github/workflows/build-aioquic.yml           |  2 ++
 .github/workflows/build-amazon-ion.yml        |  2 ++
 .github/workflows/build-ansible-pylibssh.yml  |  2 ++
 .github/workflows/build-anycrc.yml            |  2 ++
 .github/workflows/build-apache-beam.yml       |  2 ++
 .github/workflows/build-apache-sedona.yml     |  2 ++
 .github/workflows/build-apache-tvm-ffi.yml    |  2 ++
 .github/workflows/build-apsw.yml              |  2 ++
 .github/workflows/build-arc4.yml              |  2 ++
 .github/workflows/build-arch.yml              |  2 ++
 .github/workflows/build-array-record.yml      |  2 ++
 .github/workflows/build-arraykit.yml          |  2 ++
 .github/workflows/build-arro3-core.yml        |  2 ++
 .github/workflows/build-asammdf.yml           |  2 ++
 .github/workflows/build-ast-grep-cli.yml      |  2 ++
 .github/workflows/build-ast-grep-py.yml       |  2 ++
 .github/workflows/build-astc-encoder-py.yml   |  2 ++
 .github/workflows/build-astropy-healpix.yml   |  2 ++
 .github/workflows/build-astropy.yml           |  2 ++
 .github/workflows/build-asv.yml               |  2 ++
 .github/workflows/build-asynch.yml            |  2 ++
 .github/workflows/build-asyncmy.yml           |  2 ++
 .github/workflows/build-asyncpg.yml           |  2 ++
 .github/workflows/build-atomic-dict.yml       |  2 ++
 .github/workflows/build-autobahn.yml          |  2 ++
 .github/workflows/build-awkward-cpp.yml       |  2 ++
 .github/workflows/build-awscrt.yml            |  2 ++
 .github/workflows/build-awslambdaric.yml      |  2 ++
 ...build-backports-datetime-fromisoformat.yml |  2 ++
 .github/workflows/build-base2048.yml          |  2 ++
 .github/workflows/build-based58.yml           |  2 ++
 .github/workflows/build-bcrypt.yml            |  2 ++
 .github/workflows/build-biom-format.yml       |  2 ++
 .github/workflows/build-biopython.yml         |  2 ++
 .github/workflows/build-biotite.yml           |  2 ++
 .github/workflows/build-biotraj.yml           |  2 ++
 .github/workflows/build-bitarray-hardbyte.yml |  2 ++
 .github/workflows/build-bitarray.yml          |  2 ++
 .github/workflows/build-bitstruct.yml         |  2 ++
 .github/workflows/build-black.yml             |  2 ++
 .github/workflows/build-blis.yml              |  2 ++
 .github/workflows/build-blosc.yml             |  2 ++
 .github/workflows/build-blosc2.yml            |  2 ++
 .../workflows/build-bluetooth-data-tools.yml  |  2 ++
 .github/workflows/build-blurhash-python.yml   |  2 ++
 .github/workflows/build-boost-histogram.yml   |  2 ++
 .github/workflows/build-bottleneck.yml        |  2 ++
 .github/workflows/build-brotli.yml            |  2 ++
 .github/workflows/build-brotlicffi.yml        |  2 ++
 .github/workflows/build-bsdiff4.yml           |  2 ++
 .github/workflows/build-btrees.yml            |  2 ++
 .github/workflows/build-burner-redis.yml      |  2 ++
 .github/workflows/build-bx-python.yml         |  2 ++
 .github/workflows/build-c2pa-python.yml       |  2 ++
 .github/workflows/build-cachebox.yml          |  2 ++
 .github/workflows/build-caio.yml              |  2 ++
 .github/workflows/build-capstone.yml          |  2 ++
 .github/workflows/build-cartopy.yml           |  2 ++
 .github/workflows/build-casadi.yml            |  2 ++
 .github/workflows/build-cbor2.yml             |  2 ++
 .github/workflows/build-cchardet.yml          |  2 ++
 .github/workflows/build-cffi.yml              |  2 ++
 .github/workflows/build-cftime.yml            |  2 ++
 .github/workflows/build-chiabip158.yml        |  2 ++
 .github/workflows/build-chompjs.yml           |  2 ++
 .github/workflows/build-chroma-hnswlib.yml    |  2 ++
 .github/workflows/build-chromadb.yml          |  2 ++
 .github/workflows/build-ciso8601.yml          |  2 ++
 .github/workflows/build-citiespy.yml          |  2 ++
 .github/workflows/build-cityhash.yml          |  2 ++
 .github/workflows/build-ckzg.yml              |  2 ++
 .github/workflows/build-clang-format.yml      |  2 ++
 .github/workflows/build-clarabel.yml          |  2 ++
 .github/workflows/build-clevercsv.yml         |  2 ++
 .../workflows/build-clickhouse-cityhash.yml   |  2 ++
 .../workflows/build-clickhouse-connect.yml    |  2 ++
 .github/workflows/build-clickhouse-driver.yml |  2 ++
 .github/workflows/build-cmarkgfm.yml          |  2 ++
 .github/workflows/build-cmeel-boost.yml       |  2 ++
 .github/workflows/build-coacd.yml             |  2 ++
 .github/workflows/build-coincurve.yml         |  2 ++
 .github/workflows/build-complexipy.yml        |  2 ++
 .github/workflows/build-comrak.yml            |  2 ++
 .github/workflows/build-confluent-kafka.yml   |  2 ++
 .../build-connected-components-3d.yml         |  2 ++
 .github/workflows/build-connectorx.yml        |  2 ++
 .github/workflows/build-convertbng.yml        |  2 ++
 .github/workflows/build-coolprop.yml          |  2 ++
 .github/workflows/build-coreforecast.yml      |  2 ++
 .github/workflows/build-correctionlib.yml     |  2 ++
 .github/workflows/build-cramjam.yml           |  2 ++
 .github/workflows/build-crc32c.yml            |  2 ++
 .github/workflows/build-crcmod-plus.yml       |  2 ++
 .github/workflows/build-crick.yml             |  2 ++
 .github/workflows/build-cronexpr.yml          |  2 ++
 .github/workflows/build-cryptg.yml            |  2 ++
 .github/workflows/build-cryptography.yml      |  2 ++
 .github/workflows/build-css-inline.yml        |  2 ++
 .github/workflows/build-ct3.yml               |  2 ++
 .github/workflows/build-ctranslate2.yml       |  2 ++
 .../workflows/build-curated-tokenizers.yml    |  2 ++
 .github/workflows/build-cwcwidth.yml          |  2 ++
 .github/workflows/build-cydifflib.yml         |  2 ++
 .github/workflows/build-cyksuid.yml           |  2 ++
 .github/workflows/build-cymem.yml             |  2 ++
 .github/workflows/build-cysignals.yml         |  2 ++
 .github/workflows/build-cysystemd.yml         |  2 ++
 .github/workflows/build-cython.yml            |  2 ++
 .github/workflows/build-cyvcf2.yml            |  2 ++
 .github/workflows/build-daft.yml              |  2 ++
 .github/workflows/build-databento-dbn.yml     |  2 ++
 .github/workflows/build-datasketches.yml      |  2 ++
 .github/workflows/build-datefinder.yml        |  2 ++
 .github/workflows/build-davey.yml             |  2 ++
 .github/workflows/build-dbt-extractor.yml     |  2 ++
 .github/workflows/build-ddtrace.yml           |  2 ++
 .github/workflows/build-debugpy.yml           |  2 ++
 .github/workflows/build-decord.yml            |  2 ++
 .github/workflows/build-deflate.yml           |  2 ++
 ...uild-delta-kernel-rust-sharing-wrapper.yml |  2 ++
 .github/workflows/build-deltalake.yml         |  2 ++
 .github/workflows/build-deltalite.yml         |  2 ++
 .github/workflows/build-demoparser2.yml       |  2 ++
 .../workflows/build-dependency-injector.yml   |  2 ++
 .github/workflows/build-deptry.yml            |  2 ++
 .github/workflows/build-diptest.yml           |  2 ++
 .github/workflows/build-djade.yml             |  2 ++
 .github/workflows/build-djlint.yml            |  2 ++
 .github/workflows/build-dlib-bin.yml          |  2 ++
 .github/workflows/build-dm-tree.yml           |  2 ++
 .github/workflows/build-dnaio.yml             |  2 ++
 .github/workflows/build-docling-parse.yml     |  2 ++
 .github/workflows/build-doublemetaphone.yml   |  2 ++
 .github/workflows/build-dprint-py.yml         |  2 ++
 .github/workflows/build-dracopy.yml           |  2 ++
 .github/workflows/build-dtaidistance.yml      |  2 ++
 .github/workflows/build-duckdb.yml            |  2 ++
 .github/workflows/build-dukpy.yml             |  2 ++
 .github/workflows/build-dulwich.yml           |  2 ++
 .github/workflows/build-dumb-init.yml         |  2 ++
 .github/workflows/build-eccodeslib.yml        |  2 ++
 .github/workflows/build-ecos.yml              |  2 ++
 .github/workflows/build-editdistance.yml      |  2 ++
 .github/workflows/build-editdistpy.yml        |  2 ++
 .github/workflows/build-edlib.yml             |  2 ++
 .github/workflows/build-edt.yml               |  2 ++
 .github/workflows/build-ephem.yml             |  2 ++
 .github/workflows/build-espeakng-loader.yml   |  2 ++
 .github/workflows/build-extensionclass.yml    |  2 ++
 .github/workflows/build-ezdxf.yml             |  2 ++
 .github/workflows/build-fabio.yml             |  2 ++
 .github/workflows/build-faiss-cpu.yml         |  2 ++
 .../workflows/build-fast-diff-match-patch.yml |  2 ++
 .github/workflows/build-fast-histogram.yml    |  2 ++
 .../workflows/build-fast-simplification.yml   |  2 ++
 .github/workflows/build-fast-walk.yml         |  2 ++
 .github/workflows/build-fastavro.yml          |  2 ++
 .github/workflows/build-fastcluster.yml       |  2 ++
 .github/workflows/build-fastdigest.yml        |  2 ++
 .github/workflows/build-faster-fifo.yml       |  2 ++
 .github/workflows/build-fastexcel.yml         |  2 ++
 .github/workflows/build-fastnanoid.yml        |  2 ++
 .github/workflows/build-fastnumbers.yml       |  2 ++
 .github/workflows/build-fastobo.yml           |  2 ++
 .github/workflows/build-fastparquet.yml       |  2 ++
 .github/workflows/build-fastremap.yml         |  2 ++
 .github/workflows/build-fastsafetensors.yml   |  2 ++
 .github/workflows/build-fasttext-predict.yml  |  2 ++
 .github/workflows/build-fasttext-wheel.yml    |  2 ++
 .github/workflows/build-fastuuid.yml          |  2 ++
 .github/workflows/build-fastwarc.yml          |  2 ++
 .github/workflows/build-faust-cchardet.yml    |  2 ++
 .github/workflows/build-fill-voids.yml        |  2 ++
 .github/workflows/build-fiona.yml             |  2 ++
 .github/workflows/build-firecrawl-anydoc.yml  |  2 ++
 .github/workflows/build-flpc.yml              |  2 ++
 .github/workflows/build-fnv-hash-fast.yml     |  2 ++
 .github/workflows/build-fonttools.yml         |  2 ++
 .github/workflows/build-freetype-py.yml       |  2 ++
 .github/workflows/build-fugashi.yml           |  2 ++
 .github/workflows/build-fuzzysearch.yml       |  2 ++
 .github/workflows/build-fuzzyset2.yml         |  2 ++
 .github/workflows/build-gdstk.yml             |  2 ++
 .github/workflows/build-gemmi.yml             |  2 ++
 .github/workflows/build-gensim.yml            |  2 ++
 .github/workflows/build-gevent.yml            |  2 ++
 .github/workflows/build-geventhttpclient.yml  |  2 ++
 .github/workflows/build-gilknocker.yml        |  2 ++
 .github/workflows/build-git-cliff.yml         |  2 ++
 .github/workflows/build-glcontext.yml         |  2 ++
 .github/workflows/build-glfw.yml              |  2 ++
 .github/workflows/build-gmpy2.yml             |  2 ++
 .github/workflows/build-gmsh.yml              |  2 ++
 .github/workflows/build-gnureadline.yml       |  2 ++
 .github/workflows/build-google-crc32c.yml     |  2 ++
 .github/workflows/build-google-re2.yml        |  2 ++
 .github/workflows/build-gpiod.yml             |  2 ++
 .github/workflows/build-granian.yml           |  2 ++
 .github/workflows/build-grimp.yml             |  2 ++
 .github/workflows/build-grpcio-tools.yml      |  2 ++
 .github/workflows/build-grpcio.yml            |  2 ++
 .github/workflows/build-guppy3.yml            |  2 ++
 .github/workflows/build-h3.yml                |  2 ++
 .github/workflows/build-h5py.yml              |  2 ++
 .github/workflows/build-habluetooth.yml       |  2 ++
 .github/workflows/build-hdbscan.yml           |  2 ++
 .github/workflows/build-hdf5plugin.yml        |  2 ++
 .github/workflows/build-hdrhistogram.yml      |  2 ++
 .github/workflows/build-hf-xet.yml            |  2 ++
 .github/workflows/build-hidapi.yml            |  2 ++
 .github/workflows/build-highspy.yml           |  2 ++
 .github/workflows/build-hiredis.yml           |  2 ++
 .github/workflows/build-hmmlearn.yml          |  2 ++
 .github/workflows/build-hogql-parser-rs.yml   |  2 ++
 .github/workflows/build-hogql-parser.yml      |  2 ++
 .github/workflows/build-html-to-markdown.yml  |  2 ++
 .github/workflows/build-httpr.yml             |  2 ++
 .github/workflows/build-hypothesis.yml        |  2 ++
 .github/workflows/build-igraph.yml            |  2 ++
 .github/workflows/build-ijson.yml             |  2 ++
 .github/workflows/build-imagecodecs.yml       |  2 ++
 .github/workflows/build-imgui.yml             |  2 ++
 .github/workflows/build-iminuit.yml           |  2 ++
 .github/workflows/build-immutables.yml        |  2 ++
 .github/workflows/build-impit.yml             |  2 ++
 .github/workflows/build-indexed-gzip.yml      |  2 ++
 .github/workflows/build-inflate64.yml         |  2 ++
 .github/workflows/build-intbitset.yml         |  2 ++
 .github/workflows/build-isal.yml              |  2 ++
 .github/workflows/build-islpy.yml             |  2 ++
 .../workflows/build-iteration-utilities.yml   |  2 ++
 .github/workflows/build-jellyfish.yml         |  2 ++
 .github/workflows/build-jenkspy.yml           |  2 ++
 .github/workflows/build-jpype1.yml            |  2 ++
 .github/workflows/build-jq.yml                |  2 ++
 .../build-json-stream-rs-tokenizer.yml        |  2 ++
 .github/workflows/build-jsoncompat.yml        |  2 ++
 .github/workflows/build-jsonnet.yml           |  2 ++
 .github/workflows/build-jsonobject.yml        |  2 ++
 .../build-jsonpath-rust-bindings.yml          |  2 ++
 .github/workflows/build-jsonschema-rs.yml     |  2 ++
 .github/workflows/build-just-bin.yml          |  2 ++
 .../workflows/build-kaldi-native-fbank.yml    |  2 ++
 .github/workflows/build-kaldialign.yml        |  2 ++
 .github/workflows/build-keystone-engine.yml   |  2 ++
 .github/workflows/build-kornia-rs.yml         |  2 ++
 .github/workflows/build-labmaze.yml           |  2 ++
 .github/workflows/build-lameenc.yml           |  2 ++
 .github/workflows/build-lancedb.yml           |  2 ++
 .github/workflows/build-lap.yml               |  2 ++
 .github/workflows/build-lapx.yml              |  2 ++
 .github/workflows/build-laszip.yml            |  2 ++
 .github/workflows/build-lazrs.yml             |  2 ++
 .github/workflows/build-lazy-object-proxy.yml |  2 ++
 .github/workflows/build-levenshtein.yml       |  2 ++
 .github/workflows/build-libclang.yml          |  2 ++
 .github/workflows/build-libigl.yml            |  2 ++
 .github/workflows/build-libsass.yml           |  2 ++
 .github/workflows/build-libscrc.yml           |  2 ++
 .github/workflows/build-libusb-package.yml    |  2 ++
 .github/workflows/build-libvalkey.yml         |  2 ++
 .github/workflows/build-lightgbm.yml          |  2 ++
 .github/workflows/build-lilcom.yml            |  2 ++
 .github/workflows/build-line-profiler.yml     |  2 ++
 .../build-lingua-language-detector.yml        |  2 ++
 .github/workflows/build-litellm.yml           |  2 ++
 .github/workflows/build-littlefs-python.yml   |  2 ++
 .github/workflows/build-livekit-blingfire.yml |  2 ++
 .github/workflows/build-lmdb.yml              |  2 ++
 .../build-lmnr-claude-code-proxy.yml          |  2 ++
 .github/workflows/build-logbook.yml           |  2 ++
 .github/workflows/build-loro.yml              |  2 ++
 .github/workflows/build-lru-dict.yml          |  2 ++
 .github/workflows/build-lz4.yml               |  2 ++
 .github/workflows/build-lzallright.yml        |  2 ++
 .github/workflows/build-lzfse.yml             |  2 ++
 .github/workflows/build-magika.yml            |  2 ++
 .github/workflows/build-manifold3d.yml        |  2 ++
 .github/workflows/build-mapbox-earcut.yml     |  2 ++
 .github/workflows/build-marisa-trie.yml       |  2 ++
 .github/workflows/build-markdown-it-pyrs.yml  |  2 ++
 .github/workflows/build-matplotlib.yml        |  2 ++
 .github/workflows/build-maxminddb.yml         |  2 ++
 .github/workflows/build-mecab-python3.yml     |  2 ++
 .github/workflows/build-mecab.yml             |  2 ++
 .github/workflows/build-memory-allocator.yml  |  2 ++
 .github/workflows/build-memray.yml            |  2 ++
 .github/workflows/build-mgrs.yml              |  2 ++
 .github/workflows/build-miniaudio.yml         |  2 ++
 .github/workflows/build-minify-html.yml       |  2 ++
 .github/workflows/build-minijinja.yml         |  2 ++
 .github/workflows/build-miniupnpc.yml         |  2 ++
 .github/workflows/build-minorminer.yml        |  2 ++
 .github/workflows/build-mitmproxy-rs.yml      |  2 ++
 .github/workflows/build-mlx.yml               |  4 +++
 .github/workflows/build-mmcif.yml             |  2 ++
 .github/workflows/build-mmh3.yml              |  2 ++
 .github/workflows/build-mmhash3.yml           |  2 ++
 .github/workflows/build-moderngl.yml          |  2 ++
 .github/workflows/build-mojimoji.yml          |  2 ++
 .github/workflows/build-moocore.yml           |  2 ++
 .github/workflows/build-moyopy.yml            |  2 ++
 .github/workflows/build-mpi4py.yml            |  2 ++
 .github/workflows/build-mrml.yml              |  2 ++
 .github/workflows/build-mujoco.yml            |  2 ++
 .github/workflows/build-murmurhash.yml        |  2 ++
 .github/workflows/build-murmurhash2.yml       |  2 ++
 .github/workflows/build-mutf8.yml             |  2 ++
 .github/workflows/build-mwparserfromhell.yml  |  2 ++
 .github/workflows/build-mypy.yml              |  2 ++
 .../build-mysql-connector-python.yml          |  2 ++
 .github/workflows/build-ncompress.yml         |  2 ++
 .github/workflows/build-ndindex.yml           |  2 ++
 .github/workflows/build-nemo-relay.yml        |  2 ++
 .github/workflows/build-netcdf4.yml           |  2 ++
 .github/workflows/build-netifaces-plus.yml    |  2 ++
 .github/workflows/build-netifaces.yml         |  2 ++
 .github/workflows/build-netifaces2.yml        |  2 ++
 .github/workflows/build-newrelic.yml          |  2 ++
 .github/workflows/build-nlopt.yml             |  2 ++
 .../workflows/build-nodejs-wheel-binaries.yml |  2 ++
 .github/workflows/build-numcodecs.yml         |  2 ++
 .github/workflows/build-numexpr.yml           |  2 ++
 .github/workflows/build-numpy-minmax.yml      |  2 ++
 .github/workflows/build-numpy-quaternion.yml  |  2 ++
 .github/workflows/build-numpy-rms.yml         |  2 ++
 .github/workflows/build-numpy.yml             |  2 ++
 .github/workflows/build-obstore.yml           |  2 ++
 .github/workflows/build-onigurumacffi.yml     |  2 ++
 .github/workflows/build-onnx.yml              |  2 ++
 .github/workflows/build-onnxruntime.yml       |  2 ++
 .github/workflows/build-opencc.yml            |  2 ++
 .../workflows/build-opencv-contrib-python.yml |  2 ++
 .../build-opencv-python-headless.yml          |  2 ++
 .github/workflows/build-opencv-python.yml     |  2 ++
 .github/workflows/build-openexr.yml           |  2 ++
 .github/workflows/build-openlineage-sql.yml   |  2 ++
 .github/workflows/build-opentimelineio.yml    |  2 ++
 .github/workflows/build-opentsne.yml          |  2 ++
 .github/workflows/build-oracledb.yml          |  2 ++
 .github/workflows/build-orjson.yml            |  2 ++
 .github/workflows/build-ormsgpack.yml         |  2 ++
 .github/workflows/build-osqp.yml              |  2 ++
 .github/workflows/build-pact-python-ffi.yml   |  2 ++
 .github/workflows/build-pagefind-bin.yml      |  2 ++
 .github/workflows/build-pairmux.yml           |  2 ++
 .github/workflows/build-pcodec.yml            |  2 ++
 .github/workflows/build-persistent.yml        |  2 ++
 .github/workflows/build-pglast.yml            |  2 ++
 .github/workflows/build-phik.yml              |  2 ++
 .github/workflows/build-pi-heif.yml           |  2 ++
 .github/workflows/build-pikepdf.yml           |  2 ++
 .../workflows/build-pillow-avif-plugin.yml    |  2 ++
 .github/workflows/build-pillow-heif.yml       |  2 ++
 .github/workflows/build-pillow.yml            |  2 ++
 .github/workflows/build-pinecone.yml          |  2 ++
 .github/workflows/build-pipdeptree.yml        |  2 ++
 .github/workflows/build-pixelhog.yml          |  2 ++
 .github/workflows/build-plotext.yml           |  2 ++
 .github/workflows/build-plyvel.yml            |  2 ++
 .github/workflows/build-pmdarima.yml          |  2 ++
 .github/workflows/build-point-cloud-utils.yml |  2 ++
 .github/workflows/build-polars-runtime.yml    |  2 ++
 .github/workflows/build-polyleven.yml         |  2 ++
 .github/workflows/build-poselib.yml           |  2 ++
 .github/workflows/build-posix-ipc.yml         |  2 ++
 .github/workflows/build-pot.yml               |  2 ++
 .github/workflows/build-pqcrypto.yml          |  2 ++
 .github/workflows/build-praat-parselmouth.yml |  2 ++
 .github/workflows/build-prek.yml              |  2 ++
 .github/workflows/build-preshed.yml           |  2 ++
 .github/workflows/build-primer3-py.yml        |  2 ++
 .github/workflows/build-primp.yml             |  2 ++
 .github/workflows/build-protobuf-py-ext.yml   |  2 ++
 .github/workflows/build-protobuf.yml          |  2 ++
 .github/workflows/build-protovalidate.yml     |  2 ++
 .github/workflows/build-psd-tools.yml         |  2 ++
 .github/workflows/build-psygnal.yml           |  2 ++
 .github/workflows/build-py-bip39-bindings.yml |  2 ++
 .../build-py-ed25519-zebra-bindings.yml       |  2 ++
 .github/workflows/build-py-radix.yml          |  2 ++
 .github/workflows/build-py-rust-stemmers.yml  |  2 ++
 .github/workflows/build-py-spy.yml            |  2 ++
 .../workflows/build-py-sr25519-bindings.yml   |  2 ++
 .github/workflows/build-pyahocorasick.yml     |  2 ++
 .github/workflows/build-pyamg.yml             |  2 ++
 .github/workflows/build-pyarrow.yml           |  2 ++
 .github/workflows/build-pybcj.yml             |  2 ++
 .github/workflows/build-pybigwig.yml          |  2 ++
 .github/workflows/build-pycapnp.yml           |  2 ++
 .github/workflows/build-pycares.yml           |  2 ++
 .github/workflows/build-pycld2.yml            |  2 ++
 .github/workflows/build-pyclipper.yml         |  2 ++
 .github/workflows/build-pycocotools.yml       |  2 ++
 .github/workflows/build-pycrc32.yml           |  2 ++
 .github/workflows/build-pycrdt.yml            |  2 ++
 .github/workflows/build-pycryptodome.yml      |  2 ++
 .github/workflows/build-pycryptodomex.yml     |  2 ++
 .github/workflows/build-pycurl.yml            |  2 ++
 .../workflows/build-pydantic-monty-client.yml |  2 ++
 .../build-pydantic-monty-runtime.yml          |  2 ++
 .github/workflows/build-pydevd.yml            |  2 ++
 .github/workflows/build-pyedflib.yml          |  2 ++
 .github/workflows/build-pyerfa.yml            |  2 ++
 .github/workflows/build-pyfarmhash.yml        |  2 ++
 .github/workflows/build-pyfastx.yml           |  2 ++
 .github/workflows/build-pyfaup-rs.yml         |  2 ++
 .github/workflows/build-pygame.yml            |  2 ++
 .github/workflows/build-pygeohash.yml         |  2 ++
 .github/workflows/build-pyglm.yml             |  2 ++
 .github/workflows/build-pygraphviz.yml        |  2 ++
 .github/workflows/build-pyheck.yml            |  2 ++
 .github/workflows/build-pyheif.yml            |  2 ++
 .github/workflows/build-pyiceberg-core.yml    |  2 ++
 .github/workflows/build-pyiceberg.yml         |  2 ++
 .github/workflows/build-pyicu-binary.yml      |  2 ++
 .github/workflows/build-pyinstaller.yml       |  2 ++
 .github/workflows/build-pyinstrument.yml      |  2 ++
 .github/workflows/build-pyjls.yml             |  2 ++
 .github/workflows/build-pykdtree.yml          |  2 ++
 .github/workflows/build-pylance.yml           |  2 ++
 .github/workflows/build-pylerc.yml            |  2 ++
 .github/workflows/build-pylibmc.yml           |  2 ++
 .github/workflows/build-pylibsrtp.yml         |  2 ++
 .github/workflows/build-pylsqpack.yml         |  2 ++
 .github/workflows/build-pylzss.yml            |  2 ++
 .github/workflows/build-pymavlink.yml         |  2 ++
 .github/workflows/build-pymaxflow.yml         |  2 ++
 .github/workflows/build-pymcubes.yml          |  2 ++
 .github/workflows/build-pymediainfo.yml       |  2 ++
 .github/workflows/build-pymongo.yml           |  2 ++
 .github/workflows/build-pymongoarrow.yml      |  2 ++
 .github/workflows/build-pymongocrypt.yml      |  2 ++
 .github/workflows/build-pymonocypher.yml      |  2 ++
 .github/workflows/build-pymoo.yml             |  2 ++
 .github/workflows/build-pymssql.yml           |  2 ++
 .github/workflows/build-pymunk.yml            |  2 ++
 .github/workflows/build-pymupdf-layout.yml    |  2 ++
 .github/workflows/build-pymupdf.yml           |  2 ++
 .github/workflows/build-pymupdfb.yml          |  2 ++
 .github/workflows/build-pynng.yml             |  2 ++
 .github/workflows/build-pyodbc.yml            |  2 ++
 .github/workflows/build-pyodps.yml            |  2 ++
 .github/workflows/build-pyogrio.yml           |  2 ++
 .../workflows/build-pyopengl-accelerate.yml   |  2 ++
 .github/workflows/build-pyorc.yml             |  2 ++
 .github/workflows/build-pyoxipng.yml          |  2 ++
 .github/workflows/build-pypolyline.yml        |  2 ++
 .github/workflows/build-pyppmd.yml            |  2 ++
 .github/workflows/build-pyproj.yml            |  2 ++
 .github/workflows/build-pyqt5-sip.yml         |  2 ++
 .github/workflows/build-pyqt6-sip.yml         |  2 ++
 .github/workflows/build-pyqwest.yml           |  2 ++
 .github/workflows/build-pyrage.yml            |  2 ++
 .github/workflows/build-pyreadstat.yml        |  2 ++
 .github/workflows/build-pyrefly.yml           |  2 ++
 .github/workflows/build-pyroaring.yml         |  2 ++
 .github/workflows/build-pyrodigal.yml         |  2 ++
 .github/workflows/build-pyroscope-io.yml      |  2 ++
 .github/workflows/build-pyrsistent.yml        |  2 ++
 .github/workflows/build-pysam.yml             |  2 ++
 .github/workflows/build-pysimdjson.yml        |  2 ++
 .github/workflows/build-pyspeex-noise.yml     |  2 ++
 .github/workflows/build-pysqlite3-binary.yml  |  2 ++
 .github/workflows/build-pysqlite3.yml         |  2 ++
 .github/workflows/build-pystemmer.yml         |  2 ++
 .github/workflows/build-pyswisseph.yml        |  2 ++
 .github/workflows/build-python-bidi.yml       |  2 ++
 .github/workflows/build-python-calamine.yml   |  2 ++
 .github/workflows/build-python-crfsuite.yml   |  2 ++
 .github/workflows/build-python-fcl.yml        |  2 ++
 .github/workflows/build-python-geohash.yml    |  2 ++
 .github/workflows/build-python-mecab-ko.yml   |  2 ++
 .github/workflows/build-python-rapidjson.yml  |  2 ++
 .github/workflows/build-python-rtmidi.yml     |  2 ++
 .github/workflows/build-pytokens.yml          |  2 ++
 .../workflows/build-pytrec-eval-terrier.yml   |  2 ++
 .github/workflows/build-pywavelets.yml        |  2 ++
 .../workflows/build-pyxdameraulevenshtein.yml |  2 ++
 .github/workflows/build-pyxirr.yml            |  2 ++
 .github/workflows/build-pyyaml-ft.yml         |  2 ++
 .github/workflows/build-qdldl.yml             |  2 ++
 .github/workflows/build-qoi.yml               |  2 ++
 .github/workflows/build-quadprog.yml          |  2 ++
 .github/workflows/build-quickjs-ng.yml        |  2 ++
 .github/workflows/build-quickjs.yml           |  2 ++
 .github/workflows/build-rapidyaml.yml         |  2 ++
 .github/workflows/build-rasterio.yml          |  2 ++
 .github/workflows/build-ray.yml               |  2 ++
 .github/workflows/build-rbloom.yml            |  2 ++
 .github/workflows/build-rcssmin.yml           |  2 ++
 .github/workflows/build-rdkit.yml             |  2 ++
 .github/workflows/build-rectangle-packer.yml  |  2 ++
 .github/workflows/build-regress.yml           |  2 ++
 .github/workflows/build-rensa.yml             |  2 ++
 .github/workflows/build-rerun-sdk.yml         |  2 ++
 .github/workflows/build-resiliparse.yml       |  2 ++
 .github/workflows/build-resvg-py.yml          |  2 ++
 .github/workflows/build-rfc3161-client.yml    |  2 ++
 .github/workflows/build-rhino3dm.yml          |  2 ++
 .github/workflows/build-rigour.yml            |  2 ++
 .github/workflows/build-ripgrep.yml           |  2 ++
 .github/workflows/build-rjieba.yml            |  2 ++
 .github/workflows/build-rjsmin.yml            |  2 ++
 .github/workflows/build-rocksdict.yml         |  2 ++
 .github/workflows/build-rtoml.yml             |  2 ++
 .github/workflows/build-rtree.yml             |  2 ++
 .github/workflows/build-ruamel-yaml-clib.yml  |  2 ++
 .github/workflows/build-ruckig.yml            |  2 ++
 .github/workflows/build-rumdl.yml             |  2 ++
 .github/workflows/build-runstats.yml          |  2 ++
 .github/workflows/build-ruptures.yml          |  2 ++
 .github/workflows/build-rustpy-xlsxwriter.yml |  2 ++
 .github/workflows/build-rustworkx.yml         |  2 ++
 .github/workflows/build-s5cmd.yml             |  2 ++
 .github/workflows/build-samplerate.yml        |  2 ++
 .github/workflows/build-scikit-learn.yml      |  2 ++
 .github/workflows/build-scikit-misc.yml       |  2 ++
 .github/workflows/build-scikit-network.yml    |  2 ++
 .github/workflows/build-scipy.yml             |  2 ++
 .github/workflows/build-scrypt.yml            |  2 ++
 .github/workflows/build-scs.yml               |  2 ++
 .github/workflows/build-sdbus.yml             |  2 ++
 .github/workflows/build-segyio.yml            |  2 ++
 .github/workflows/build-selectolax.yml        |  2 ++
 .../build-semantic-text-splitter.yml          |  2 ++
 .github/workflows/build-semgrep.yml           |  2 ++
 .github/workflows/build-sentencepiece.yml     |  2 ++
 .github/workflows/build-serpyco-rs.yml        |  2 ++
 .github/workflows/build-shapely.yml           |  2 ++
 .github/workflows/build-shellcheck-py.yml     |  2 ++
 .github/workflows/build-sherpa-onnx.yml       |  2 ++
 .github/workflows/build-shiboken6.yml         |  2 ++
 .github/workflows/build-simplejpeg.yml        |  2 ++
 .github/workflows/build-simplejson.yml        |  2 ++
 .github/workflows/build-simplification.yml    |  2 ++
 .github/workflows/build-simsimd.yml           |  2 ++
 .github/workflows/build-siphash24.yml         |  2 ++
 .github/workflows/build-siphashc.yml          |  2 ++
 .github/workflows/build-skia-python.yml       |  2 ++
 .../build-snowflake-connector-python.yml      |  2 ++
 .github/workflows/build-solders.yml           |  2 ++
 .github/workflows/build-soxr.yml              |  2 ++
 .github/workflows/build-spacy.yml             |  2 ++
 .github/workflows/build-sparsediffpy.yml      |  2 ++
 .github/workflows/build-spglib.yml            |  2 ++
 .github/workflows/build-sphn.yml              |  2 ++
 .github/workflows/build-spidev.yml            |  2 ++
 .github/workflows/build-spookyhash.yml        |  2 ++
 .github/workflows/build-sqlalchemy.yml        |  2 ++
 .github/workflows/build-sqlean-py.yml         |  2 ++
 .github/workflows/build-sqlglotc.yml          |  2 ++
 .github/workflows/build-sqlite-vec.yml        |  2 ++
 .github/workflows/build-sqloxide.yml          |  2 ++
 .github/workflows/build-sqruff.yml            |  2 ++
 .github/workflows/build-srsly.yml             |  2 ++
 .github/workflows/build-ssh2-python.yml       |  2 ++
 .github/workflows/build-sspilib.yml           |  2 ++
 .github/workflows/build-starlark-pyo3.yml     |  2 ++
 .github/workflows/build-statsforecast.yml     |  2 ++
 .../workflows/build-statsig-python-core.yml   |  2 ++
 .github/workflows/build-statsmodels.yml       |  2 ++
 .github/workflows/build-stream-inflate.yml    |  2 ++
 .github/workflows/build-stream-unzip.yml      |  2 ++
 .../workflows/build-streaming-form-data.yml   |  2 ++
 .github/workflows/build-sudachipy.yml         |  2 ++
 .github/workflows/build-swiglpk.yml           |  2 ++
 .github/workflows/build-symengine.yml         |  2 ++
 .github/workflows/build-symusic.yml           |  2 ++
 .github/workflows/build-sysv-ipc.yml          |  2 ++
 .github/workflows/build-ta-lib.yml            |  2 ++
 .github/workflows/build-tables.yml            |  2 ++
 .github/workflows/build-tach.yml              |  2 ++
 .github/workflows/build-tantivy.yml           |  2 ++
 .github/workflows/build-taplo.yml             |  2 ++
 .github/workflows/build-tbb.yml               |  2 ++
 .github/workflows/build-tcmlib.yml            |  2 ++
 .github/workflows/build-temporalio.yml        |  2 ++
 .github/workflows/build-tensor-grep.yml       |  2 ++
 .github/workflows/build-tensordict.yml        |  2 ++
 .github/workflows/build-tesserocr.yml         |  2 ++
 .../workflows/build-test-results-parser.yml   |  2 ++
 .github/workflows/build-text2num.yml          |  2 ++
 .github/workflows/build-textual-speedups.yml  |  2 ++
 .github/workflows/build-texture2ddecoder.yml  |  2 ++
 .github/workflows/build-tgcrypto.yml          |  2 ++
 .github/workflows/build-thinc.yml             |  2 ++
 .github/workflows/build-thrift.yml            |  2 ++
 .github/workflows/build-thriftpy2.yml         |  2 ++
 .github/workflows/build-tibs.yml              |  2 ++
 .github/workflows/build-tiktoken.yml          |  2 ++
 .github/workflows/build-tilelang.yml          |  2 ++
 .github/workflows/build-time-machine.yml      |  2 ++
 .github/workflows/build-timezonefinder.yml    |  2 ++
 .github/workflows/build-tink.yml              |  2 ++
 .github/workflows/build-tinyobjloader.yml     |  2 ++
 .github/workflows/build-tombi.yml             |  2 ++
 .github/workflows/build-tomli.yml             |  2 ++
 .github/workflows/build-toons.yml             |  2 ++
 .github/workflows/build-torch.yml             |  2 ++
 .github/workflows/build-torchaudio.yml        |  2 ++
 .github/workflows/build-tornado.yml           |  2 ++
 .github/workflows/build-traits.yml            |  2 ++
 .github/workflows/build-tree-sitter-bash.yml  |  2 ++
 .../workflows/build-tree-sitter-c-sharp.yml   |  2 ++
 .github/workflows/build-tree-sitter-c.yml     |  2 ++
 .github/workflows/build-tree-sitter-cpp.yml   |  2 ++
 .github/workflows/build-tree-sitter-css.yml   |  2 ++
 .github/workflows/build-tree-sitter-dart.yml  |  2 ++
 .../build-tree-sitter-dockerfile.yml          |  2 ++
 .../workflows/build-tree-sitter-elixir.yml    |  2 ++
 .../build-tree-sitter-embedded-template.yml   |  2 ++
 .../workflows/build-tree-sitter-fortran.yml   |  2 ++
 .github/workflows/build-tree-sitter-go.yml    |  2 ++
 .../workflows/build-tree-sitter-groovy.yml    |  2 ++
 .github/workflows/build-tree-sitter-hcl.yml   |  2 ++
 .github/workflows/build-tree-sitter-html.yml  |  2 ++
 .github/workflows/build-tree-sitter-java.yml  |  2 ++
 .../build-tree-sitter-javascript.yml          |  2 ++
 .github/workflows/build-tree-sitter-json.yml  |  2 ++
 .github/workflows/build-tree-sitter-julia.yml |  2 ++
 .../workflows/build-tree-sitter-kotlin.yml    |  2 ++
 .../build-tree-sitter-language-pack.yml       |  2 ++
 .../workflows/build-tree-sitter-languages.yml |  2 ++
 .github/workflows/build-tree-sitter-lua.yml   |  2 ++
 .../workflows/build-tree-sitter-markdown.yml  |  2 ++
 .github/workflows/build-tree-sitter-objc.yml  |  2 ++
 .github/workflows/build-tree-sitter-php.yml   |  2 ++
 .../build-tree-sitter-powershell.yml          |  2 ++
 .../workflows/build-tree-sitter-python.yml    |  2 ++
 .github/workflows/build-tree-sitter-regex.yml |  2 ++
 .github/workflows/build-tree-sitter-ruby.yml  |  2 ++
 .github/workflows/build-tree-sitter-rust.yml  |  2 ++
 .github/workflows/build-tree-sitter-scala.yml |  2 ++
 .github/workflows/build-tree-sitter-sql.yml   |  2 ++
 .github/workflows/build-tree-sitter-swift.yml |  2 ++
 .github/workflows/build-tree-sitter-toml.yml  |  2 ++
 .../build-tree-sitter-typescript.yml          |  2 ++
 .../workflows/build-tree-sitter-verilog.yml   |  2 ++
 .github/workflows/build-tree-sitter-xml.yml   |  2 ++
 .github/workflows/build-tree-sitter-yaml.yml  |  2 ++
 .github/workflows/build-tree-sitter-zig.yml   |  2 ++
 .github/workflows/build-treelite.yml          |  2 ++
 .github/workflows/build-tsdownsample.yml      |  2 ++
 .github/workflows/build-tsv2py.yml            |  2 ++
 .github/workflows/build-typedunits.yml        |  2 ++
 .github/workflows/build-typeid-python.yml     |  2 ++
 .github/workflows/build-typos.yml             |  2 ++
 .github/workflows/build-typst.yml             |  2 ++
 .github/workflows/build-tzfpy.yml             |  2 ++
 .github/workflows/build-ua-parser-rs.yml      |  2 ++
 .github/workflows/build-uamqp.yml             |  2 ++
 .github/workflows/build-uharfbuzz.yml         |  2 ++
 .github/workflows/build-ulid-transform.yml    |  2 ++
 .../build-unicode-segmentation-rs.yml         |  2 ++
 .github/workflows/build-unicodedata2.yml      |  2 ++
 .github/workflows/build-unicorn.yml           |  2 ++
 .github/workflows/build-usearch.yml           |  2 ++
 .github/workflows/build-uuid-utils.yml        |  2 ++
 .github/workflows/build-valkey-glide.yml      |  2 ++
 .github/workflows/build-vesin.yml             |  2 ++
 .github/workflows/build-vhacdx.yml            |  2 ++
 .github/workflows/build-vispy.yml             |  2 ++
 .github/workflows/build-viztracer.yml         |  2 ++
 .github/workflows/build-vodozemac.yml         |  2 ++
 .github/workflows/build-vtk.yml               |  2 ++
 .github/workflows/build-vtracer.yml           |  2 ++
 .github/workflows/build-wandb.yml             |  2 ++
 .github/workflows/build-webrtcvad-wheels.yml  |  2 ++
 .github/workflows/build-wordcloud.yml         |  2 ++
 .github/workflows/build-xatlas.yml            |  2 ++
 .github/workflows/build-xattr.yml             |  2 ++
 .github/workflows/build-xgboost-cpu.yml       |  2 ++
 .github/workflows/build-xgboost.yml           |  2 ++
 .github/workflows/build-xgrammar.yml          |  2 ++
 .github/workflows/build-xmhuffman.yml         |  2 ++
 .github/workflows/build-xrootd.yml            |  2 ++
 .github/workflows/build-yappi.yml             |  2 ++
 .github/workflows/build-yara-python.yml       |  2 ++
 .github/workflows/build-yara-x.yml            |  2 ++
 .github/workflows/build-yggdrasil-engine.yml  |  2 ++
 .github/workflows/build-zensical.yml          |  2 ++
 .github/workflows/build-zeroconf.yml          |  2 ++
 .github/workflows/build-zipcodes.yml          |  2 ++
 .github/workflows/build-zipfile-deflate64.yml |  2 ++
 .github/workflows/build-zizmor.yml            |  2 ++
 .github/workflows/build-zlib-ng.yml           |  2 ++
 .github/workflows/build-zlib-state.yml        |  2 ++
 .github/workflows/build-zope-container.yml    |  2 ++
 .github/workflows/build-zope-hookable.yml     |  2 ++
 .../workflows/build-zope-i18nmessageid.yml    |  2 ++
 .github/workflows/build-zope-interface.yml    |  2 ++
 .github/workflows/build-zope-proxy.yml        |  2 ++
 .github/workflows/build-zope-security.yml     |  2 ++
 .github/workflows/build-zopfli.yml            |  2 ++
 .github/workflows/build-zstandard.yml         |  2 ++
 .github/workflows/build-zstd.yml              |  2 ++
 .github/workflows/build-zuban.yml             |  2 ++
 .github/workflows/build-zxing-cpp.yml         |  2 ++
 ci_scripts/update_doc.py                      | 18 +++++++++++-
 docs/workflows.md                             | 29 +++++++++++++------
 710 files changed, 1475 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/_publish-wheel.yml b/.github/workflows/_publish-wheel.yml
index 4c00e2c58432..823486321cf2 100644
--- a/.github/workflows/_publish-wheel.yml
+++ b/.github/workflows/_publish-wheel.yml
@@ -25,6 +25,12 @@ on:
         required: false
         default: ''
         type: string
+    secrets:
+      app-private-key:
+        description: >-
+          Private key of the riseproject-dev GitHub App. Without it the
+          documentation PR is opened with GITHUB_TOKEN and gets no checks.
+        required: false
 
 concurrency:
   group: publish-wheel
@@ -35,10 +41,22 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
+      # A branch pushed or a PR opened with GITHUB_TOKEN raises no events, so
+      # the documentation PR would sit there with no checks. Push and open it
+      # as the App instead; without its credentials, or on a pull request
+      # (where nothing is published anyway), this falls back to GITHUB_TOKEN.
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1  # v3.2.0
+        id: app-token
+        if: ${{ vars.RISEPROJECT_APP_CLIENT_ID != '' && github.ref == 'refs/heads/main' }}
+        with:
+          client-id: ${{ vars.RISEPROJECT_APP_CLIENT_ID }}
+          private-key: ${{ secrets.app-private-key }}
+
       - name: Checkout python-wheels
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
+          token: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
 
       - name: Download wheels
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
@@ -136,7 +154,7 @@ jobs:
       - name: Create draft release and upload assets
         if: github.ref == 'refs/heads/main'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
           RELEASE_TAG: ${{ steps.release.outputs.tag }}
           RELEASE_TITLE: ${{ steps.release.outputs.title }}
         run: |
@@ -166,7 +184,7 @@ jobs:
       - name: Verify release is immutable
         if: github.ref == 'refs/heads/main'
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
         run: |
           immutable=$(gh api \
             "repos/${{ github.repository }}/releases/tags/${{ steps.release.outputs.tag }}" \
@@ -178,7 +196,8 @@ jobs:
 
       - name: Update package documentation
         env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GH_TOKEN: ${{ steps.app-token.outputs.token || secrets.GITHUB_TOKEN }}
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
           ARTIFACTS_PATH: ${{ inputs.artifact-path }}
           RELEASE_TAG: ${{ steps.release.outputs.tag }}
           GPL_SOURCES_DESCRIPTION: ${{ inputs.gpl-sources-description }}
diff --git a/.github/workflows/build-ada-url.yml b/.github/workflows/build-ada-url.yml
index 6e215d4d0e04..0837a344d70c 100644
--- a/.github/workflows/build-ada-url.yml
+++ b/.github/workflows/build-ada-url.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ada-url-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-manager.yml b/.github/workflows/build-adbc-driver-manager.yml
index a0c3ea318b82..ff815f45e247 100644
--- a/.github/workflows/build-adbc-driver-manager.yml
+++ b/.github/workflows/build-adbc-driver-manager.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-manager-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-postgresql.yml b/.github/workflows/build-adbc-driver-postgresql.yml
index cb94e06acd26..9e87762403c4 100644
--- a/.github/workflows/build-adbc-driver-postgresql.yml
+++ b/.github/workflows/build-adbc-driver-postgresql.yml
@@ -174,5 +174,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-postgresql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-adbc-driver-sqlite.yml b/.github/workflows/build-adbc-driver-sqlite.yml
index fda706df7dc2..c6e24e39168d 100644
--- a/.github/workflows/build-adbc-driver-sqlite.yml
+++ b/.github/workflows/build-adbc-driver-sqlite.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: adbc-driver-sqlite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aggdraw.yml b/.github/workflows/build-aggdraw.yml
index 54ced1a7e87b..264dffde39a1 100644
--- a/.github/workflows/build-aggdraw.yml
+++ b/.github/workflows/build-aggdraw.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aggdraw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ahocorasick-rs.yml b/.github/workflows/build-ahocorasick-rs.yml
index 72808b48a103..44cc41f1ee79 100644
--- a/.github/workflows/build-ahocorasick-rs.yml
+++ b/.github/workflows/build-ahocorasick-rs.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ahocorasick-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aiocsv.yml b/.github/workflows/build-aiocsv.yml
index f389120236fa..5c8fc05415df 100644
--- a/.github/workflows/build-aiocsv.yml
+++ b/.github/workflows/build-aiocsv.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aiocsv-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-aiokafka.yml b/.github/workflows/build-aiokafka.yml
index ed5eaf20b7d5..ef76c6346633 100644
--- a/.github/workflows/build-aiokafka.yml
+++ b/.github/workflows/build-aiokafka.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aiokafka-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-aioquic.yml b/.github/workflows/build-aioquic.yml
index 3805af68c8a0..f70facc8b974 100644
--- a/.github/workflows/build-aioquic.yml
+++ b/.github/workflows/build-aioquic.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: aioquic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-amazon-ion.yml b/.github/workflows/build-amazon-ion.yml
index 920656e92e06..e63805ae9a30 100644
--- a/.github/workflows/build-amazon-ion.yml
+++ b/.github/workflows/build-amazon-ion.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: amazon-ion-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ansible-pylibssh.yml b/.github/workflows/build-ansible-pylibssh.yml
index ea1732fc00f8..5e57d7e88fbf 100644
--- a/.github/workflows/build-ansible-pylibssh.yml
+++ b/.github/workflows/build-ansible-pylibssh.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ansible-pylibssh-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-anycrc.yml b/.github/workflows/build-anycrc.yml
index 85c64efd82d8..f6ab965c1a1f 100644
--- a/.github/workflows/build-anycrc.yml
+++ b/.github/workflows/build-anycrc.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: anycrc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-beam.yml b/.github/workflows/build-apache-beam.yml
index 589434c99325..79a7183315a4 100644
--- a/.github/workflows/build-apache-beam.yml
+++ b/.github/workflows/build-apache-beam.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-beam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-sedona.yml b/.github/workflows/build-apache-sedona.yml
index e98a1d09b8a9..8e77d89870c8 100644
--- a/.github/workflows/build-apache-sedona.yml
+++ b/.github/workflows/build-apache-sedona.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-sedona-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apache-tvm-ffi.yml b/.github/workflows/build-apache-tvm-ffi.yml
index 4d92ea73856b..96de0e0df5fb 100644
--- a/.github/workflows/build-apache-tvm-ffi.yml
+++ b/.github/workflows/build-apache-tvm-ffi.yml
@@ -216,5 +216,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apache-tvm-ffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-apsw.yml b/.github/workflows/build-apsw.yml
index 7dbe8dd8baf9..82513598b9e8 100644
--- a/.github/workflows/build-apsw.yml
+++ b/.github/workflows/build-apsw.yml
@@ -90,5 +90,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: apsw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arc4.yml b/.github/workflows/build-arc4.yml
index 797207e7bc74..8afd66554cc5 100644
--- a/.github/workflows/build-arc4.yml
+++ b/.github/workflows/build-arc4.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arc4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arch.yml b/.github/workflows/build-arch.yml
index 60dde636ac74..976e5a79aad4 100644
--- a/.github/workflows/build-arch.yml
+++ b/.github/workflows/build-arch.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-array-record.yml b/.github/workflows/build-array-record.yml
index 9123db0b102c..3f8b690d9fdc 100644
--- a/.github/workflows/build-array-record.yml
+++ b/.github/workflows/build-array-record.yml
@@ -344,5 +344,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: array-record-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arraykit.yml b/.github/workflows/build-arraykit.yml
index 7269d9428f95..a3765bd5e16e 100644
--- a/.github/workflows/build-arraykit.yml
+++ b/.github/workflows/build-arraykit.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arraykit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-arro3-core.yml b/.github/workflows/build-arro3-core.yml
index 894e5177d0b3..a6a317c30f8b 100644
--- a/.github/workflows/build-arro3-core.yml
+++ b/.github/workflows/build-arro3-core.yml
@@ -326,5 +326,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: arro3-core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asammdf.yml b/.github/workflows/build-asammdf.yml
index 8c81487224a7..c8b6ec6eac93 100644
--- a/.github/workflows/build-asammdf.yml
+++ b/.github/workflows/build-asammdf.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asammdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ast-grep-cli.yml b/.github/workflows/build-ast-grep-cli.yml
index e3bab4969064..3f9c6ee4e1e7 100644
--- a/.github/workflows/build-ast-grep-cli.yml
+++ b/.github/workflows/build-ast-grep-cli.yml
@@ -154,5 +154,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ast-grep-cli-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-ast-grep-py.yml b/.github/workflows/build-ast-grep-py.yml
index 914da9bcc24d..047736f3e038 100644
--- a/.github/workflows/build-ast-grep-py.yml
+++ b/.github/workflows/build-ast-grep-py.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ast-grep-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-astc-encoder-py.yml b/.github/workflows/build-astc-encoder-py.yml
index 55b545d1efb4..9206f0f9fdaa 100644
--- a/.github/workflows/build-astc-encoder-py.yml
+++ b/.github/workflows/build-astc-encoder-py.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astc-encoder-py-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-astropy-healpix.yml b/.github/workflows/build-astropy-healpix.yml
index 06138a29a53e..39f6a49a6a23 100644
--- a/.github/workflows/build-astropy-healpix.yml
+++ b/.github/workflows/build-astropy-healpix.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astropy-healpix-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-astropy.yml b/.github/workflows/build-astropy.yml
index b4a9661a9b05..686558546a9e 100644
--- a/.github/workflows/build-astropy.yml
+++ b/.github/workflows/build-astropy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: astropy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asv.yml b/.github/workflows/build-asv.yml
index 0b4b25c7c24c..09c8e96eb37c 100644
--- a/.github/workflows/build-asv.yml
+++ b/.github/workflows/build-asv.yml
@@ -186,5 +186,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asv-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asynch.yml b/.github/workflows/build-asynch.yml
index 49d76564a665..f98bbf0002c6 100644
--- a/.github/workflows/build-asynch.yml
+++ b/.github/workflows/build-asynch.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asynch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asyncmy.yml b/.github/workflows/build-asyncmy.yml
index 116ae68c2210..cf12d7d12a0c 100644
--- a/.github/workflows/build-asyncmy.yml
+++ b/.github/workflows/build-asyncmy.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asyncmy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-asyncpg.yml b/.github/workflows/build-asyncpg.yml
index 9484dfbf99cb..37f87f3791f8 100644
--- a/.github/workflows/build-asyncpg.yml
+++ b/.github/workflows/build-asyncpg.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: asyncpg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-atomic-dict.yml b/.github/workflows/build-atomic-dict.yml
index 7aeeb42447e0..77c73c0a0b37 100644
--- a/.github/workflows/build-atomic-dict.yml
+++ b/.github/workflows/build-atomic-dict.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: atomic-dict-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-autobahn.yml b/.github/workflows/build-autobahn.yml
index 18f06d2f80a6..7c2bfe10e3dd 100644
--- a/.github/workflows/build-autobahn.yml
+++ b/.github/workflows/build-autobahn.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: autobahn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awkward-cpp.yml b/.github/workflows/build-awkward-cpp.yml
index 4026d283e047..283e79efae20 100644
--- a/.github/workflows/build-awkward-cpp.yml
+++ b/.github/workflows/build-awkward-cpp.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awkward-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awscrt.yml b/.github/workflows/build-awscrt.yml
index 4f53f932782c..41726297956c 100644
--- a/.github/workflows/build-awscrt.yml
+++ b/.github/workflows/build-awscrt.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awscrt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-awslambdaric.yml b/.github/workflows/build-awslambdaric.yml
index 99561f59f631..2ae1e35f7b6b 100644
--- a/.github/workflows/build-awslambdaric.yml
+++ b/.github/workflows/build-awslambdaric.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: awslambdaric-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-backports-datetime-fromisoformat.yml b/.github/workflows/build-backports-datetime-fromisoformat.yml
index 1f9a75d571ae..fa8b55afa219 100644
--- a/.github/workflows/build-backports-datetime-fromisoformat.yml
+++ b/.github/workflows/build-backports-datetime-fromisoformat.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: backports-datetime-fromisoformat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-base2048.yml b/.github/workflows/build-base2048.yml
index d47713e2e419..374f81f06065 100644
--- a/.github/workflows/build-base2048.yml
+++ b/.github/workflows/build-base2048.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: base2048-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-based58.yml b/.github/workflows/build-based58.yml
index 27e74153249f..30b29c4d1059 100644
--- a/.github/workflows/build-based58.yml
+++ b/.github/workflows/build-based58.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: based58-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bcrypt.yml b/.github/workflows/build-bcrypt.yml
index 136e02a2ae04..6f33b4986f16 100644
--- a/.github/workflows/build-bcrypt.yml
+++ b/.github/workflows/build-bcrypt.yml
@@ -196,5 +196,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bcrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biom-format.yml b/.github/workflows/build-biom-format.yml
index bd3af8944a3a..3b2a71a4b743 100644
--- a/.github/workflows/build-biom-format.yml
+++ b/.github/workflows/build-biom-format.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biom-format-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biopython.yml b/.github/workflows/build-biopython.yml
index 64db7524d3a4..3e0d8c0b690c 100644
--- a/.github/workflows/build-biopython.yml
+++ b/.github/workflows/build-biopython.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biopython-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biotite.yml b/.github/workflows/build-biotite.yml
index a1d5de5c0c31..ae000a25de28 100644
--- a/.github/workflows/build-biotite.yml
+++ b/.github/workflows/build-biotite.yml
@@ -190,5 +190,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biotite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-biotraj.yml b/.github/workflows/build-biotraj.yml
index 9eba7352ffad..be61f59b46b1 100644
--- a/.github/workflows/build-biotraj.yml
+++ b/.github/workflows/build-biotraj.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: biotraj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitarray-hardbyte.yml b/.github/workflows/build-bitarray-hardbyte.yml
index 0db30338af87..152a2375114c 100644
--- a/.github/workflows/build-bitarray-hardbyte.yml
+++ b/.github/workflows/build-bitarray-hardbyte.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitarray-hardbyte-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitarray.yml b/.github/workflows/build-bitarray.yml
index c0ecf04ba38e..e9d29cc27e79 100644
--- a/.github/workflows/build-bitarray.yml
+++ b/.github/workflows/build-bitarray.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitarray-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bitstruct.yml b/.github/workflows/build-bitstruct.yml
index c0630a071327..9c99534bf4f8 100644
--- a/.github/workflows/build-bitstruct.yml
+++ b/.github/workflows/build-bitstruct.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bitstruct-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-black.yml b/.github/workflows/build-black.yml
index 24971587072d..aeda92479ba2 100644
--- a/.github/workflows/build-black.yml
+++ b/.github/workflows/build-black.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: black-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blis.yml b/.github/workflows/build-blis.yml
index 2758415c3aa9..60829561e44f 100644
--- a/.github/workflows/build-blis.yml
+++ b/.github/workflows/build-blis.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blosc.yml b/.github/workflows/build-blosc.yml
index 3cc2bee74e8b..f82f85ee6f4c 100644
--- a/.github/workflows/build-blosc.yml
+++ b/.github/workflows/build-blosc.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blosc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blosc2.yml b/.github/workflows/build-blosc2.yml
index 6741765b0b2d..7eeddbc606e9 100644
--- a/.github/workflows/build-blosc2.yml
+++ b/.github/workflows/build-blosc2.yml
@@ -137,5 +137,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blosc2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bluetooth-data-tools.yml b/.github/workflows/build-bluetooth-data-tools.yml
index 18cdb8970d1f..40ae9c882f6b 100644
--- a/.github/workflows/build-bluetooth-data-tools.yml
+++ b/.github/workflows/build-bluetooth-data-tools.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bluetooth-data-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-blurhash-python.yml b/.github/workflows/build-blurhash-python.yml
index a928c32d8c61..6fa7307e2c45 100644
--- a/.github/workflows/build-blurhash-python.yml
+++ b/.github/workflows/build-blurhash-python.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: blurhash-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-boost-histogram.yml b/.github/workflows/build-boost-histogram.yml
index 6decd90c4f8d..aa0f756c2da7 100644
--- a/.github/workflows/build-boost-histogram.yml
+++ b/.github/workflows/build-boost-histogram.yml
@@ -170,5 +170,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: boost-histogram-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bottleneck.yml b/.github/workflows/build-bottleneck.yml
index d45d9d959a1f..6f2c25ab937d 100644
--- a/.github/workflows/build-bottleneck.yml
+++ b/.github/workflows/build-bottleneck.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bottleneck-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-brotli.yml b/.github/workflows/build-brotli.yml
index 13d961390203..587b5fc4cda8 100644
--- a/.github/workflows/build-brotli.yml
+++ b/.github/workflows/build-brotli.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: brotli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-brotlicffi.yml b/.github/workflows/build-brotlicffi.yml
index cdacb2df26cd..ad0d7ce99405 100644
--- a/.github/workflows/build-brotlicffi.yml
+++ b/.github/workflows/build-brotlicffi.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: brotlicffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bsdiff4.yml b/.github/workflows/build-bsdiff4.yml
index 936c8238865e..79a897789afa 100644
--- a/.github/workflows/build-bsdiff4.yml
+++ b/.github/workflows/build-bsdiff4.yml
@@ -90,5 +90,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bsdiff4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-btrees.yml b/.github/workflows/build-btrees.yml
index 800a4fb4a17d..6a693877a8a8 100644
--- a/.github/workflows/build-btrees.yml
+++ b/.github/workflows/build-btrees.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: btrees-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-burner-redis.yml b/.github/workflows/build-burner-redis.yml
index c066abd01f3a..9432c1b07a49 100644
--- a/.github/workflows/build-burner-redis.yml
+++ b/.github/workflows/build-burner-redis.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: burner-redis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-bx-python.yml b/.github/workflows/build-bx-python.yml
index 2d25c5b89555..73527bb3d105 100644
--- a/.github/workflows/build-bx-python.yml
+++ b/.github/workflows/build-bx-python.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: bx-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-c2pa-python.yml b/.github/workflows/build-c2pa-python.yml
index dd9be22a766c..4761a57a69ab 100644
--- a/.github/workflows/build-c2pa-python.yml
+++ b/.github/workflows/build-c2pa-python.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: c2pa-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cachebox.yml b/.github/workflows/build-cachebox.yml
index 855d4c7df5e1..98bb72bb65b6 100644
--- a/.github/workflows/build-cachebox.yml
+++ b/.github/workflows/build-cachebox.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cachebox-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-caio.yml b/.github/workflows/build-caio.yml
index 0d664317abf8..2fd5868b0fb2 100644
--- a/.github/workflows/build-caio.yml
+++ b/.github/workflows/build-caio.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: caio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-capstone.yml b/.github/workflows/build-capstone.yml
index e6be4c262ead..f8f2568ee839 100644
--- a/.github/workflows/build-capstone.yml
+++ b/.github/workflows/build-capstone.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: capstone-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cartopy.yml b/.github/workflows/build-cartopy.yml
index 1d8d445cd155..d3af6e179619 100644
--- a/.github/workflows/build-cartopy.yml
+++ b/.github/workflows/build-cartopy.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cartopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-casadi.yml b/.github/workflows/build-casadi.yml
index b31973f02d89..9b7f6d88d0c7 100644
--- a/.github/workflows/build-casadi.yml
+++ b/.github/workflows/build-casadi.yml
@@ -200,5 +200,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: casadi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cbor2.yml b/.github/workflows/build-cbor2.yml
index 0f5923bf3f35..e31e8c38e972 100644
--- a/.github/workflows/build-cbor2.yml
+++ b/.github/workflows/build-cbor2.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cbor2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cchardet.yml b/.github/workflows/build-cchardet.yml
index d8c5903ba8de..5a0be5c31b17 100644
--- a/.github/workflows/build-cchardet.yml
+++ b/.github/workflows/build-cchardet.yml
@@ -229,5 +229,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cchardet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cffi.yml b/.github/workflows/build-cffi.yml
index 4debfb58d358..4ad62c79f77d 100644
--- a/.github/workflows/build-cffi.yml
+++ b/.github/workflows/build-cffi.yml
@@ -160,5 +160,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cftime.yml b/.github/workflows/build-cftime.yml
index ddbfeddf6552..ce10ea6b6847 100644
--- a/.github/workflows/build-cftime.yml
+++ b/.github/workflows/build-cftime.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cftime-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chiabip158.yml b/.github/workflows/build-chiabip158.yml
index 2cefd1bf6fed..1601658663fc 100644
--- a/.github/workflows/build-chiabip158.yml
+++ b/.github/workflows/build-chiabip158.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chiabip158-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chompjs.yml b/.github/workflows/build-chompjs.yml
index 303f3112af93..13bba61e629b 100644
--- a/.github/workflows/build-chompjs.yml
+++ b/.github/workflows/build-chompjs.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chompjs-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-chroma-hnswlib.yml b/.github/workflows/build-chroma-hnswlib.yml
index 501da11b7a9b..7f240147c893 100644
--- a/.github/workflows/build-chroma-hnswlib.yml
+++ b/.github/workflows/build-chroma-hnswlib.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chroma-hnswlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-chromadb.yml b/.github/workflows/build-chromadb.yml
index fb0e1f836029..ed7be288cf97 100644
--- a/.github/workflows/build-chromadb.yml
+++ b/.github/workflows/build-chromadb.yml
@@ -182,5 +182,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: chromadb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ciso8601.yml b/.github/workflows/build-ciso8601.yml
index f668231fbeb6..6ff82dba9b7e 100644
--- a/.github/workflows/build-ciso8601.yml
+++ b/.github/workflows/build-ciso8601.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ciso8601-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-citiespy.yml b/.github/workflows/build-citiespy.yml
index 000cffd74450..d431e43c452a 100644
--- a/.github/workflows/build-citiespy.yml
+++ b/.github/workflows/build-citiespy.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: citiespy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cityhash.yml b/.github/workflows/build-cityhash.yml
index 2cf66240b6a7..a88ed5030a60 100644
--- a/.github/workflows/build-cityhash.yml
+++ b/.github/workflows/build-cityhash.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cityhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ckzg.yml b/.github/workflows/build-ckzg.yml
index e26eb37a1637..7b14901833e1 100644
--- a/.github/workflows/build-ckzg.yml
+++ b/.github/workflows/build-ckzg.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ckzg-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-clang-format.yml b/.github/workflows/build-clang-format.yml
index 2fa396c87c58..f6847dd50cec 100644
--- a/.github/workflows/build-clang-format.yml
+++ b/.github/workflows/build-clang-format.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clang-format-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clarabel.yml b/.github/workflows/build-clarabel.yml
index 67a01eec45fc..0c5d84968299 100644
--- a/.github/workflows/build-clarabel.yml
+++ b/.github/workflows/build-clarabel.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clarabel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clevercsv.yml b/.github/workflows/build-clevercsv.yml
index 12cce3958c91..738c28e1a9fa 100644
--- a/.github/workflows/build-clevercsv.yml
+++ b/.github/workflows/build-clevercsv.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clevercsv-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clickhouse-cityhash.yml b/.github/workflows/build-clickhouse-cityhash.yml
index 1af01009ea8e..1fb3f123e1a4 100644
--- a/.github/workflows/build-clickhouse-cityhash.yml
+++ b/.github/workflows/build-clickhouse-cityhash.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-cityhash-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-clickhouse-connect.yml b/.github/workflows/build-clickhouse-connect.yml
index 2a0e762225ca..f250f84e1ba8 100644
--- a/.github/workflows/build-clickhouse-connect.yml
+++ b/.github/workflows/build-clickhouse-connect.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-connect-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-clickhouse-driver.yml b/.github/workflows/build-clickhouse-driver.yml
index 3b53bdfba249..eab2d4b37227 100644
--- a/.github/workflows/build-clickhouse-driver.yml
+++ b/.github/workflows/build-clickhouse-driver.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: clickhouse-driver-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cmarkgfm.yml b/.github/workflows/build-cmarkgfm.yml
index 91b952d22461..abdf968f5111 100644
--- a/.github/workflows/build-cmarkgfm.yml
+++ b/.github/workflows/build-cmarkgfm.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cmarkgfm-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cmeel-boost.yml b/.github/workflows/build-cmeel-boost.yml
index 512008248a7c..982e90aa8526 100644
--- a/.github/workflows/build-cmeel-boost.yml
+++ b/.github/workflows/build-cmeel-boost.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cmeel-boost-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coacd.yml b/.github/workflows/build-coacd.yml
index 7838f22c0ff3..22fde6ddb1cd 100644
--- a/.github/workflows/build-coacd.yml
+++ b/.github/workflows/build-coacd.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coacd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: coacd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-coincurve.yml b/.github/workflows/build-coincurve.yml
index 06deac9debad..217cbb5152a3 100644
--- a/.github/workflows/build-coincurve.yml
+++ b/.github/workflows/build-coincurve.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coincurve-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-complexipy.yml b/.github/workflows/build-complexipy.yml
index b529305d0a88..65286b1e419b 100644
--- a/.github/workflows/build-complexipy.yml
+++ b/.github/workflows/build-complexipy.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: complexipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-comrak.yml b/.github/workflows/build-comrak.yml
index a1b4c479c3bc..62636ae8a89f 100644
--- a/.github/workflows/build-comrak.yml
+++ b/.github/workflows/build-comrak.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: comrak-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-confluent-kafka.yml b/.github/workflows/build-confluent-kafka.yml
index 8b80dbcbe807..c1e2108ad906 100644
--- a/.github/workflows/build-confluent-kafka.yml
+++ b/.github/workflows/build-confluent-kafka.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: confluent-kafka-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-connected-components-3d.yml b/.github/workflows/build-connected-components-3d.yml
index b5712abcad05..2dc719dc9eeb 100644
--- a/.github/workflows/build-connected-components-3d.yml
+++ b/.github/workflows/build-connected-components-3d.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: connected-components-3d-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-connectorx.yml b/.github/workflows/build-connectorx.yml
index 4cba423936d3..84c4ff30cf9f 100644
--- a/.github/workflows/build-connectorx.yml
+++ b/.github/workflows/build-connectorx.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: connectorx-${{ matrix.version }}-*-riscv64
diff --git a/.github/workflows/build-convertbng.yml b/.github/workflows/build-convertbng.yml
index 2e5f7afbef43..5341a767f53f 100644
--- a/.github/workflows/build-convertbng.yml
+++ b/.github/workflows/build-convertbng.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: convertbng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coolprop.yml b/.github/workflows/build-coolprop.yml
index 599f61b7a58c..1bceed179260 100644
--- a/.github/workflows/build-coolprop.yml
+++ b/.github/workflows/build-coolprop.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coolprop-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-coreforecast.yml b/.github/workflows/build-coreforecast.yml
index 1f4613c284df..818a742f4ff0 100644
--- a/.github/workflows/build-coreforecast.yml
+++ b/.github/workflows/build-coreforecast.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: coreforecast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-correctionlib.yml b/.github/workflows/build-correctionlib.yml
index cad1588a91d9..70490d84ef16 100644
--- a/.github/workflows/build-correctionlib.yml
+++ b/.github/workflows/build-correctionlib.yml
@@ -188,5 +188,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: correctionlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cramjam.yml b/.github/workflows/build-cramjam.yml
index 5a3c98aeadad..464e495d3c0a 100644
--- a/.github/workflows/build-cramjam.yml
+++ b/.github/workflows/build-cramjam.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cramjam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crc32c.yml b/.github/workflows/build-crc32c.yml
index 4d1d40d58013..756553db815b 100644
--- a/.github/workflows/build-crc32c.yml
+++ b/.github/workflows/build-crc32c.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crc32c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crcmod-plus.yml b/.github/workflows/build-crcmod-plus.yml
index 2968e718e1c7..f2c5aea69b1d 100644
--- a/.github/workflows/build-crcmod-plus.yml
+++ b/.github/workflows/build-crcmod-plus.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crcmod-plus-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-crick.yml b/.github/workflows/build-crick.yml
index c33e07a1fafc..f0c4316a52bb 100644
--- a/.github/workflows/build-crick.yml
+++ b/.github/workflows/build-crick.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: crick-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cronexpr.yml b/.github/workflows/build-cronexpr.yml
index 9c1ad438ec79..814d055e419e 100644
--- a/.github/workflows/build-cronexpr.yml
+++ b/.github/workflows/build-cronexpr.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cronexpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cryptg.yml b/.github/workflows/build-cryptg.yml
index 810b2a932a7e..274b1b3ac7af 100644
--- a/.github/workflows/build-cryptg.yml
+++ b/.github/workflows/build-cryptg.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cryptg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cryptography.yml b/.github/workflows/build-cryptography.yml
index 7ba3f0b4a831..2c485b2b7a32 100644
--- a/.github/workflows/build-cryptography.yml
+++ b/.github/workflows/build-cryptography.yml
@@ -277,5 +277,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cryptography-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-css-inline.yml b/.github/workflows/build-css-inline.yml
index 80cec2f08444..61e75faa7992 100644
--- a/.github/workflows/build-css-inline.yml
+++ b/.github/workflows/build-css-inline.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: css-inline-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ct3.yml b/.github/workflows/build-ct3.yml
index 682fbafdf09c..f47e0f1c8da3 100644
--- a/.github/workflows/build-ct3.yml
+++ b/.github/workflows/build-ct3.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ct3-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ctranslate2.yml b/.github/workflows/build-ctranslate2.yml
index d2e8f4372c55..2eba608b2bee 100644
--- a/.github/workflows/build-ctranslate2.yml
+++ b/.github/workflows/build-ctranslate2.yml
@@ -211,6 +211,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ctranslate2-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: ctranslate2-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-curated-tokenizers.yml b/.github/workflows/build-curated-tokenizers.yml
index ea1dbdba1d17..f7a7f9ecc325 100644
--- a/.github/workflows/build-curated-tokenizers.yml
+++ b/.github/workflows/build-curated-tokenizers.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: curated-tokenizers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cwcwidth.yml b/.github/workflows/build-cwcwidth.yml
index 1d3b380a97af..760a411fad43 100644
--- a/.github/workflows/build-cwcwidth.yml
+++ b/.github/workflows/build-cwcwidth.yml
@@ -142,5 +142,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cwcwidth-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cydifflib.yml b/.github/workflows/build-cydifflib.yml
index 12385694a4a0..7474ddada05b 100644
--- a/.github/workflows/build-cydifflib.yml
+++ b/.github/workflows/build-cydifflib.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cydifflib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cyksuid.yml b/.github/workflows/build-cyksuid.yml
index 0104c97365f4..6076b2acabfa 100644
--- a/.github/workflows/build-cyksuid.yml
+++ b/.github/workflows/build-cyksuid.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cyksuid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cymem.yml b/.github/workflows/build-cymem.yml
index b786306a51fc..7b799dee72cf 100644
--- a/.github/workflows/build-cymem.yml
+++ b/.github/workflows/build-cymem.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cymem-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cysignals.yml b/.github/workflows/build-cysignals.yml
index 59a956c8fe2f..2ff7a5ab47a3 100644
--- a/.github/workflows/build-cysignals.yml
+++ b/.github/workflows/build-cysignals.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cysignals-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-cysystemd.yml b/.github/workflows/build-cysystemd.yml
index 18f4af5fd74f..af8a6c4cd9da 100644
--- a/.github/workflows/build-cysystemd.yml
+++ b/.github/workflows/build-cysystemd.yml
@@ -245,6 +245,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cysystemd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: cysystemd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-cython.yml b/.github/workflows/build-cython.yml
index 4908dffb3932..2dc02b1e191c 100644
--- a/.github/workflows/build-cython.yml
+++ b/.github/workflows/build-cython.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cython-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-cyvcf2.yml b/.github/workflows/build-cyvcf2.yml
index 6886fc031c69..acfcc858f075 100644
--- a/.github/workflows/build-cyvcf2.yml
+++ b/.github/workflows/build-cyvcf2.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: cyvcf2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-daft.yml b/.github/workflows/build-daft.yml
index 18a92abf244c..48237d7abb02 100644
--- a/.github/workflows/build-daft.yml
+++ b/.github/workflows/build-daft.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: daft-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-databento-dbn.yml b/.github/workflows/build-databento-dbn.yml
index 893edccea2a3..985d39fdca08 100644
--- a/.github/workflows/build-databento-dbn.yml
+++ b/.github/workflows/build-databento-dbn.yml
@@ -142,5 +142,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: databento_dbn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-datasketches.yml b/.github/workflows/build-datasketches.yml
index 94c6f6856081..fe7c91010e1f 100644
--- a/.github/workflows/build-datasketches.yml
+++ b/.github/workflows/build-datasketches.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: datasketches-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-datefinder.yml b/.github/workflows/build-datefinder.yml
index 7dc71d196e71..9d01d4161a4c 100644
--- a/.github/workflows/build-datefinder.yml
+++ b/.github/workflows/build-datefinder.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: datefinder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-davey.yml b/.github/workflows/build-davey.yml
index b1726fe225b2..ab2b0111d23d 100644
--- a/.github/workflows/build-davey.yml
+++ b/.github/workflows/build-davey.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: davey-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dbt-extractor.yml b/.github/workflows/build-dbt-extractor.yml
index c7121cedea08..b48965f06f8f 100644
--- a/.github/workflows/build-dbt-extractor.yml
+++ b/.github/workflows/build-dbt-extractor.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dbt-extractor-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ddtrace.yml b/.github/workflows/build-ddtrace.yml
index c0bada625240..ef9f20029293 100644
--- a/.github/workflows/build-ddtrace.yml
+++ b/.github/workflows/build-ddtrace.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ddtrace-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-debugpy.yml b/.github/workflows/build-debugpy.yml
index f9115666a879..2049ea2f0bed 100644
--- a/.github/workflows/build-debugpy.yml
+++ b/.github/workflows/build-debugpy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: debugpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-decord.yml b/.github/workflows/build-decord.yml
index 876160801aa8..a0843ed4e6f4 100644
--- a/.github/workflows/build-decord.yml
+++ b/.github/workflows/build-decord.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: decord-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deflate.yml b/.github/workflows/build-deflate.yml
index 8c4bada7a518..96f24fa22984 100644
--- a/.github/workflows/build-deflate.yml
+++ b/.github/workflows/build-deflate.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deflate-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml b/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
index 65c8710b7aab..1ab997c6244f 100644
--- a/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
+++ b/.github/workflows/build-delta-kernel-rust-sharing-wrapper.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: delta-kernel-rust-sharing-wrapper-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deltalake.yml b/.github/workflows/build-deltalake.yml
index ab2bf812fa95..1678c5caece5 100644
--- a/.github/workflows/build-deltalake.yml
+++ b/.github/workflows/build-deltalake.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deltalake-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deltalite.yml b/.github/workflows/build-deltalite.yml
index a3cb92425630..139fdf927185 100644
--- a/.github/workflows/build-deltalite.yml
+++ b/.github/workflows/build-deltalite.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deltalite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-demoparser2.yml b/.github/workflows/build-demoparser2.yml
index c166d9db6bbe..c95f717cbbf1 100644
--- a/.github/workflows/build-demoparser2.yml
+++ b/.github/workflows/build-demoparser2.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: demoparser2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dependency-injector.yml b/.github/workflows/build-dependency-injector.yml
index a9c7aae0a9eb..8428eade7754 100644
--- a/.github/workflows/build-dependency-injector.yml
+++ b/.github/workflows/build-dependency-injector.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dependency-injector-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-deptry.yml b/.github/workflows/build-deptry.yml
index e15f3b970b94..e51a134f945f 100644
--- a/.github/workflows/build-deptry.yml
+++ b/.github/workflows/build-deptry.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: deptry-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-diptest.yml b/.github/workflows/build-diptest.yml
index 9a510f8f15b0..8540aafcd6e5 100644
--- a/.github/workflows/build-diptest.yml
+++ b/.github/workflows/build-diptest.yml
@@ -143,6 +143,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: diptest-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: diptest-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-djade.yml b/.github/workflows/build-djade.yml
index 0a1f38d03578..90b6fc8e13a4 100644
--- a/.github/workflows/build-djade.yml
+++ b/.github/workflows/build-djade.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: djade-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-djlint.yml b/.github/workflows/build-djlint.yml
index e9412a188d43..c3493af1fb54 100644
--- a/.github/workflows/build-djlint.yml
+++ b/.github/workflows/build-djlint.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: djlint-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dlib-bin.yml b/.github/workflows/build-dlib-bin.yml
index 7ddc5ac4acc4..0087be925960 100644
--- a/.github/workflows/build-dlib-bin.yml
+++ b/.github/workflows/build-dlib-bin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dlib-bin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dm-tree.yml b/.github/workflows/build-dm-tree.yml
index 20dad5753bd4..b6e11593bc6c 100644
--- a/.github/workflows/build-dm-tree.yml
+++ b/.github/workflows/build-dm-tree.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dm-tree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dnaio.yml b/.github/workflows/build-dnaio.yml
index 44cec43e8711..14e57c03ef4a 100644
--- a/.github/workflows/build-dnaio.yml
+++ b/.github/workflows/build-dnaio.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dnaio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-docling-parse.yml b/.github/workflows/build-docling-parse.yml
index 8b7560378faa..8af2ac980a02 100644
--- a/.github/workflows/build-docling-parse.yml
+++ b/.github/workflows/build-docling-parse.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: docling-parse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-doublemetaphone.yml b/.github/workflows/build-doublemetaphone.yml
index 997aac5fcf4a..0de528deb97e 100644
--- a/.github/workflows/build-doublemetaphone.yml
+++ b/.github/workflows/build-doublemetaphone.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: doublemetaphone-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dprint-py.yml b/.github/workflows/build-dprint-py.yml
index f3839890aa63..82dfbc866a0d 100644
--- a/.github/workflows/build-dprint-py.yml
+++ b/.github/workflows/build-dprint-py.yml
@@ -236,5 +236,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dprint-py-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-dracopy.yml b/.github/workflows/build-dracopy.yml
index 915faf4015f1..e5ed25e2e65d 100644
--- a/.github/workflows/build-dracopy.yml
+++ b/.github/workflows/build-dracopy.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dracopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dtaidistance.yml b/.github/workflows/build-dtaidistance.yml
index 3deb52a0ec9f..90213119a5fa 100644
--- a/.github/workflows/build-dtaidistance.yml
+++ b/.github/workflows/build-dtaidistance.yml
@@ -139,6 +139,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dtaidistance-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: dtaidistance-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-duckdb.yml b/.github/workflows/build-duckdb.yml
index 23089f27052e..29fd79af4621 100644
--- a/.github/workflows/build-duckdb.yml
+++ b/.github/workflows/build-duckdb.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: duckdb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dukpy.yml b/.github/workflows/build-dukpy.yml
index 50828760ca9b..3a9f1844bd4a 100644
--- a/.github/workflows/build-dukpy.yml
+++ b/.github/workflows/build-dukpy.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dukpy-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-dulwich.yml b/.github/workflows/build-dulwich.yml
index d7edc9046af4..d691859b8352 100644
--- a/.github/workflows/build-dulwich.yml
+++ b/.github/workflows/build-dulwich.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dulwich-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-dumb-init.yml b/.github/workflows/build-dumb-init.yml
index 4dc1eabd0c45..714be44b687b 100644
--- a/.github/workflows/build-dumb-init.yml
+++ b/.github/workflows/build-dumb-init.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: dumb-init-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-eccodeslib.yml b/.github/workflows/build-eccodeslib.yml
index b2013a7e2cd0..7c061ed0799a 100644
--- a/.github/workflows/build-eccodeslib.yml
+++ b/.github/workflows/build-eccodeslib.yml
@@ -259,5 +259,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: eccodeslib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ecos.yml b/.github/workflows/build-ecos.yml
index c3dd90d438bf..32b9b644cddf 100644
--- a/.github/workflows/build-ecos.yml
+++ b/.github/workflows/build-ecos.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ecos-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-editdistance.yml b/.github/workflows/build-editdistance.yml
index cb53d8e3469a..ed8beca537b8 100644
--- a/.github/workflows/build-editdistance.yml
+++ b/.github/workflows/build-editdistance.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: editdistance-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-editdistpy.yml b/.github/workflows/build-editdistpy.yml
index f8ad2c7873ea..8e6983f4bb89 100644
--- a/.github/workflows/build-editdistpy.yml
+++ b/.github/workflows/build-editdistpy.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: editdistpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-edlib.yml b/.github/workflows/build-edlib.yml
index 8e3a7e35b952..8c89d90b149b 100644
--- a/.github/workflows/build-edlib.yml
+++ b/.github/workflows/build-edlib.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: edlib-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-edt.yml b/.github/workflows/build-edt.yml
index 8cd1669c1b91..c4dbcff03545 100644
--- a/.github/workflows/build-edt.yml
+++ b/.github/workflows/build-edt.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: edt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ephem.yml b/.github/workflows/build-ephem.yml
index 0d556823404f..f9175e6d3e55 100644
--- a/.github/workflows/build-ephem.yml
+++ b/.github/workflows/build-ephem.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ephem-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-espeakng-loader.yml b/.github/workflows/build-espeakng-loader.yml
index a704bda4f838..7262e62b4d63 100644
--- a/.github/workflows/build-espeakng-loader.yml
+++ b/.github/workflows/build-espeakng-loader.yml
@@ -235,6 +235,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: espeakng-loader-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: espeakng-loader-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-extensionclass.yml b/.github/workflows/build-extensionclass.yml
index b1acd96c73ea..ef9d88fb0cc0 100644
--- a/.github/workflows/build-extensionclass.yml
+++ b/.github/workflows/build-extensionclass.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: extensionclass-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ezdxf.yml b/.github/workflows/build-ezdxf.yml
index 1444ac02b966..f978b90ed3d5 100644
--- a/.github/workflows/build-ezdxf.yml
+++ b/.github/workflows/build-ezdxf.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ezdxf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fabio.yml b/.github/workflows/build-fabio.yml
index c3a56893b753..43912fe3a18c 100644
--- a/.github/workflows/build-fabio.yml
+++ b/.github/workflows/build-fabio.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fabio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faiss-cpu.yml b/.github/workflows/build-faiss-cpu.yml
index 76b6638ce40b..ddf2d5bf6d64 100644
--- a/.github/workflows/build-faiss-cpu.yml
+++ b/.github/workflows/build-faiss-cpu.yml
@@ -145,6 +145,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faiss-cpu-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: faiss-cpu-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-fast-diff-match-patch.yml b/.github/workflows/build-fast-diff-match-patch.yml
index 49d9dcf87706..736ba27d5899 100644
--- a/.github/workflows/build-fast-diff-match-patch.yml
+++ b/.github/workflows/build-fast-diff-match-patch.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-diff-match-patch-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-fast-histogram.yml b/.github/workflows/build-fast-histogram.yml
index 2312a421cefd..abd7476d94ef 100644
--- a/.github/workflows/build-fast-histogram.yml
+++ b/.github/workflows/build-fast-histogram.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-histogram-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fast-simplification.yml b/.github/workflows/build-fast-simplification.yml
index 0cafda1acbbe..2653c5661749 100644
--- a/.github/workflows/build-fast-simplification.yml
+++ b/.github/workflows/build-fast-simplification.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-simplification-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fast-walk.yml b/.github/workflows/build-fast-walk.yml
index 8afd1c5d07e4..1b2daa8d55e9 100644
--- a/.github/workflows/build-fast-walk.yml
+++ b/.github/workflows/build-fast-walk.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fast-walk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastavro.yml b/.github/workflows/build-fastavro.yml
index 0052195acfc2..299c60e323f7 100644
--- a/.github/workflows/build-fastavro.yml
+++ b/.github/workflows/build-fastavro.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastavro-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastcluster.yml b/.github/workflows/build-fastcluster.yml
index de38d0c25b56..a33fb504062e 100644
--- a/.github/workflows/build-fastcluster.yml
+++ b/.github/workflows/build-fastcluster.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastcluster-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastdigest.yml b/.github/workflows/build-fastdigest.yml
index 25f08c7dec43..e89cf17f2916 100644
--- a/.github/workflows/build-fastdigest.yml
+++ b/.github/workflows/build-fastdigest.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastdigest-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faster-fifo.yml b/.github/workflows/build-faster-fifo.yml
index 60f8b35895fa..8a01ce3b56ba 100644
--- a/.github/workflows/build-faster-fifo.yml
+++ b/.github/workflows/build-faster-fifo.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faster-fifo-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-fastexcel.yml b/.github/workflows/build-fastexcel.yml
index 23b07e28f2e1..2db923cd1914 100644
--- a/.github/workflows/build-fastexcel.yml
+++ b/.github/workflows/build-fastexcel.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastexcel-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-fastnanoid.yml b/.github/workflows/build-fastnanoid.yml
index 98d0e1d4d4bc..8b06a33aa499 100644
--- a/.github/workflows/build-fastnanoid.yml
+++ b/.github/workflows/build-fastnanoid.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastnanoid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastnumbers.yml b/.github/workflows/build-fastnumbers.yml
index 0558c7c3a44d..87236e2fa389 100644
--- a/.github/workflows/build-fastnumbers.yml
+++ b/.github/workflows/build-fastnumbers.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastnumbers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastobo.yml b/.github/workflows/build-fastobo.yml
index 9aa45be5650c..1153521517fb 100644
--- a/.github/workflows/build-fastobo.yml
+++ b/.github/workflows/build-fastobo.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastobo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastparquet.yml b/.github/workflows/build-fastparquet.yml
index b668ad841d0a..fb86d22077a1 100644
--- a/.github/workflows/build-fastparquet.yml
+++ b/.github/workflows/build-fastparquet.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastparquet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastremap.yml b/.github/workflows/build-fastremap.yml
index 7fb43dd6e634..887490f06cb6 100644
--- a/.github/workflows/build-fastremap.yml
+++ b/.github/workflows/build-fastremap.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastremap-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastsafetensors.yml b/.github/workflows/build-fastsafetensors.yml
index 07c8d1eaa6fd..f446e547e7d3 100644
--- a/.github/workflows/build-fastsafetensors.yml
+++ b/.github/workflows/build-fastsafetensors.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastsafetensors-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fasttext-predict.yml b/.github/workflows/build-fasttext-predict.yml
index df73cd01e3e4..840201021595 100644
--- a/.github/workflows/build-fasttext-predict.yml
+++ b/.github/workflows/build-fasttext-predict.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fasttext-predict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fasttext-wheel.yml b/.github/workflows/build-fasttext-wheel.yml
index f28c66aa76df..4c07e237d3ff 100644
--- a/.github/workflows/build-fasttext-wheel.yml
+++ b/.github/workflows/build-fasttext-wheel.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fasttext-wheel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastuuid.yml b/.github/workflows/build-fastuuid.yml
index 8f7e9684e74c..8dd74ecb5889 100644
--- a/.github/workflows/build-fastuuid.yml
+++ b/.github/workflows/build-fastuuid.yml
@@ -179,5 +179,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastuuid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fastwarc.yml b/.github/workflows/build-fastwarc.yml
index 0e36f213ed1e..c6f2257016b4 100644
--- a/.github/workflows/build-fastwarc.yml
+++ b/.github/workflows/build-fastwarc.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fastwarc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-faust-cchardet.yml b/.github/workflows/build-faust-cchardet.yml
index 393d6e97f445..8467e42e8546 100644
--- a/.github/workflows/build-faust-cchardet.yml
+++ b/.github/workflows/build-faust-cchardet.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: faust-cchardet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fill-voids.yml b/.github/workflows/build-fill-voids.yml
index 6fd68e9ffd6f..c9608b1932f0 100644
--- a/.github/workflows/build-fill-voids.yml
+++ b/.github/workflows/build-fill-voids.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fill-voids-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fiona.yml b/.github/workflows/build-fiona.yml
index 006c0cd16f9c..846861f114bf 100644
--- a/.github/workflows/build-fiona.yml
+++ b/.github/workflows/build-fiona.yml
@@ -556,5 +556,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fiona-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-firecrawl-anydoc.yml b/.github/workflows/build-firecrawl-anydoc.yml
index a77605345e62..943a70b3a82f 100644
--- a/.github/workflows/build-firecrawl-anydoc.yml
+++ b/.github/workflows/build-firecrawl-anydoc.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: firecrawl_anydoc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-flpc.yml b/.github/workflows/build-flpc.yml
index 20493f494b41..d23d031813e6 100644
--- a/.github/workflows/build-flpc.yml
+++ b/.github/workflows/build-flpc.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: flpc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fnv-hash-fast.yml b/.github/workflows/build-fnv-hash-fast.yml
index b8e926b4e3da..fb5fc5229abf 100644
--- a/.github/workflows/build-fnv-hash-fast.yml
+++ b/.github/workflows/build-fnv-hash-fast.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fnv-hash-fast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fonttools.yml b/.github/workflows/build-fonttools.yml
index 3e77af6b9b9d..c97e969480a3 100644
--- a/.github/workflows/build-fonttools.yml
+++ b/.github/workflows/build-fonttools.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fonttools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-freetype-py.yml b/.github/workflows/build-freetype-py.yml
index aeec6f1e6958..380487f77c86 100644
--- a/.github/workflows/build-freetype-py.yml
+++ b/.github/workflows/build-freetype-py.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: freetype-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fugashi.yml b/.github/workflows/build-fugashi.yml
index 3b6cf16147ac..0bda9c17ac09 100644
--- a/.github/workflows/build-fugashi.yml
+++ b/.github/workflows/build-fugashi.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fugashi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fuzzysearch.yml b/.github/workflows/build-fuzzysearch.yml
index 500ff7794c80..5c8566e94a5d 100644
--- a/.github/workflows/build-fuzzysearch.yml
+++ b/.github/workflows/build-fuzzysearch.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fuzzysearch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-fuzzyset2.yml b/.github/workflows/build-fuzzyset2.yml
index a4ec309ceeeb..5a3514378a5e 100644
--- a/.github/workflows/build-fuzzyset2.yml
+++ b/.github/workflows/build-fuzzyset2.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: fuzzyset2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gdstk.yml b/.github/workflows/build-gdstk.yml
index 6aeeea22691a..5172a8f23b16 100644
--- a/.github/workflows/build-gdstk.yml
+++ b/.github/workflows/build-gdstk.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gdstk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gemmi.yml b/.github/workflows/build-gemmi.yml
index 68da4d00ffd4..c7a712ac05c1 100644
--- a/.github/workflows/build-gemmi.yml
+++ b/.github/workflows/build-gemmi.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gemmi-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-gensim.yml b/.github/workflows/build-gensim.yml
index d77fba1f85dd..23b7ccff2723 100644
--- a/.github/workflows/build-gensim.yml
+++ b/.github/workflows/build-gensim.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gensim-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gevent.yml b/.github/workflows/build-gevent.yml
index 0532cc06a3a1..507af1221aa6 100644
--- a/.github/workflows/build-gevent.yml
+++ b/.github/workflows/build-gevent.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gevent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-geventhttpclient.yml b/.github/workflows/build-geventhttpclient.yml
index 34d679be233b..dc0d5d1e85a4 100644
--- a/.github/workflows/build-geventhttpclient.yml
+++ b/.github/workflows/build-geventhttpclient.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: geventhttpclient-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gilknocker.yml b/.github/workflows/build-gilknocker.yml
index 103a9d1782b8..11c2093c7fd9 100644
--- a/.github/workflows/build-gilknocker.yml
+++ b/.github/workflows/build-gilknocker.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gilknocker-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-git-cliff.yml b/.github/workflows/build-git-cliff.yml
index adb4a5af2eb3..824201cde36d 100644
--- a/.github/workflows/build-git-cliff.yml
+++ b/.github/workflows/build-git-cliff.yml
@@ -181,5 +181,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: git-cliff-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-glcontext.yml b/.github/workflows/build-glcontext.yml
index 4ed8935576d1..902937bda8b9 100644
--- a/.github/workflows/build-glcontext.yml
+++ b/.github/workflows/build-glcontext.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: glcontext-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-glfw.yml b/.github/workflows/build-glfw.yml
index 62bd40140564..d65da0d6ea87 100644
--- a/.github/workflows/build-glfw.yml
+++ b/.github/workflows/build-glfw.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: glfw-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gmpy2.yml b/.github/workflows/build-gmpy2.yml
index 220c4b83a9ad..8c836ab1c33e 100644
--- a/.github/workflows/build-gmpy2.yml
+++ b/.github/workflows/build-gmpy2.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gmpy2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gmsh.yml b/.github/workflows/build-gmsh.yml
index dc1b50b12d23..861807cfb3fe 100644
--- a/.github/workflows/build-gmsh.yml
+++ b/.github/workflows/build-gmsh.yml
@@ -147,5 +147,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gmsh-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gnureadline.yml b/.github/workflows/build-gnureadline.yml
index 8010f464ccdd..8bb28635650a 100644
--- a/.github/workflows/build-gnureadline.yml
+++ b/.github/workflows/build-gnureadline.yml
@@ -134,6 +134,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gnureadline-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: gnureadline-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-google-crc32c.yml b/.github/workflows/build-google-crc32c.yml
index 61f8a8951ebc..b644da66635c 100644
--- a/.github/workflows/build-google-crc32c.yml
+++ b/.github/workflows/build-google-crc32c.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: google-crc32c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-google-re2.yml b/.github/workflows/build-google-re2.yml
index a01ea854be65..38ae3037bceb 100644
--- a/.github/workflows/build-google-re2.yml
+++ b/.github/workflows/build-google-re2.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: google-re2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-gpiod.yml b/.github/workflows/build-gpiod.yml
index 908da68e0a91..d2e23b79191d 100644
--- a/.github/workflows/build-gpiod.yml
+++ b/.github/workflows/build-gpiod.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: gpiod-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-granian.yml b/.github/workflows/build-granian.yml
index 1bfdeb413ce7..8b6fdcdbc37d 100644
--- a/.github/workflows/build-granian.yml
+++ b/.github/workflows/build-granian.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: granian-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grimp.yml b/.github/workflows/build-grimp.yml
index 5e3a71521aec..0ec3fa06a1f5 100644
--- a/.github/workflows/build-grimp.yml
+++ b/.github/workflows/build-grimp.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grimp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grpcio-tools.yml b/.github/workflows/build-grpcio-tools.yml
index ea44d6de5936..4c2369abc09e 100644
--- a/.github/workflows/build-grpcio-tools.yml
+++ b/.github/workflows/build-grpcio-tools.yml
@@ -163,5 +163,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grpcio-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-grpcio.yml b/.github/workflows/build-grpcio.yml
index 3efe74a71633..df671a9f1757 100644
--- a/.github/workflows/build-grpcio.yml
+++ b/.github/workflows/build-grpcio.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: grpcio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-guppy3.yml b/.github/workflows/build-guppy3.yml
index 4d134d54bcd7..0a246f436fc2 100644
--- a/.github/workflows/build-guppy3.yml
+++ b/.github/workflows/build-guppy3.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: guppy3-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-h3.yml b/.github/workflows/build-h3.yml
index 5c360ad96615..750b0bda2058 100644
--- a/.github/workflows/build-h3.yml
+++ b/.github/workflows/build-h3.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: h3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-h5py.yml b/.github/workflows/build-h5py.yml
index 0b731345362b..dff122327d0c 100644
--- a/.github/workflows/build-h5py.yml
+++ b/.github/workflows/build-h5py.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: h5py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-habluetooth.yml b/.github/workflows/build-habluetooth.yml
index 95f87607b291..8df531b6e71a 100644
--- a/.github/workflows/build-habluetooth.yml
+++ b/.github/workflows/build-habluetooth.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: habluetooth-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdbscan.yml b/.github/workflows/build-hdbscan.yml
index d5ec33b0d5a8..252fb3ea1450 100644
--- a/.github/workflows/build-hdbscan.yml
+++ b/.github/workflows/build-hdbscan.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdbscan-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdf5plugin.yml b/.github/workflows/build-hdf5plugin.yml
index fbea70ac4f4c..9d19e26b984d 100644
--- a/.github/workflows/build-hdf5plugin.yml
+++ b/.github/workflows/build-hdf5plugin.yml
@@ -151,5 +151,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdf5plugin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hdrhistogram.yml b/.github/workflows/build-hdrhistogram.yml
index 19b58f25d34d..82ddad91cf89 100644
--- a/.github/workflows/build-hdrhistogram.yml
+++ b/.github/workflows/build-hdrhistogram.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hdrhistogram-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-hf-xet.yml b/.github/workflows/build-hf-xet.yml
index 4ea2ac7b64d7..efc175c4257f 100644
--- a/.github/workflows/build-hf-xet.yml
+++ b/.github/workflows/build-hf-xet.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hf-xet-${{ matrix.version }}-*-riscv64
diff --git a/.github/workflows/build-hidapi.yml b/.github/workflows/build-hidapi.yml
index 2aa92f8a1852..cba97d8dc096 100644
--- a/.github/workflows/build-hidapi.yml
+++ b/.github/workflows/build-hidapi.yml
@@ -211,6 +211,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hidapi-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: hidapi-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-highspy.yml b/.github/workflows/build-highspy.yml
index 61faef124f94..b70549ac4964 100644
--- a/.github/workflows/build-highspy.yml
+++ b/.github/workflows/build-highspy.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: highspy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hiredis.yml b/.github/workflows/build-hiredis.yml
index 8de78acef48c..3e1bd29b346b 100644
--- a/.github/workflows/build-hiredis.yml
+++ b/.github/workflows/build-hiredis.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hiredis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hmmlearn.yml b/.github/workflows/build-hmmlearn.yml
index 0df13b41cd97..7e818db91614 100644
--- a/.github/workflows/build-hmmlearn.yml
+++ b/.github/workflows/build-hmmlearn.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hmmlearn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hogql-parser-rs.yml b/.github/workflows/build-hogql-parser-rs.yml
index 762077996743..2d00b612d391 100644
--- a/.github/workflows/build-hogql-parser-rs.yml
+++ b/.github/workflows/build-hogql-parser-rs.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hogql-parser-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hogql-parser.yml b/.github/workflows/build-hogql-parser.yml
index 1427ce7dc6c4..0b9072665cdd 100644
--- a/.github/workflows/build-hogql-parser.yml
+++ b/.github/workflows/build-hogql-parser.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hogql-parser-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-html-to-markdown.yml b/.github/workflows/build-html-to-markdown.yml
index 09c481a324cc..d59b3adc6932 100644
--- a/.github/workflows/build-html-to-markdown.yml
+++ b/.github/workflows/build-html-to-markdown.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: html-to-markdown-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-httpr.yml b/.github/workflows/build-httpr.yml
index 385cfa0da628..bbc2f12bbca0 100644
--- a/.github/workflows/build-httpr.yml
+++ b/.github/workflows/build-httpr.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: httpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-hypothesis.yml b/.github/workflows/build-hypothesis.yml
index 013b25588bb6..28151d7511e3 100644
--- a/.github/workflows/build-hypothesis.yml
+++ b/.github/workflows/build-hypothesis.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: hypothesis-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-igraph.yml b/.github/workflows/build-igraph.yml
index aaf8e3b71de4..437fe3cd0c54 100644
--- a/.github/workflows/build-igraph.yml
+++ b/.github/workflows/build-igraph.yml
@@ -187,6 +187,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: igraph-${{ matrix.version }}-*riscv64
       gpl-sources-artifact: igraph-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-ijson.yml b/.github/workflows/build-ijson.yml
index 706f439fd903..0aa02756cede 100644
--- a/.github/workflows/build-ijson.yml
+++ b/.github/workflows/build-ijson.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ijson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-imagecodecs.yml b/.github/workflows/build-imagecodecs.yml
index 046f6978f1ad..699dc0c280d0 100644
--- a/.github/workflows/build-imagecodecs.yml
+++ b/.github/workflows/build-imagecodecs.yml
@@ -164,5 +164,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: imagecodecs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-imgui.yml b/.github/workflows/build-imgui.yml
index 9d7be7850716..326b8acaa31a 100644
--- a/.github/workflows/build-imgui.yml
+++ b/.github/workflows/build-imgui.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: imgui-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-iminuit.yml b/.github/workflows/build-iminuit.yml
index e0d6b1c7c113..263a5dcf83f2 100644
--- a/.github/workflows/build-iminuit.yml
+++ b/.github/workflows/build-iminuit.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: iminuit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-immutables.yml b/.github/workflows/build-immutables.yml
index 11b2d3ab348a..8c85caff4c47 100644
--- a/.github/workflows/build-immutables.yml
+++ b/.github/workflows/build-immutables.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: immutables-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-impit.yml b/.github/workflows/build-impit.yml
index 2eaea00eb972..3bc6ff4f3576 100644
--- a/.github/workflows/build-impit.yml
+++ b/.github/workflows/build-impit.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: impit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-indexed-gzip.yml b/.github/workflows/build-indexed-gzip.yml
index 6823988c9f6c..b0c6cea81c7f 100644
--- a/.github/workflows/build-indexed-gzip.yml
+++ b/.github/workflows/build-indexed-gzip.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: indexed-gzip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-inflate64.yml b/.github/workflows/build-inflate64.yml
index 2cb66c0c33f4..9eca035ceec7 100644
--- a/.github/workflows/build-inflate64.yml
+++ b/.github/workflows/build-inflate64.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: inflate64-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-intbitset.yml b/.github/workflows/build-intbitset.yml
index dbb1c656ed55..4ce9d0638873 100644
--- a/.github/workflows/build-intbitset.yml
+++ b/.github/workflows/build-intbitset.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: intbitset-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-isal.yml b/.github/workflows/build-isal.yml
index 00a718fcf2c1..01fbd6fd67b0 100644
--- a/.github/workflows/build-isal.yml
+++ b/.github/workflows/build-isal.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: isal-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-islpy.yml b/.github/workflows/build-islpy.yml
index bb5fd3580bc8..b60bfee928ab 100644
--- a/.github/workflows/build-islpy.yml
+++ b/.github/workflows/build-islpy.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: islpy-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-iteration-utilities.yml b/.github/workflows/build-iteration-utilities.yml
index a36af1cf4afe..e432d3dcb970 100644
--- a/.github/workflows/build-iteration-utilities.yml
+++ b/.github/workflows/build-iteration-utilities.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: iteration-utilities-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jellyfish.yml b/.github/workflows/build-jellyfish.yml
index 411b7686c53c..548f95346d51 100644
--- a/.github/workflows/build-jellyfish.yml
+++ b/.github/workflows/build-jellyfish.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jellyfish-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jenkspy.yml b/.github/workflows/build-jenkspy.yml
index 090b837d7af8..0353a5ad1562 100644
--- a/.github/workflows/build-jenkspy.yml
+++ b/.github/workflows/build-jenkspy.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jenkspy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jpype1.yml b/.github/workflows/build-jpype1.yml
index 65b073ce6ae3..cbfe7da5c815 100644
--- a/.github/workflows/build-jpype1.yml
+++ b/.github/workflows/build-jpype1.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jpype1-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jq.yml b/.github/workflows/build-jq.yml
index b923e96c96b2..e845f938d0f4 100644
--- a/.github/workflows/build-jq.yml
+++ b/.github/workflows/build-jq.yml
@@ -151,5 +151,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jq-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-json-stream-rs-tokenizer.yml b/.github/workflows/build-json-stream-rs-tokenizer.yml
index 4a3a7a62a999..f58c0c6de194 100644
--- a/.github/workflows/build-json-stream-rs-tokenizer.yml
+++ b/.github/workflows/build-json-stream-rs-tokenizer.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: json-stream-rs-tokenizer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsoncompat.yml b/.github/workflows/build-jsoncompat.yml
index 4055646163a2..838affc4889f 100644
--- a/.github/workflows/build-jsoncompat.yml
+++ b/.github/workflows/build-jsoncompat.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsoncompat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonnet.yml b/.github/workflows/build-jsonnet.yml
index 16612fad0917..604b9bd99b0d 100644
--- a/.github/workflows/build-jsonnet.yml
+++ b/.github/workflows/build-jsonnet.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonnet-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonobject.yml b/.github/workflows/build-jsonobject.yml
index 12542050f1e6..76a03bff5c9c 100644
--- a/.github/workflows/build-jsonobject.yml
+++ b/.github/workflows/build-jsonobject.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonobject-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-jsonpath-rust-bindings.yml b/.github/workflows/build-jsonpath-rust-bindings.yml
index a0b0436c80d4..bbe91e6736a9 100644
--- a/.github/workflows/build-jsonpath-rust-bindings.yml
+++ b/.github/workflows/build-jsonpath-rust-bindings.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonpath-rust-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-jsonschema-rs.yml b/.github/workflows/build-jsonschema-rs.yml
index f64a636a342f..ab85f7e621cd 100644
--- a/.github/workflows/build-jsonschema-rs.yml
+++ b/.github/workflows/build-jsonschema-rs.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: jsonschema_rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-just-bin.yml b/.github/workflows/build-just-bin.yml
index 5ddb228d3282..6ec23eaed84e 100644
--- a/.github/workflows/build-just-bin.yml
+++ b/.github/workflows/build-just-bin.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: just-bin-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-kaldi-native-fbank.yml b/.github/workflows/build-kaldi-native-fbank.yml
index b2a174f2a3c8..ba35b64202e4 100644
--- a/.github/workflows/build-kaldi-native-fbank.yml
+++ b/.github/workflows/build-kaldi-native-fbank.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kaldi-native-fbank-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-kaldialign.yml b/.github/workflows/build-kaldialign.yml
index e36b7c565f92..ca620af0ecf9 100644
--- a/.github/workflows/build-kaldialign.yml
+++ b/.github/workflows/build-kaldialign.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kaldialign-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-keystone-engine.yml b/.github/workflows/build-keystone-engine.yml
index 017e65bdebf1..17c1da3c020e 100644
--- a/.github/workflows/build-keystone-engine.yml
+++ b/.github/workflows/build-keystone-engine.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: keystone-engine-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-kornia-rs.yml b/.github/workflows/build-kornia-rs.yml
index a9a6fffd8fa5..555d9fdb1832 100644
--- a/.github/workflows/build-kornia-rs.yml
+++ b/.github/workflows/build-kornia-rs.yml
@@ -146,5 +146,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: kornia-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-labmaze.yml b/.github/workflows/build-labmaze.yml
index db279644f772..3ef63aa8f0af 100644
--- a/.github/workflows/build-labmaze.yml
+++ b/.github/workflows/build-labmaze.yml
@@ -298,5 +298,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: labmaze-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lameenc.yml b/.github/workflows/build-lameenc.yml
index 5e14789b2b74..7b510ea2cf35 100644
--- a/.github/workflows/build-lameenc.yml
+++ b/.github/workflows/build-lameenc.yml
@@ -167,6 +167,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lameenc-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: lameenc-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-lancedb.yml b/.github/workflows/build-lancedb.yml
index edaed86b9136..683d76042a36 100644
--- a/.github/workflows/build-lancedb.yml
+++ b/.github/workflows/build-lancedb.yml
@@ -221,5 +221,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lancedb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lap.yml b/.github/workflows/build-lap.yml
index a78c97fc446f..3316158eb363 100644
--- a/.github/workflows/build-lap.yml
+++ b/.github/workflows/build-lap.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lap-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lapx.yml b/.github/workflows/build-lapx.yml
index 8687b6a58e94..948ce36387ba 100644
--- a/.github/workflows/build-lapx.yml
+++ b/.github/workflows/build-lapx.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lapx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-laszip.yml b/.github/workflows/build-laszip.yml
index 1795538e19ca..f4f1904a0906 100644
--- a/.github/workflows/build-laszip.yml
+++ b/.github/workflows/build-laszip.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: laszip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lazrs.yml b/.github/workflows/build-lazrs.yml
index d89935660648..36cb9c2bdb3f 100644
--- a/.github/workflows/build-lazrs.yml
+++ b/.github/workflows/build-lazrs.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lazrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lazy-object-proxy.yml b/.github/workflows/build-lazy-object-proxy.yml
index 2650c41f980f..d13ce780e2a1 100644
--- a/.github/workflows/build-lazy-object-proxy.yml
+++ b/.github/workflows/build-lazy-object-proxy.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lazy-object-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-levenshtein.yml b/.github/workflows/build-levenshtein.yml
index ea5a3f83f747..149361b2bced 100644
--- a/.github/workflows/build-levenshtein.yml
+++ b/.github/workflows/build-levenshtein.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: levenshtein-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libclang.yml b/.github/workflows/build-libclang.yml
index 54bd321b5cd2..8194dd4f8ff7 100644
--- a/.github/workflows/build-libclang.yml
+++ b/.github/workflows/build-libclang.yml
@@ -158,6 +158,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libclang-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: libclang-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-libigl.yml b/.github/workflows/build-libigl.yml
index 9dbbeaaa4953..e86cb9e8e59c 100644
--- a/.github/workflows/build-libigl.yml
+++ b/.github/workflows/build-libigl.yml
@@ -161,5 +161,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libigl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libsass.yml b/.github/workflows/build-libsass.yml
index b8e7ebc6a09e..89f498a2949a 100644
--- a/.github/workflows/build-libsass.yml
+++ b/.github/workflows/build-libsass.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libsass-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-libscrc.yml b/.github/workflows/build-libscrc.yml
index a0efb81042f2..5f2ed250e580 100644
--- a/.github/workflows/build-libscrc.yml
+++ b/.github/workflows/build-libscrc.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libscrc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-libusb-package.yml b/.github/workflows/build-libusb-package.yml
index 8c5952137696..d16a7ac1e102 100644
--- a/.github/workflows/build-libusb-package.yml
+++ b/.github/workflows/build-libusb-package.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libusb-package-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-libvalkey.yml b/.github/workflows/build-libvalkey.yml
index 052c5e773d95..d9d4f55e969f 100644
--- a/.github/workflows/build-libvalkey.yml
+++ b/.github/workflows/build-libvalkey.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: libvalkey-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lightgbm.yml b/.github/workflows/build-lightgbm.yml
index 2fe7beef66bd..8ec7d5f4442e 100644
--- a/.github/workflows/build-lightgbm.yml
+++ b/.github/workflows/build-lightgbm.yml
@@ -196,5 +196,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lightgbm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lilcom.yml b/.github/workflows/build-lilcom.yml
index bbbab6f9f96c..1cd57c8f6e20 100644
--- a/.github/workflows/build-lilcom.yml
+++ b/.github/workflows/build-lilcom.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lilcom-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-line-profiler.yml b/.github/workflows/build-line-profiler.yml
index ae0a6101920d..b3d1ca0e4682 100644
--- a/.github/workflows/build-line-profiler.yml
+++ b/.github/workflows/build-line-profiler.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: line-profiler-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-lingua-language-detector.yml b/.github/workflows/build-lingua-language-detector.yml
index 864c26531c60..15794c5d4ef9 100644
--- a/.github/workflows/build-lingua-language-detector.yml
+++ b/.github/workflows/build-lingua-language-detector.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lingua_language_detector-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-litellm.yml b/.github/workflows/build-litellm.yml
index 486efee2d578..16c9f2842759 100644
--- a/.github/workflows/build-litellm.yml
+++ b/.github/workflows/build-litellm.yml
@@ -219,5 +219,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: litellm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-littlefs-python.yml b/.github/workflows/build-littlefs-python.yml
index 7bf839c4276b..da235d42e62f 100644
--- a/.github/workflows/build-littlefs-python.yml
+++ b/.github/workflows/build-littlefs-python.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: littlefs-python-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-livekit-blingfire.yml b/.github/workflows/build-livekit-blingfire.yml
index 70103f1681f3..97a3eba1939b 100644
--- a/.github/workflows/build-livekit-blingfire.yml
+++ b/.github/workflows/build-livekit-blingfire.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: livekit-blingfire-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lmdb.yml b/.github/workflows/build-lmdb.yml
index 0132a7dcac6a..a1e338116a40 100644
--- a/.github/workflows/build-lmdb.yml
+++ b/.github/workflows/build-lmdb.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lmdb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lmnr-claude-code-proxy.yml b/.github/workflows/build-lmnr-claude-code-proxy.yml
index 14021910e7e4..f08dfc601f2e 100644
--- a/.github/workflows/build-lmnr-claude-code-proxy.yml
+++ b/.github/workflows/build-lmnr-claude-code-proxy.yml
@@ -239,5 +239,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lmnr-claude-code-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-logbook.yml b/.github/workflows/build-logbook.yml
index 5c1ee2b8dd08..89d18d67a744 100644
--- a/.github/workflows/build-logbook.yml
+++ b/.github/workflows/build-logbook.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: logbook-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-loro.yml b/.github/workflows/build-loro.yml
index a26abb99ffe4..6bc46469b29e 100644
--- a/.github/workflows/build-loro.yml
+++ b/.github/workflows/build-loro.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: loro-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lru-dict.yml b/.github/workflows/build-lru-dict.yml
index 35e6f3094bb0..80211057a128 100644
--- a/.github/workflows/build-lru-dict.yml
+++ b/.github/workflows/build-lru-dict.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lru-dict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lz4.yml b/.github/workflows/build-lz4.yml
index 25603e8987fb..10eb8079846f 100644
--- a/.github/workflows/build-lz4.yml
+++ b/.github/workflows/build-lz4.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lz4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lzallright.yml b/.github/workflows/build-lzallright.yml
index 7fce2c7dc125..f9db017274fd 100644
--- a/.github/workflows/build-lzallright.yml
+++ b/.github/workflows/build-lzallright.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lzallright-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-lzfse.yml b/.github/workflows/build-lzfse.yml
index b1df54dfad5c..a0b371dd8c5d 100644
--- a/.github/workflows/build-lzfse.yml
+++ b/.github/workflows/build-lzfse.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: lzfse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-magika.yml b/.github/workflows/build-magika.yml
index dd44e8ceec95..84faad621200 100644
--- a/.github/workflows/build-magika.yml
+++ b/.github/workflows/build-magika.yml
@@ -224,5 +224,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: magika-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-manifold3d.yml b/.github/workflows/build-manifold3d.yml
index 481a780da58e..791dac17a108 100644
--- a/.github/workflows/build-manifold3d.yml
+++ b/.github/workflows/build-manifold3d.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: manifold3d-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mapbox-earcut.yml b/.github/workflows/build-mapbox-earcut.yml
index a81e047283d3..35216e5ce5d8 100644
--- a/.github/workflows/build-mapbox-earcut.yml
+++ b/.github/workflows/build-mapbox-earcut.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mapbox-earcut-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-marisa-trie.yml b/.github/workflows/build-marisa-trie.yml
index 442869599bd7..6633f52878dc 100644
--- a/.github/workflows/build-marisa-trie.yml
+++ b/.github/workflows/build-marisa-trie.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: marisa-trie-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-markdown-it-pyrs.yml b/.github/workflows/build-markdown-it-pyrs.yml
index bb0a4d9c694e..dbafa3dbba80 100644
--- a/.github/workflows/build-markdown-it-pyrs.yml
+++ b/.github/workflows/build-markdown-it-pyrs.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: markdown-it-pyrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-matplotlib.yml b/.github/workflows/build-matplotlib.yml
index 55f169904977..0a1dc4910081 100644
--- a/.github/workflows/build-matplotlib.yml
+++ b/.github/workflows/build-matplotlib.yml
@@ -207,5 +207,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: matplotlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-maxminddb.yml b/.github/workflows/build-maxminddb.yml
index 8dc1dfa7707f..34fcdc96b936 100644
--- a/.github/workflows/build-maxminddb.yml
+++ b/.github/workflows/build-maxminddb.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: maxminddb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mecab-python3.yml b/.github/workflows/build-mecab-python3.yml
index cfe39a599ef1..b5a1218dd866 100644
--- a/.github/workflows/build-mecab-python3.yml
+++ b/.github/workflows/build-mecab-python3.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mecab-python3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mecab.yml b/.github/workflows/build-mecab.yml
index 43cb84cba4d2..f6cbb95bb676 100644
--- a/.github/workflows/build-mecab.yml
+++ b/.github/workflows/build-mecab.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mecab-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-memory-allocator.yml b/.github/workflows/build-memory-allocator.yml
index f30891650f39..85e143fd5a3d 100644
--- a/.github/workflows/build-memory-allocator.yml
+++ b/.github/workflows/build-memory-allocator.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: memory-allocator-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-memray.yml b/.github/workflows/build-memray.yml
index eef1e00a8b23..d836ec6079b3 100644
--- a/.github/workflows/build-memray.yml
+++ b/.github/workflows/build-memray.yml
@@ -236,6 +236,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: memray-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: memray-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-mgrs.yml b/.github/workflows/build-mgrs.yml
index 4138061a3481..b8331b289e37 100644
--- a/.github/workflows/build-mgrs.yml
+++ b/.github/workflows/build-mgrs.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mgrs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-miniaudio.yml b/.github/workflows/build-miniaudio.yml
index 79d40d99ffe4..8eb0a9d28382 100644
--- a/.github/workflows/build-miniaudio.yml
+++ b/.github/workflows/build-miniaudio.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: miniaudio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-minify-html.yml b/.github/workflows/build-minify-html.yml
index baf0d9071a3d..0457542d6970 100644
--- a/.github/workflows/build-minify-html.yml
+++ b/.github/workflows/build-minify-html.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minify-html-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-minijinja.yml b/.github/workflows/build-minijinja.yml
index 156b47a779fc..e3203631ee8d 100644
--- a/.github/workflows/build-minijinja.yml
+++ b/.github/workflows/build-minijinja.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minijinja-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-miniupnpc.yml b/.github/workflows/build-miniupnpc.yml
index 45015e6cc329..fdfc59e7ab69 100644
--- a/.github/workflows/build-miniupnpc.yml
+++ b/.github/workflows/build-miniupnpc.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: miniupnpc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-minorminer.yml b/.github/workflows/build-minorminer.yml
index ceb83914486d..3effd66933b1 100644
--- a/.github/workflows/build-minorminer.yml
+++ b/.github/workflows/build-minorminer.yml
@@ -170,5 +170,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: minorminer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mitmproxy-rs.yml b/.github/workflows/build-mitmproxy-rs.yml
index a6fa3805af3a..fccced0249a7 100644
--- a/.github/workflows/build-mitmproxy-rs.yml
+++ b/.github/workflows/build-mitmproxy-rs.yml
@@ -206,5 +206,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mitmproxy-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mlx.yml b/.github/workflows/build-mlx.yml
index 07448a721371..f477312b7a80 100644
--- a/.github/workflows/build-mlx.yml
+++ b/.github/workflows/build-mlx.yml
@@ -315,6 +315,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mlx-${{ matrix.version }}-cp3*-manylinux_riscv64
 
@@ -330,6 +332,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mlx_cpu-${{ matrix.version }}-manylinux_riscv64
       gpl-sources-artifact: mlx-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-mmcif.yml b/.github/workflows/build-mmcif.yml
index f900762613e5..54115700de33 100644
--- a/.github/workflows/build-mmcif.yml
+++ b/.github/workflows/build-mmcif.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmcif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mmh3.yml b/.github/workflows/build-mmh3.yml
index 2551def254d0..72c0f04b5a5c 100644
--- a/.github/workflows/build-mmh3.yml
+++ b/.github/workflows/build-mmh3.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmh3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mmhash3.yml b/.github/workflows/build-mmhash3.yml
index 5759130b4f72..2a48abdbda92 100644
--- a/.github/workflows/build-mmhash3.yml
+++ b/.github/workflows/build-mmhash3.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mmhash3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moderngl.yml b/.github/workflows/build-moderngl.yml
index 01fcb61df2c0..f71a7305b803 100644
--- a/.github/workflows/build-moderngl.yml
+++ b/.github/workflows/build-moderngl.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moderngl-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mojimoji.yml b/.github/workflows/build-mojimoji.yml
index 5cf76e3dac8c..98e0bc89b186 100644
--- a/.github/workflows/build-mojimoji.yml
+++ b/.github/workflows/build-mojimoji.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mojimoji-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moocore.yml b/.github/workflows/build-moocore.yml
index 19c6ddb286d9..ba4158dc41c5 100644
--- a/.github/workflows/build-moocore.yml
+++ b/.github/workflows/build-moocore.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moocore-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-moyopy.yml b/.github/workflows/build-moyopy.yml
index 43b165d42b80..e70a6c6c376d 100644
--- a/.github/workflows/build-moyopy.yml
+++ b/.github/workflows/build-moyopy.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: moyopy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mpi4py.yml b/.github/workflows/build-mpi4py.yml
index c8521a11ae19..1aa58bb29b8d 100644
--- a/.github/workflows/build-mpi4py.yml
+++ b/.github/workflows/build-mpi4py.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mpi4py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mrml.yml b/.github/workflows/build-mrml.yml
index 2d853f0391ed..6482a3b48845 100644
--- a/.github/workflows/build-mrml.yml
+++ b/.github/workflows/build-mrml.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mrml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mujoco.yml b/.github/workflows/build-mujoco.yml
index 0969126c191d..19f1813c7ef7 100644
--- a/.github/workflows/build-mujoco.yml
+++ b/.github/workflows/build-mujoco.yml
@@ -222,5 +222,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mujoco-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-murmurhash.yml b/.github/workflows/build-murmurhash.yml
index 1d301383916f..a48e8ec5ef7b 100644
--- a/.github/workflows/build-murmurhash.yml
+++ b/.github/workflows/build-murmurhash.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: murmurhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-murmurhash2.yml b/.github/workflows/build-murmurhash2.yml
index a65681419bb0..25ea473fac33 100644
--- a/.github/workflows/build-murmurhash2.yml
+++ b/.github/workflows/build-murmurhash2.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: murmurhash2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mutf8.yml b/.github/workflows/build-mutf8.yml
index 887f271536c6..cdee1c8745d7 100644
--- a/.github/workflows/build-mutf8.yml
+++ b/.github/workflows/build-mutf8.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mutf8-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mwparserfromhell.yml b/.github/workflows/build-mwparserfromhell.yml
index 4e2bd9986632..115665e64c23 100644
--- a/.github/workflows/build-mwparserfromhell.yml
+++ b/.github/workflows/build-mwparserfromhell.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mwparserfromhell-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-mypy.yml b/.github/workflows/build-mypy.yml
index 2502e52dbf30..4c15ef8d29cf 100644
--- a/.github/workflows/build-mypy.yml
+++ b/.github/workflows/build-mypy.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mypy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-mysql-connector-python.yml b/.github/workflows/build-mysql-connector-python.yml
index 3debd0c68187..d76604bf8d4d 100644
--- a/.github/workflows/build-mysql-connector-python.yml
+++ b/.github/workflows/build-mysql-connector-python.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: mysql-connector-python-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: mysql-connector-python-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-ncompress.yml b/.github/workflows/build-ncompress.yml
index b810326cf65e..c671b37f0b83 100644
--- a/.github/workflows/build-ncompress.yml
+++ b/.github/workflows/build-ncompress.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ncompress-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ndindex.yml b/.github/workflows/build-ndindex.yml
index ab1a2077d390..6ec73eee22cd 100644
--- a/.github/workflows/build-ndindex.yml
+++ b/.github/workflows/build-ndindex.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ndindex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nemo-relay.yml b/.github/workflows/build-nemo-relay.yml
index 2017cb0ff0d6..9e5b1349abc5 100644
--- a/.github/workflows/build-nemo-relay.yml
+++ b/.github/workflows/build-nemo-relay.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nemo-relay-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netcdf4.yml b/.github/workflows/build-netcdf4.yml
index e1c178e41627..3d603af736b7 100644
--- a/.github/workflows/build-netcdf4.yml
+++ b/.github/workflows/build-netcdf4.yml
@@ -238,5 +238,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netcdf4-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces-plus.yml b/.github/workflows/build-netifaces-plus.yml
index de592226a850..905048bc3437 100644
--- a/.github/workflows/build-netifaces-plus.yml
+++ b/.github/workflows/build-netifaces-plus.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces-plus-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces.yml b/.github/workflows/build-netifaces.yml
index 9d060ca06fea..adbbc9aa1716 100644
--- a/.github/workflows/build-netifaces.yml
+++ b/.github/workflows/build-netifaces.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-netifaces2.yml b/.github/workflows/build-netifaces2.yml
index 1ac5d271607f..bd7114a85ad2 100644
--- a/.github/workflows/build-netifaces2.yml
+++ b/.github/workflows/build-netifaces2.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: netifaces2-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-newrelic.yml b/.github/workflows/build-newrelic.yml
index d947bf8c5f33..cab91c4f231b 100644
--- a/.github/workflows/build-newrelic.yml
+++ b/.github/workflows/build-newrelic.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: newrelic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nlopt.yml b/.github/workflows/build-nlopt.yml
index 22e3880e1668..6b65a9a7d1a6 100644
--- a/.github/workflows/build-nlopt.yml
+++ b/.github/workflows/build-nlopt.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nlopt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-nodejs-wheel-binaries.yml b/.github/workflows/build-nodejs-wheel-binaries.yml
index 5373315ad655..440d4d359ae4 100644
--- a/.github/workflows/build-nodejs-wheel-binaries.yml
+++ b/.github/workflows/build-nodejs-wheel-binaries.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: nodejs-wheel-binaries-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numcodecs.yml b/.github/workflows/build-numcodecs.yml
index fa3dd35ccb08..40b22a3eadaa 100644
--- a/.github/workflows/build-numcodecs.yml
+++ b/.github/workflows/build-numcodecs.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numcodecs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numexpr.yml b/.github/workflows/build-numexpr.yml
index b5b1612da8a4..eec1029ae078 100644
--- a/.github/workflows/build-numexpr.yml
+++ b/.github/workflows/build-numexpr.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numexpr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-minmax.yml b/.github/workflows/build-numpy-minmax.yml
index 49029a9344e4..3326245a1453 100644
--- a/.github/workflows/build-numpy-minmax.yml
+++ b/.github/workflows/build-numpy-minmax.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-minmax-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-quaternion.yml b/.github/workflows/build-numpy-quaternion.yml
index 241f481476a2..0e6d9bd7e2ab 100644
--- a/.github/workflows/build-numpy-quaternion.yml
+++ b/.github/workflows/build-numpy-quaternion.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-quaternion-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy-rms.yml b/.github/workflows/build-numpy-rms.yml
index 4bb610ecede3..e4d487ac65c0 100644
--- a/.github/workflows/build-numpy-rms.yml
+++ b/.github/workflows/build-numpy-rms.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-rms-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-numpy.yml b/.github/workflows/build-numpy.yml
index 8082fc6a864f..97801b626d69 100644
--- a/.github/workflows/build-numpy.yml
+++ b/.github/workflows/build-numpy.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: numpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-obstore.yml b/.github/workflows/build-obstore.yml
index f68cf7e077a2..994952b57b91 100644
--- a/.github/workflows/build-obstore.yml
+++ b/.github/workflows/build-obstore.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: obstore-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onigurumacffi.yml b/.github/workflows/build-onigurumacffi.yml
index 365ab7ff51fe..c161ee941201 100644
--- a/.github/workflows/build-onigurumacffi.yml
+++ b/.github/workflows/build-onigurumacffi.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onigurumacffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onnx.yml b/.github/workflows/build-onnx.yml
index 9407da8b509b..c0bc715a88c2 100644
--- a/.github/workflows/build-onnx.yml
+++ b/.github/workflows/build-onnx.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onnx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-onnxruntime.yml b/.github/workflows/build-onnxruntime.yml
index 9a5f35742e0b..54f9a2122770 100644
--- a/.github/workflows/build-onnxruntime.yml
+++ b/.github/workflows/build-onnxruntime.yml
@@ -191,5 +191,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: onnxruntime-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencc.yml b/.github/workflows/build-opencc.yml
index ce72fc7e010e..9206e3467625 100644
--- a/.github/workflows/build-opencc.yml
+++ b/.github/workflows/build-opencc.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-contrib-python.yml b/.github/workflows/build-opencv-contrib-python.yml
index b4a6881c6144..b04b85ac05e5 100644
--- a/.github/workflows/build-opencv-contrib-python.yml
+++ b/.github/workflows/build-opencv-contrib-python.yml
@@ -158,5 +158,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-contrib-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-python-headless.yml b/.github/workflows/build-opencv-python-headless.yml
index 25fe05f3cb74..466b32c87dff 100644
--- a/.github/workflows/build-opencv-python-headless.yml
+++ b/.github/workflows/build-opencv-python-headless.yml
@@ -146,5 +146,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-python-headless-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opencv-python.yml b/.github/workflows/build-opencv-python.yml
index dc5583320c02..25715b11fb6b 100644
--- a/.github/workflows/build-opencv-python.yml
+++ b/.github/workflows/build-opencv-python.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opencv-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-openexr.yml b/.github/workflows/build-openexr.yml
index 1191a6769ab6..39985c9a1eb6 100644
--- a/.github/workflows/build-openexr.yml
+++ b/.github/workflows/build-openexr.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: openexr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-openlineage-sql.yml b/.github/workflows/build-openlineage-sql.yml
index 22455b2d369e..bae416a374a0 100644
--- a/.github/workflows/build-openlineage-sql.yml
+++ b/.github/workflows/build-openlineage-sql.yml
@@ -156,5 +156,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: openlineage-sql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opentimelineio.yml b/.github/workflows/build-opentimelineio.yml
index 7b98516976e5..5d22eae8dc4e 100644
--- a/.github/workflows/build-opentimelineio.yml
+++ b/.github/workflows/build-opentimelineio.yml
@@ -159,5 +159,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opentimelineio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-opentsne.yml b/.github/workflows/build-opentsne.yml
index 87ff3f6187d7..4ffc0ff078f0 100644
--- a/.github/workflows/build-opentsne.yml
+++ b/.github/workflows/build-opentsne.yml
@@ -156,6 +156,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: opentsne-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: opentsne-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-oracledb.yml b/.github/workflows/build-oracledb.yml
index 501b8ab6f09c..008f2033238a 100644
--- a/.github/workflows/build-oracledb.yml
+++ b/.github/workflows/build-oracledb.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: oracledb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-orjson.yml b/.github/workflows/build-orjson.yml
index dba11f788491..dd31e4c070d9 100644
--- a/.github/workflows/build-orjson.yml
+++ b/.github/workflows/build-orjson.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: orjson-${{ matrix.version }}-*
diff --git a/.github/workflows/build-ormsgpack.yml b/.github/workflows/build-ormsgpack.yml
index 7a4ddb030495..3fabcbad0bd1 100644
--- a/.github/workflows/build-ormsgpack.yml
+++ b/.github/workflows/build-ormsgpack.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ormsgpack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-osqp.yml b/.github/workflows/build-osqp.yml
index 01b1d62912e6..ccbd66462d4a 100644
--- a/.github/workflows/build-osqp.yml
+++ b/.github/workflows/build-osqp.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: osqp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pact-python-ffi.yml b/.github/workflows/build-pact-python-ffi.yml
index 4ddf1487ccf6..799a1b77f9f3 100644
--- a/.github/workflows/build-pact-python-ffi.yml
+++ b/.github/workflows/build-pact-python-ffi.yml
@@ -154,5 +154,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pact-python-ffi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pagefind-bin.yml b/.github/workflows/build-pagefind-bin.yml
index cb058f197207..6f32179f9adb 100644
--- a/.github/workflows/build-pagefind-bin.yml
+++ b/.github/workflows/build-pagefind-bin.yml
@@ -282,5 +282,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pagefind-bin-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pairmux.yml b/.github/workflows/build-pairmux.yml
index 1bea1cd24f39..047fedebb149 100644
--- a/.github/workflows/build-pairmux.yml
+++ b/.github/workflows/build-pairmux.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pairmux-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pcodec.yml b/.github/workflows/build-pcodec.yml
index dc1913cf62a5..d09794190060 100644
--- a/.github/workflows/build-pcodec.yml
+++ b/.github/workflows/build-pcodec.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pcodec-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-persistent.yml b/.github/workflows/build-persistent.yml
index 0e7372a7b2b9..fa4dd97e6fdf 100644
--- a/.github/workflows/build-persistent.yml
+++ b/.github/workflows/build-persistent.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: persistent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pglast.yml b/.github/workflows/build-pglast.yml
index 662cd2b74361..d5e24213915b 100644
--- a/.github/workflows/build-pglast.yml
+++ b/.github/workflows/build-pglast.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pglast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-phik.yml b/.github/workflows/build-phik.yml
index 698ebfb48c02..b1f8880d1f84 100644
--- a/.github/workflows/build-phik.yml
+++ b/.github/workflows/build-phik.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: phik-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pi-heif.yml b/.github/workflows/build-pi-heif.yml
index 90c257d96fd8..cfb60bd0b28e 100644
--- a/.github/workflows/build-pi-heif.yml
+++ b/.github/workflows/build-pi-heif.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pi_heif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pikepdf.yml b/.github/workflows/build-pikepdf.yml
index f71e09ba3ac6..c2a851638f10 100644
--- a/.github/workflows/build-pikepdf.yml
+++ b/.github/workflows/build-pikepdf.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pikepdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow-avif-plugin.yml b/.github/workflows/build-pillow-avif-plugin.yml
index 1a437223a2d6..1150e5cc1dea 100644
--- a/.github/workflows/build-pillow-avif-plugin.yml
+++ b/.github/workflows/build-pillow-avif-plugin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow-avif-plugin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow-heif.yml b/.github/workflows/build-pillow-heif.yml
index bc7d7eacee73..3efece677ce0 100644
--- a/.github/workflows/build-pillow-heif.yml
+++ b/.github/workflows/build-pillow-heif.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow_heif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pillow.yml b/.github/workflows/build-pillow.yml
index acba45c6fd2d..dbc3e000a20b 100644
--- a/.github/workflows/build-pillow.yml
+++ b/.github/workflows/build-pillow.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pillow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pinecone.yml b/.github/workflows/build-pinecone.yml
index 26b262d89386..6dba33a2fb11 100644
--- a/.github/workflows/build-pinecone.yml
+++ b/.github/workflows/build-pinecone.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pinecone-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pipdeptree.yml b/.github/workflows/build-pipdeptree.yml
index 255808b27637..f5013d5f3fff 100644
--- a/.github/workflows/build-pipdeptree.yml
+++ b/.github/workflows/build-pipdeptree.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pipdeptree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pixelhog.yml b/.github/workflows/build-pixelhog.yml
index a3b7c9bb1b19..68e903933dee 100644
--- a/.github/workflows/build-pixelhog.yml
+++ b/.github/workflows/build-pixelhog.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pixelhog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-plotext.yml b/.github/workflows/build-plotext.yml
index 7d30a3166636..d62f9aae736c 100644
--- a/.github/workflows/build-plotext.yml
+++ b/.github/workflows/build-plotext.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: plotext-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-plyvel.yml b/.github/workflows/build-plyvel.yml
index c1b913985d6f..1143b4089718 100644
--- a/.github/workflows/build-plyvel.yml
+++ b/.github/workflows/build-plyvel.yml
@@ -150,5 +150,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: plyvel-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pmdarima.yml b/.github/workflows/build-pmdarima.yml
index c06969e40dfd..123170fd9405 100644
--- a/.github/workflows/build-pmdarima.yml
+++ b/.github/workflows/build-pmdarima.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pmdarima-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-point-cloud-utils.yml b/.github/workflows/build-point-cloud-utils.yml
index 0756d2519659..003ea9afb852 100644
--- a/.github/workflows/build-point-cloud-utils.yml
+++ b/.github/workflows/build-point-cloud-utils.yml
@@ -197,6 +197,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: point-cloud-utils-0.34.0-*-manylinux_riscv64
       gpl-sources-artifact: point-cloud-utils-0.34.0-gpl-sources
diff --git a/.github/workflows/build-polars-runtime.yml b/.github/workflows/build-polars-runtime.yml
index 29ce7c662a98..44ff8d25933a 100644
--- a/.github/workflows/build-polars-runtime.yml
+++ b/.github/workflows/build-polars-runtime.yml
@@ -217,6 +217,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/build-polyleven.yml b/.github/workflows/build-polyleven.yml
index 4fd2c0d2a01d..2c4c387f9f1b 100644
--- a/.github/workflows/build-polyleven.yml
+++ b/.github/workflows/build-polyleven.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: polyleven-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-poselib.yml b/.github/workflows/build-poselib.yml
index 9398dfaa973d..7bede9ddc5ba 100644
--- a/.github/workflows/build-poselib.yml
+++ b/.github/workflows/build-poselib.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: poselib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-posix-ipc.yml b/.github/workflows/build-posix-ipc.yml
index f5e1c63ae055..6c8bf126d708 100644
--- a/.github/workflows/build-posix-ipc.yml
+++ b/.github/workflows/build-posix-ipc.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: posix-ipc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pot.yml b/.github/workflows/build-pot.yml
index 76f4a86fafdd..0db739246fd2 100644
--- a/.github/workflows/build-pot.yml
+++ b/.github/workflows/build-pot.yml
@@ -174,6 +174,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pot-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pot-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pqcrypto.yml b/.github/workflows/build-pqcrypto.yml
index 8ba833356f1f..cb7895fed757 100644
--- a/.github/workflows/build-pqcrypto.yml
+++ b/.github/workflows/build-pqcrypto.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pqcrypto-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-praat-parselmouth.yml b/.github/workflows/build-praat-parselmouth.yml
index 441a8cb7e850..5c9e50cf3f7d 100644
--- a/.github/workflows/build-praat-parselmouth.yml
+++ b/.github/workflows/build-praat-parselmouth.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: praat-parselmouth-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-prek.yml b/.github/workflows/build-prek.yml
index a6f7fe989151..ed88a89f6262 100644
--- a/.github/workflows/build-prek.yml
+++ b/.github/workflows/build-prek.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: prek-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-preshed.yml b/.github/workflows/build-preshed.yml
index e65ddc806a5e..4048f26aa211 100644
--- a/.github/workflows/build-preshed.yml
+++ b/.github/workflows/build-preshed.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: preshed-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-primer3-py.yml b/.github/workflows/build-primer3-py.yml
index 7cd20da8c323..3517881b93e9 100644
--- a/.github/workflows/build-primer3-py.yml
+++ b/.github/workflows/build-primer3-py.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: primer3-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-primp.yml b/.github/workflows/build-primp.yml
index 4de6464f0778..003fd59262fc 100644
--- a/.github/workflows/build-primp.yml
+++ b/.github/workflows/build-primp.yml
@@ -127,5 +127,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: primp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protobuf-py-ext.yml b/.github/workflows/build-protobuf-py-ext.yml
index 6e2371c2d950..698a5f4af79f 100644
--- a/.github/workflows/build-protobuf-py-ext.yml
+++ b/.github/workflows/build-protobuf-py-ext.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protobuf-py-ext-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protobuf.yml b/.github/workflows/build-protobuf.yml
index c2f7cac1ebda..19fa1b1e422f 100644
--- a/.github/workflows/build-protobuf.yml
+++ b/.github/workflows/build-protobuf.yml
@@ -264,5 +264,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protobuf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-protovalidate.yml b/.github/workflows/build-protovalidate.yml
index 77a89a06d862..d860f31d3737 100644
--- a/.github/workflows/build-protovalidate.yml
+++ b/.github/workflows/build-protovalidate.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: protovalidate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-psd-tools.yml b/.github/workflows/build-psd-tools.yml
index bf025f1eeb17..b6d4a01dbb15 100644
--- a/.github/workflows/build-psd-tools.yml
+++ b/.github/workflows/build-psd-tools.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: psd-tools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-psygnal.yml b/.github/workflows/build-psygnal.yml
index 27ec4c4ca9df..60427bae0853 100644
--- a/.github/workflows/build-psygnal.yml
+++ b/.github/workflows/build-psygnal.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: psygnal-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-bip39-bindings.yml b/.github/workflows/build-py-bip39-bindings.yml
index 83a25b84bb06..ee348c434e58 100644
--- a/.github/workflows/build-py-bip39-bindings.yml
+++ b/.github/workflows/build-py-bip39-bindings.yml
@@ -161,5 +161,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-bip39-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-ed25519-zebra-bindings.yml b/.github/workflows/build-py-ed25519-zebra-bindings.yml
index 5589b2854fed..f4db704c7f52 100644
--- a/.github/workflows/build-py-ed25519-zebra-bindings.yml
+++ b/.github/workflows/build-py-ed25519-zebra-bindings.yml
@@ -169,5 +169,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-ed25519-zebra-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-radix.yml b/.github/workflows/build-py-radix.yml
index 57a5bc508b24..3ed16dc60e44 100644
--- a/.github/workflows/build-py-radix.yml
+++ b/.github/workflows/build-py-radix.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-radix-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-py-rust-stemmers.yml b/.github/workflows/build-py-rust-stemmers.yml
index 9d1579ffe699..7366f8e6198b 100644
--- a/.github/workflows/build-py-rust-stemmers.yml
+++ b/.github/workflows/build-py-rust-stemmers.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py_rust_stemmers-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-py-spy.yml b/.github/workflows/build-py-spy.yml
index df840bb0a056..970a4f48498d 100644
--- a/.github/workflows/build-py-spy.yml
+++ b/.github/workflows/build-py-spy.yml
@@ -184,5 +184,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-spy-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-py-sr25519-bindings.yml b/.github/workflows/build-py-sr25519-bindings.yml
index e5988b483b38..b3008a4fa85c 100644
--- a/.github/workflows/build-py-sr25519-bindings.yml
+++ b/.github/workflows/build-py-sr25519-bindings.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: py-sr25519-bindings-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyahocorasick.yml b/.github/workflows/build-pyahocorasick.yml
index d39bdf0aeec5..6d4abac8248c 100644
--- a/.github/workflows/build-pyahocorasick.yml
+++ b/.github/workflows/build-pyahocorasick.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyahocorasick-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyamg.yml b/.github/workflows/build-pyamg.yml
index fb291514c33f..05f45adb4275 100644
--- a/.github/workflows/build-pyamg.yml
+++ b/.github/workflows/build-pyamg.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyamg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyarrow.yml b/.github/workflows/build-pyarrow.yml
index 7ddc9ad8bff7..43c0b6219050 100644
--- a/.github/workflows/build-pyarrow.yml
+++ b/.github/workflows/build-pyarrow.yml
@@ -339,5 +339,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyarrow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pybcj.yml b/.github/workflows/build-pybcj.yml
index a38ed1ade972..e2c2fc3f3662 100644
--- a/.github/workflows/build-pybcj.yml
+++ b/.github/workflows/build-pybcj.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pybcj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pybigwig.yml b/.github/workflows/build-pybigwig.yml
index 4b7de6e10355..aa43473de5eb 100644
--- a/.github/workflows/build-pybigwig.yml
+++ b/.github/workflows/build-pybigwig.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pybigwig-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycapnp.yml b/.github/workflows/build-pycapnp.yml
index b9deb2243206..a920eed43f8c 100644
--- a/.github/workflows/build-pycapnp.yml
+++ b/.github/workflows/build-pycapnp.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycapnp-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pycares.yml b/.github/workflows/build-pycares.yml
index 38c275933086..1c80a7c022ee 100644
--- a/.github/workflows/build-pycares.yml
+++ b/.github/workflows/build-pycares.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycares-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycld2.yml b/.github/workflows/build-pycld2.yml
index 4eea1373e92a..4480d14647c0 100644
--- a/.github/workflows/build-pycld2.yml
+++ b/.github/workflows/build-pycld2.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycld2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyclipper.yml b/.github/workflows/build-pyclipper.yml
index f8de5bfc2027..4a612f949e2c 100644
--- a/.github/workflows/build-pyclipper.yml
+++ b/.github/workflows/build-pyclipper.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyclipper-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycocotools.yml b/.github/workflows/build-pycocotools.yml
index 8fb8bcfe0e9f..080deff13ab9 100644
--- a/.github/workflows/build-pycocotools.yml
+++ b/.github/workflows/build-pycocotools.yml
@@ -172,5 +172,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycocotools-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycrc32.yml b/.github/workflows/build-pycrc32.yml
index 523965918ae8..02ef7edf65d7 100644
--- a/.github/workflows/build-pycrc32.yml
+++ b/.github/workflows/build-pycrc32.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycrc32-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycrdt.yml b/.github/workflows/build-pycrdt.yml
index 03758c880786..3a9590c298e7 100644
--- a/.github/workflows/build-pycrdt.yml
+++ b/.github/workflows/build-pycrdt.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycrdt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycryptodome.yml b/.github/workflows/build-pycryptodome.yml
index de8380aebf98..5968a3ef0ab0 100644
--- a/.github/workflows/build-pycryptodome.yml
+++ b/.github/workflows/build-pycryptodome.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycryptodome-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycryptodomex.yml b/.github/workflows/build-pycryptodomex.yml
index a925813c0757..667a83258cee 100644
--- a/.github/workflows/build-pycryptodomex.yml
+++ b/.github/workflows/build-pycryptodomex.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycryptodomex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pycurl.yml b/.github/workflows/build-pycurl.yml
index d79d6d7d1a16..6aa8a892eb2f 100644
--- a/.github/workflows/build-pycurl.yml
+++ b/.github/workflows/build-pycurl.yml
@@ -236,6 +236,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pycurl-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pycurl-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pydantic-monty-client.yml b/.github/workflows/build-pydantic-monty-client.yml
index 0cd967727813..a0cca9739dd4 100644
--- a/.github/workflows/build-pydantic-monty-client.yml
+++ b/.github/workflows/build-pydantic-monty-client.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydantic-monty-client-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pydantic-monty-runtime.yml b/.github/workflows/build-pydantic-monty-runtime.yml
index 655a18f4a4c0..f32cbd1ac453 100644
--- a/.github/workflows/build-pydantic-monty-runtime.yml
+++ b/.github/workflows/build-pydantic-monty-runtime.yml
@@ -189,5 +189,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydantic-monty-runtime-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pydevd.yml b/.github/workflows/build-pydevd.yml
index 54a4891a8b18..66084537b75d 100644
--- a/.github/workflows/build-pydevd.yml
+++ b/.github/workflows/build-pydevd.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pydevd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyedflib.yml b/.github/workflows/build-pyedflib.yml
index f05321afbbea..fda8eba5ece8 100644
--- a/.github/workflows/build-pyedflib.yml
+++ b/.github/workflows/build-pyedflib.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyedflib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyerfa.yml b/.github/workflows/build-pyerfa.yml
index 4ce189eb6e65..83ef4280ff52 100644
--- a/.github/workflows/build-pyerfa.yml
+++ b/.github/workflows/build-pyerfa.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyerfa-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyfarmhash.yml b/.github/workflows/build-pyfarmhash.yml
index 0b85deb91164..6dc5c95a9102 100644
--- a/.github/workflows/build-pyfarmhash.yml
+++ b/.github/workflows/build-pyfarmhash.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfarmhash-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyfastx.yml b/.github/workflows/build-pyfastx.yml
index 2160609e0541..e81fa1b5dbdb 100644
--- a/.github/workflows/build-pyfastx.yml
+++ b/.github/workflows/build-pyfastx.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfastx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyfaup-rs.yml b/.github/workflows/build-pyfaup-rs.yml
index 26bbd471f068..aeabdd3c3899 100644
--- a/.github/workflows/build-pyfaup-rs.yml
+++ b/.github/workflows/build-pyfaup-rs.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyfaup-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pygame.yml b/.github/workflows/build-pygame.yml
index 06455a9bd35b..8d6a3b1fc719 100644
--- a/.github/workflows/build-pygame.yml
+++ b/.github/workflows/build-pygame.yml
@@ -251,6 +251,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygame-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pygame-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pygeohash.yml b/.github/workflows/build-pygeohash.yml
index 3c6129d448f4..a32760e00228 100644
--- a/.github/workflows/build-pygeohash.yml
+++ b/.github/workflows/build-pygeohash.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygeohash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyglm.yml b/.github/workflows/build-pyglm.yml
index b9a9462d1e55..71ed7bbdb532 100644
--- a/.github/workflows/build-pyglm.yml
+++ b/.github/workflows/build-pyglm.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyglm-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pygraphviz.yml b/.github/workflows/build-pygraphviz.yml
index be5a422dd568..ea8f19abbace 100644
--- a/.github/workflows/build-pygraphviz.yml
+++ b/.github/workflows/build-pygraphviz.yml
@@ -318,6 +318,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pygraphviz-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pygraphviz-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pyheck.yml b/.github/workflows/build-pyheck.yml
index 82fb613bead8..51f1e5b83acf 100644
--- a/.github/workflows/build-pyheck.yml
+++ b/.github/workflows/build-pyheck.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyheck-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyheif.yml b/.github/workflows/build-pyheif.yml
index a5782a283ba7..f17cd5d8640c 100644
--- a/.github/workflows/build-pyheif.yml
+++ b/.github/workflows/build-pyheif.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyheif-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyiceberg-core.yml b/.github/workflows/build-pyiceberg-core.yml
index ea36c100bb29..b01000c0b690 100644
--- a/.github/workflows/build-pyiceberg-core.yml
+++ b/.github/workflows/build-pyiceberg-core.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyiceberg-core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyiceberg.yml b/.github/workflows/build-pyiceberg.yml
index d55949ffe616..22235e482317 100644
--- a/.github/workflows/build-pyiceberg.yml
+++ b/.github/workflows/build-pyiceberg.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyiceberg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyicu-binary.yml b/.github/workflows/build-pyicu-binary.yml
index 68bf8b43a496..044e332554ed 100644
--- a/.github/workflows/build-pyicu-binary.yml
+++ b/.github/workflows/build-pyicu-binary.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyicu-binary-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyinstaller.yml b/.github/workflows/build-pyinstaller.yml
index 838dcdb43192..fad29992fa6b 100644
--- a/.github/workflows/build-pyinstaller.yml
+++ b/.github/workflows/build-pyinstaller.yml
@@ -234,5 +234,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyinstaller-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyinstrument.yml b/.github/workflows/build-pyinstrument.yml
index 9e569fcc6721..062266c8fc62 100644
--- a/.github/workflows/build-pyinstrument.yml
+++ b/.github/workflows/build-pyinstrument.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyinstrument-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyjls.yml b/.github/workflows/build-pyjls.yml
index f03789de7375..a8e35f093032 100644
--- a/.github/workflows/build-pyjls.yml
+++ b/.github/workflows/build-pyjls.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyjls-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pykdtree.yml b/.github/workflows/build-pykdtree.yml
index c2294d6219c9..d3a11f60f8a3 100644
--- a/.github/workflows/build-pykdtree.yml
+++ b/.github/workflows/build-pykdtree.yml
@@ -153,6 +153,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pykdtree-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: pykdtree-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-pylance.yml b/.github/workflows/build-pylance.yml
index 633dd229ee6e..9b3ca2f4374f 100644
--- a/.github/workflows/build-pylance.yml
+++ b/.github/workflows/build-pylance.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylance-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylerc.yml b/.github/workflows/build-pylerc.yml
index 2d9d2ebea160..cab33e20b370 100644
--- a/.github/workflows/build-pylerc.yml
+++ b/.github/workflows/build-pylerc.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylerc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylibmc.yml b/.github/workflows/build-pylibmc.yml
index a2a3c818acd2..2f3b7ad01c57 100644
--- a/.github/workflows/build-pylibmc.yml
+++ b/.github/workflows/build-pylibmc.yml
@@ -166,5 +166,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylibmc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylibsrtp.yml b/.github/workflows/build-pylibsrtp.yml
index c4bd4af4ecd7..8362759298b1 100644
--- a/.github/workflows/build-pylibsrtp.yml
+++ b/.github/workflows/build-pylibsrtp.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylibsrtp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylsqpack.yml b/.github/workflows/build-pylsqpack.yml
index ef8bed7d413a..db78a64d9406 100644
--- a/.github/workflows/build-pylsqpack.yml
+++ b/.github/workflows/build-pylsqpack.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylsqpack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pylzss.yml b/.github/workflows/build-pylzss.yml
index e627206de0ac..9d8d7c0e00cc 100644
--- a/.github/workflows/build-pylzss.yml
+++ b/.github/workflows/build-pylzss.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pylzss-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pymavlink.yml b/.github/workflows/build-pymavlink.yml
index 30df80f5f9f0..2ef543213b5d 100644
--- a/.github/workflows/build-pymavlink.yml
+++ b/.github/workflows/build-pymavlink.yml
@@ -181,5 +181,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymavlink-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymaxflow.yml b/.github/workflows/build-pymaxflow.yml
index 8f382c74a795..1814daf36af9 100644
--- a/.github/workflows/build-pymaxflow.yml
+++ b/.github/workflows/build-pymaxflow.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymaxflow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymcubes.yml b/.github/workflows/build-pymcubes.yml
index a2ff30801b7a..2c1fb1a1b8ac 100644
--- a/.github/workflows/build-pymcubes.yml
+++ b/.github/workflows/build-pymcubes.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymcubes-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymediainfo.yml b/.github/workflows/build-pymediainfo.yml
index 2136d5cb55c9..e56ff7aaa05b 100644
--- a/.github/workflows/build-pymediainfo.yml
+++ b/.github/workflows/build-pymediainfo.yml
@@ -169,5 +169,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymediainfo-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pymongo.yml b/.github/workflows/build-pymongo.yml
index 989c13d369a5..db6bb53e96aa 100644
--- a/.github/workflows/build-pymongo.yml
+++ b/.github/workflows/build-pymongo.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymongoarrow.yml b/.github/workflows/build-pymongoarrow.yml
index 067b12c59a5e..4e1db0abbd50 100644
--- a/.github/workflows/build-pymongoarrow.yml
+++ b/.github/workflows/build-pymongoarrow.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongoarrow-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymongocrypt.yml b/.github/workflows/build-pymongocrypt.yml
index d320feec0a91..e7f5dac1a679 100644
--- a/.github/workflows/build-pymongocrypt.yml
+++ b/.github/workflows/build-pymongocrypt.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymongocrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymonocypher.yml b/.github/workflows/build-pymonocypher.yml
index d434f234fcb7..a85751dd376d 100644
--- a/.github/workflows/build-pymonocypher.yml
+++ b/.github/workflows/build-pymonocypher.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymonocypher-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymoo.yml b/.github/workflows/build-pymoo.yml
index 007e84f3c7ce..8828cb947d61 100644
--- a/.github/workflows/build-pymoo.yml
+++ b/.github/workflows/build-pymoo.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymoo-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymssql.yml b/.github/workflows/build-pymssql.yml
index 73abb9c1fe25..6e3084c9bbaa 100644
--- a/.github/workflows/build-pymssql.yml
+++ b/.github/workflows/build-pymssql.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymssql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymunk.yml b/.github/workflows/build-pymunk.yml
index f187cdbcb85e..457bf50a6e74 100644
--- a/.github/workflows/build-pymunk.yml
+++ b/.github/workflows/build-pymunk.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymunk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdf-layout.yml b/.github/workflows/build-pymupdf-layout.yml
index 6bbac1782742..0b57b0f36554 100644
--- a/.github/workflows/build-pymupdf-layout.yml
+++ b/.github/workflows/build-pymupdf-layout.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdf-layout-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdf.yml b/.github/workflows/build-pymupdf.yml
index 11c0be926e2d..1ee217657e6d 100644
--- a/.github/workflows/build-pymupdf.yml
+++ b/.github/workflows/build-pymupdf.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pymupdfb.yml b/.github/workflows/build-pymupdfb.yml
index 2de742152226..7e33870b66ae 100644
--- a/.github/workflows/build-pymupdfb.yml
+++ b/.github/workflows/build-pymupdfb.yml
@@ -137,5 +137,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pymupdfb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pynng.yml b/.github/workflows/build-pynng.yml
index a2067b2542dd..3bf93339c362 100644
--- a/.github/workflows/build-pynng.yml
+++ b/.github/workflows/build-pynng.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pynng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyodbc.yml b/.github/workflows/build-pyodbc.yml
index 5ed95651a454..294149743aaf 100644
--- a/.github/workflows/build-pyodbc.yml
+++ b/.github/workflows/build-pyodbc.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyodbc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyodps.yml b/.github/workflows/build-pyodps.yml
index 7e9b39dd4422..86da9ee47684 100644
--- a/.github/workflows/build-pyodps.yml
+++ b/.github/workflows/build-pyodps.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyodps-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyogrio.yml b/.github/workflows/build-pyogrio.yml
index 82988b7c0d62..ec0908646174 100644
--- a/.github/workflows/build-pyogrio.yml
+++ b/.github/workflows/build-pyogrio.yml
@@ -548,5 +548,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyogrio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyopengl-accelerate.yml b/.github/workflows/build-pyopengl-accelerate.yml
index ae10252bd0b1..53dd8fbc233a 100644
--- a/.github/workflows/build-pyopengl-accelerate.yml
+++ b/.github/workflows/build-pyopengl-accelerate.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyopengl-accelerate-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyorc.yml b/.github/workflows/build-pyorc.yml
index 0464e5094fa5..a0a767c7eed6 100644
--- a/.github/workflows/build-pyorc.yml
+++ b/.github/workflows/build-pyorc.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyorc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyoxipng.yml b/.github/workflows/build-pyoxipng.yml
index 50f2df0ebbca..a26d96a9da82 100644
--- a/.github/workflows/build-pyoxipng.yml
+++ b/.github/workflows/build-pyoxipng.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyoxipng-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pypolyline.yml b/.github/workflows/build-pypolyline.yml
index b430499e4551..d96f7f0552b2 100644
--- a/.github/workflows/build-pypolyline.yml
+++ b/.github/workflows/build-pypolyline.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pypolyline-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyppmd.yml b/.github/workflows/build-pyppmd.yml
index c5f27e587f7c..6361ffba1f05 100644
--- a/.github/workflows/build-pyppmd.yml
+++ b/.github/workflows/build-pyppmd.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyppmd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyproj.yml b/.github/workflows/build-pyproj.yml
index a1653ba36140..c4e311f57dd4 100644
--- a/.github/workflows/build-pyproj.yml
+++ b/.github/workflows/build-pyproj.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyproj-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyqt5-sip.yml b/.github/workflows/build-pyqt5-sip.yml
index d44ff70214f8..4c6fcffaaa68 100644
--- a/.github/workflows/build-pyqt5-sip.yml
+++ b/.github/workflows/build-pyqt5-sip.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqt5-sip-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyqt6-sip.yml b/.github/workflows/build-pyqt6-sip.yml
index 3110b82333c1..fc7863e551d1 100644
--- a/.github/workflows/build-pyqt6-sip.yml
+++ b/.github/workflows/build-pyqt6-sip.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqt6-sip-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyqwest.yml b/.github/workflows/build-pyqwest.yml
index 580c9ab6522d..c4b1f46666c9 100644
--- a/.github/workflows/build-pyqwest.yml
+++ b/.github/workflows/build-pyqwest.yml
@@ -152,5 +152,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyqwest-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrage.yml b/.github/workflows/build-pyrage.yml
index 6e222a3f6dba..06dcd0d11585 100644
--- a/.github/workflows/build-pyrage.yml
+++ b/.github/workflows/build-pyrage.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrage-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyreadstat.yml b/.github/workflows/build-pyreadstat.yml
index d4a93d63c631..4a2dac785b86 100644
--- a/.github/workflows/build-pyreadstat.yml
+++ b/.github/workflows/build-pyreadstat.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyreadstat-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrefly.yml b/.github/workflows/build-pyrefly.yml
index 5c3ff3cb6511..c5202bf473aa 100644
--- a/.github/workflows/build-pyrefly.yml
+++ b/.github/workflows/build-pyrefly.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrefly-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-pyroaring.yml b/.github/workflows/build-pyroaring.yml
index 8c9ac2e39082..7e558196603d 100644
--- a/.github/workflows/build-pyroaring.yml
+++ b/.github/workflows/build-pyroaring.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyroaring-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrodigal.yml b/.github/workflows/build-pyrodigal.yml
index 0aeb7b822612..dbb5a656c488 100644
--- a/.github/workflows/build-pyrodigal.yml
+++ b/.github/workflows/build-pyrodigal.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrodigal-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-pyroscope-io.yml b/.github/workflows/build-pyroscope-io.yml
index 648981bc1ee5..ea08a1d6b706 100644
--- a/.github/workflows/build-pyroscope-io.yml
+++ b/.github/workflows/build-pyroscope-io.yml
@@ -294,5 +294,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyroscope_io-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyrsistent.yml b/.github/workflows/build-pyrsistent.yml
index 2831f1d8d0eb..52ce1c10774f 100644
--- a/.github/workflows/build-pyrsistent.yml
+++ b/.github/workflows/build-pyrsistent.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyrsistent-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysam.yml b/.github/workflows/build-pysam.yml
index 049808641559..a7466ece8071 100644
--- a/.github/workflows/build-pysam.yml
+++ b/.github/workflows/build-pysam.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysam-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysimdjson.yml b/.github/workflows/build-pysimdjson.yml
index b87d594934ef..2bae9eb190bd 100644
--- a/.github/workflows/build-pysimdjson.yml
+++ b/.github/workflows/build-pysimdjson.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysimdjson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyspeex-noise.yml b/.github/workflows/build-pyspeex-noise.yml
index 04d919fe0195..912cdbb3e162 100644
--- a/.github/workflows/build-pyspeex-noise.yml
+++ b/.github/workflows/build-pyspeex-noise.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyspeex-noise-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysqlite3-binary.yml b/.github/workflows/build-pysqlite3-binary.yml
index 88987b5a8011..3715d0861c80 100644
--- a/.github/workflows/build-pysqlite3-binary.yml
+++ b/.github/workflows/build-pysqlite3-binary.yml
@@ -130,5 +130,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysqlite3-binary-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pysqlite3.yml b/.github/workflows/build-pysqlite3.yml
index 5c97f3c18187..61038fe36dc3 100644
--- a/.github/workflows/build-pysqlite3.yml
+++ b/.github/workflows/build-pysqlite3.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pysqlite3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pystemmer.yml b/.github/workflows/build-pystemmer.yml
index d8bb4bec1c23..bb93806ccb15 100644
--- a/.github/workflows/build-pystemmer.yml
+++ b/.github/workflows/build-pystemmer.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pystemmer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyswisseph.yml b/.github/workflows/build-pyswisseph.yml
index cf56c6efe85e..9f582913c87c 100644
--- a/.github/workflows/build-pyswisseph.yml
+++ b/.github/workflows/build-pyswisseph.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyswisseph-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-python-bidi.yml b/.github/workflows/build-python-bidi.yml
index 0867e19aa4d1..47274eea6b3e 100644
--- a/.github/workflows/build-python-bidi.yml
+++ b/.github/workflows/build-python-bidi.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-bidi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-calamine.yml b/.github/workflows/build-python-calamine.yml
index 83d5db943c80..b9387ff18970 100644
--- a/.github/workflows/build-python-calamine.yml
+++ b/.github/workflows/build-python-calamine.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-calamine-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-crfsuite.yml b/.github/workflows/build-python-crfsuite.yml
index 6b219a2c034c..22a937a3606b 100644
--- a/.github/workflows/build-python-crfsuite.yml
+++ b/.github/workflows/build-python-crfsuite.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-crfsuite-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-fcl.yml b/.github/workflows/build-python-fcl.yml
index caa387ac737b..226054dc24c1 100644
--- a/.github/workflows/build-python-fcl.yml
+++ b/.github/workflows/build-python-fcl.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-fcl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-geohash.yml b/.github/workflows/build-python-geohash.yml
index ea0037793fa5..0329babe9a80 100644
--- a/.github/workflows/build-python-geohash.yml
+++ b/.github/workflows/build-python-geohash.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-geohash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-mecab-ko.yml b/.github/workflows/build-python-mecab-ko.yml
index 953d6cdee630..ae8fb38d6424 100644
--- a/.github/workflows/build-python-mecab-ko.yml
+++ b/.github/workflows/build-python-mecab-ko.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-mecab-ko-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-rapidjson.yml b/.github/workflows/build-python-rapidjson.yml
index e5289eeb2389..0632b18d84f9 100644
--- a/.github/workflows/build-python-rapidjson.yml
+++ b/.github/workflows/build-python-rapidjson.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python_rapidjson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-python-rtmidi.yml b/.github/workflows/build-python-rtmidi.yml
index 216a522ba073..1219dc8a6e8e 100644
--- a/.github/workflows/build-python-rtmidi.yml
+++ b/.github/workflows/build-python-rtmidi.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: python-rtmidi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pytokens.yml b/.github/workflows/build-pytokens.yml
index 095369b47835..b54dc4c9a411 100644
--- a/.github/workflows/build-pytokens.yml
+++ b/.github/workflows/build-pytokens.yml
@@ -95,5 +95,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pytokens-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pytrec-eval-terrier.yml b/.github/workflows/build-pytrec-eval-terrier.yml
index 9f745363a566..0043553d3483 100644
--- a/.github/workflows/build-pytrec-eval-terrier.yml
+++ b/.github/workflows/build-pytrec-eval-terrier.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pytrec-eval-terrier-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pywavelets.yml b/.github/workflows/build-pywavelets.yml
index 63392cd5f193..6142c420d65f 100644
--- a/.github/workflows/build-pywavelets.yml
+++ b/.github/workflows/build-pywavelets.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pywavelets-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyxdameraulevenshtein.yml b/.github/workflows/build-pyxdameraulevenshtein.yml
index cd1a12547bd2..f8096312e19f 100644
--- a/.github/workflows/build-pyxdameraulevenshtein.yml
+++ b/.github/workflows/build-pyxdameraulevenshtein.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyxdameraulevenshtein-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyxirr.yml b/.github/workflows/build-pyxirr.yml
index ae8a048c9148..754db93b66bb 100644
--- a/.github/workflows/build-pyxirr.yml
+++ b/.github/workflows/build-pyxirr.yml
@@ -171,5 +171,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyxirr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-pyyaml-ft.yml b/.github/workflows/build-pyyaml-ft.yml
index 9647a47763f5..3d44254b8cfd 100644
--- a/.github/workflows/build-pyyaml-ft.yml
+++ b/.github/workflows/build-pyyaml-ft.yml
@@ -201,5 +201,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: pyyaml-ft-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-qdldl.yml b/.github/workflows/build-qdldl.yml
index c0ebe9a37362..60e3ea35a56d 100644
--- a/.github/workflows/build-qdldl.yml
+++ b/.github/workflows/build-qdldl.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: qdldl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-qoi.yml b/.github/workflows/build-qoi.yml
index 2128d3a57b53..ad4095f0167d 100644
--- a/.github/workflows/build-qoi.yml
+++ b/.github/workflows/build-qoi.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: qoi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-quadprog.yml b/.github/workflows/build-quadprog.yml
index 4166bc1ff7e0..09117ba29191 100644
--- a/.github/workflows/build-quadprog.yml
+++ b/.github/workflows/build-quadprog.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quadprog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-quickjs-ng.yml b/.github/workflows/build-quickjs-ng.yml
index 847dabd846e3..0277d4983e77 100644
--- a/.github/workflows/build-quickjs-ng.yml
+++ b/.github/workflows/build-quickjs-ng.yml
@@ -128,5 +128,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quickjs-ng-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-quickjs.yml b/.github/workflows/build-quickjs.yml
index 155d7316a08d..25eda4ad6a41 100644
--- a/.github/workflows/build-quickjs.yml
+++ b/.github/workflows/build-quickjs.yml
@@ -195,5 +195,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: quickjs-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-rapidyaml.yml b/.github/workflows/build-rapidyaml.yml
index 3ca1ec32b231..cb17a2f8944e 100644
--- a/.github/workflows/build-rapidyaml.yml
+++ b/.github/workflows/build-rapidyaml.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rapidyaml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rasterio.yml b/.github/workflows/build-rasterio.yml
index b27ba48f2855..1c83596a6976 100644
--- a/.github/workflows/build-rasterio.yml
+++ b/.github/workflows/build-rasterio.yml
@@ -573,5 +573,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rasterio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ray.yml b/.github/workflows/build-ray.yml
index 44d7a90f0959..a385455b75a7 100644
--- a/.github/workflows/build-ray.yml
+++ b/.github/workflows/build-ray.yml
@@ -336,5 +336,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ray-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rbloom.yml b/.github/workflows/build-rbloom.yml
index ba89420a970f..4017ff6ee189 100644
--- a/.github/workflows/build-rbloom.yml
+++ b/.github/workflows/build-rbloom.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rbloom-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rcssmin.yml b/.github/workflows/build-rcssmin.yml
index 00b3662024f7..73cd7cba7a13 100644
--- a/.github/workflows/build-rcssmin.yml
+++ b/.github/workflows/build-rcssmin.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rcssmin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rdkit.yml b/.github/workflows/build-rdkit.yml
index ed6bd6958568..5101c9ac26ac 100644
--- a/.github/workflows/build-rdkit.yml
+++ b/.github/workflows/build-rdkit.yml
@@ -239,5 +239,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rdkit-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rectangle-packer.yml b/.github/workflows/build-rectangle-packer.yml
index 2963290dab25..2a2fd829b0a1 100644
--- a/.github/workflows/build-rectangle-packer.yml
+++ b/.github/workflows/build-rectangle-packer.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rectangle-packer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-regress.yml b/.github/workflows/build-regress.yml
index c2bb98f0928c..aaa813c12d69 100644
--- a/.github/workflows/build-regress.yml
+++ b/.github/workflows/build-regress.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: regress-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rensa.yml b/.github/workflows/build-rensa.yml
index 0b42a4bbf4e0..76d47864e79b 100644
--- a/.github/workflows/build-rensa.yml
+++ b/.github/workflows/build-rensa.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rensa-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rerun-sdk.yml b/.github/workflows/build-rerun-sdk.yml
index 048647b39073..2a9d1d5d57c4 100644
--- a/.github/workflows/build-rerun-sdk.yml
+++ b/.github/workflows/build-rerun-sdk.yml
@@ -268,5 +268,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rerun-sdk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-resiliparse.yml b/.github/workflows/build-resiliparse.yml
index 32270facf074..237ccccaae73 100644
--- a/.github/workflows/build-resiliparse.yml
+++ b/.github/workflows/build-resiliparse.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: resiliparse-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-resvg-py.yml b/.github/workflows/build-resvg-py.yml
index cfb3be97f1ec..0dacf7ef3a26 100644
--- a/.github/workflows/build-resvg-py.yml
+++ b/.github/workflows/build-resvg-py.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: resvg-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rfc3161-client.yml b/.github/workflows/build-rfc3161-client.yml
index f9a36dc78798..0a4c12164d64 100644
--- a/.github/workflows/build-rfc3161-client.yml
+++ b/.github/workflows/build-rfc3161-client.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rfc3161-client-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rhino3dm.yml b/.github/workflows/build-rhino3dm.yml
index d9c9aa5ff4bf..531973579c0f 100644
--- a/.github/workflows/build-rhino3dm.yml
+++ b/.github/workflows/build-rhino3dm.yml
@@ -141,5 +141,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rhino3dm-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rigour.yml b/.github/workflows/build-rigour.yml
index ee135298b831..40ead6d590d0 100644
--- a/.github/workflows/build-rigour.yml
+++ b/.github/workflows/build-rigour.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rigour-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ripgrep.yml b/.github/workflows/build-ripgrep.yml
index f2c4a589be3a..e9cbd9492de0 100644
--- a/.github/workflows/build-ripgrep.yml
+++ b/.github/workflows/build-ripgrep.yml
@@ -221,5 +221,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ripgrep-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-rjieba.yml b/.github/workflows/build-rjieba.yml
index 29cf184da141..c72f4daf5a7c 100644
--- a/.github/workflows/build-rjieba.yml
+++ b/.github/workflows/build-rjieba.yml
@@ -133,5 +133,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rjieba-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rjsmin.yml b/.github/workflows/build-rjsmin.yml
index 55899e5c2aac..3f67fc01a46f 100644
--- a/.github/workflows/build-rjsmin.yml
+++ b/.github/workflows/build-rjsmin.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rjsmin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rocksdict.yml b/.github/workflows/build-rocksdict.yml
index c911e1035ba1..4769f2960d66 100644
--- a/.github/workflows/build-rocksdict.yml
+++ b/.github/workflows/build-rocksdict.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rocksdict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rtoml.yml b/.github/workflows/build-rtoml.yml
index 66c19381c21e..3a9ba42a8542 100644
--- a/.github/workflows/build-rtoml.yml
+++ b/.github/workflows/build-rtoml.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rtoml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rtree.yml b/.github/workflows/build-rtree.yml
index e0260cede44b..aada3928157d 100644
--- a/.github/workflows/build-rtree.yml
+++ b/.github/workflows/build-rtree.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rtree-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruamel-yaml-clib.yml b/.github/workflows/build-ruamel-yaml-clib.yml
index 4013270a3938..60f067e015dc 100644
--- a/.github/workflows/build-ruamel-yaml-clib.yml
+++ b/.github/workflows/build-ruamel-yaml-clib.yml
@@ -143,5 +143,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruamel-yaml-clib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruckig.yml b/.github/workflows/build-ruckig.yml
index 7f1d903933c6..12a2ca0ad0ec 100644
--- a/.github/workflows/build-ruckig.yml
+++ b/.github/workflows/build-ruckig.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruckig-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-rumdl.yml b/.github/workflows/build-rumdl.yml
index a3e88d097c2c..b3a7414ee53d 100644
--- a/.github/workflows/build-rumdl.yml
+++ b/.github/workflows/build-rumdl.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rumdl-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-runstats.yml b/.github/workflows/build-runstats.yml
index b0e5ad813b9d..f39507575b34 100644
--- a/.github/workflows/build-runstats.yml
+++ b/.github/workflows/build-runstats.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: runstats-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ruptures.yml b/.github/workflows/build-ruptures.yml
index dbd1e2367c7e..0252523777dd 100644
--- a/.github/workflows/build-ruptures.yml
+++ b/.github/workflows/build-ruptures.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ruptures-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rustpy-xlsxwriter.yml b/.github/workflows/build-rustpy-xlsxwriter.yml
index f79fb28095f7..e49894a3c3cd 100644
--- a/.github/workflows/build-rustpy-xlsxwriter.yml
+++ b/.github/workflows/build-rustpy-xlsxwriter.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rustpy-xlsxwriter-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-rustworkx.yml b/.github/workflows/build-rustworkx.yml
index 532e747b6265..584f567a3bbd 100644
--- a/.github/workflows/build-rustworkx.yml
+++ b/.github/workflows/build-rustworkx.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: rustworkx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-s5cmd.yml b/.github/workflows/build-s5cmd.yml
index 2f3029403504..902836a19475 100644
--- a/.github/workflows/build-s5cmd.yml
+++ b/.github/workflows/build-s5cmd.yml
@@ -225,5 +225,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: s5cmd-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-samplerate.yml b/.github/workflows/build-samplerate.yml
index 4db586deefd1..133700fef472 100644
--- a/.github/workflows/build-samplerate.yml
+++ b/.github/workflows/build-samplerate.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: samplerate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scikit-learn.yml b/.github/workflows/build-scikit-learn.yml
index 5ba6088084b5..751acebcd55b 100644
--- a/.github/workflows/build-scikit-learn.yml
+++ b/.github/workflows/build-scikit-learn.yml
@@ -149,6 +149,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-learn-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-learn-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scikit-misc.yml b/.github/workflows/build-scikit-misc.yml
index 3cd405f9016a..be059ba4bb7c 100644
--- a/.github/workflows/build-scikit-misc.yml
+++ b/.github/workflows/build-scikit-misc.yml
@@ -122,6 +122,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-misc-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-misc-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scikit-network.yml b/.github/workflows/build-scikit-network.yml
index 74f80b52f999..6ca9953c19a1 100644
--- a/.github/workflows/build-scikit-network.yml
+++ b/.github/workflows/build-scikit-network.yml
@@ -140,6 +140,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scikit-network-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scikit-network-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-scipy.yml b/.github/workflows/build-scipy.yml
index 624e17700929..fcc1fb368364 100644
--- a/.github/workflows/build-scipy.yml
+++ b/.github/workflows/build-scipy.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scrypt.yml b/.github/workflows/build-scrypt.yml
index 36dca9faf1bc..b73e0ef88110 100644
--- a/.github/workflows/build-scrypt.yml
+++ b/.github/workflows/build-scrypt.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scrypt-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-scs.yml b/.github/workflows/build-scs.yml
index 90b0b3ed0af7..4da5358f8a34 100644
--- a/.github/workflows/build-scs.yml
+++ b/.github/workflows/build-scs.yml
@@ -163,6 +163,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: scs-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: scs-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-sdbus.yml b/.github/workflows/build-sdbus.yml
index 83f8583fc617..7b2996c9697a 100644
--- a/.github/workflows/build-sdbus.yml
+++ b/.github/workflows/build-sdbus.yml
@@ -320,6 +320,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sdbus-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: sdbus-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-segyio.yml b/.github/workflows/build-segyio.yml
index 3b0b0efd56c3..ae4be5dea6c6 100644
--- a/.github/workflows/build-segyio.yml
+++ b/.github/workflows/build-segyio.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: segyio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-selectolax.yml b/.github/workflows/build-selectolax.yml
index bf56486c5423..99c4cb740769 100644
--- a/.github/workflows/build-selectolax.yml
+++ b/.github/workflows/build-selectolax.yml
@@ -108,5 +108,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: selectolax-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-semantic-text-splitter.yml b/.github/workflows/build-semantic-text-splitter.yml
index 5babb50618b1..e9013c31263e 100644
--- a/.github/workflows/build-semantic-text-splitter.yml
+++ b/.github/workflows/build-semantic-text-splitter.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: semantic-text-splitter-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-semgrep.yml b/.github/workflows/build-semgrep.yml
index ea898cf2032b..a57742ce8212 100644
--- a/.github/workflows/build-semgrep.yml
+++ b/.github/workflows/build-semgrep.yml
@@ -287,6 +287,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: semgrep-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: semgrep-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-sentencepiece.yml b/.github/workflows/build-sentencepiece.yml
index b4d1c49a9fd9..9cf754cb492b 100644
--- a/.github/workflows/build-sentencepiece.yml
+++ b/.github/workflows/build-sentencepiece.yml
@@ -124,5 +124,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sentencepiece-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-serpyco-rs.yml b/.github/workflows/build-serpyco-rs.yml
index b815c36e9136..58c18970731a 100644
--- a/.github/workflows/build-serpyco-rs.yml
+++ b/.github/workflows/build-serpyco-rs.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: serpyco-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shapely.yml b/.github/workflows/build-shapely.yml
index 74d8ef118823..ea56a1237d95 100644
--- a/.github/workflows/build-shapely.yml
+++ b/.github/workflows/build-shapely.yml
@@ -135,5 +135,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shapely-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shellcheck-py.yml b/.github/workflows/build-shellcheck-py.yml
index a20a42d80a23..01871a4bfa7a 100644
--- a/.github/workflows/build-shellcheck-py.yml
+++ b/.github/workflows/build-shellcheck-py.yml
@@ -97,5 +97,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shellcheck-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sherpa-onnx.yml b/.github/workflows/build-sherpa-onnx.yml
index 3815abc0ef02..d45b87bed2fb 100644
--- a/.github/workflows/build-sherpa-onnx.yml
+++ b/.github/workflows/build-sherpa-onnx.yml
@@ -168,5 +168,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sherpa-onnx-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-shiboken6.yml b/.github/workflows/build-shiboken6.yml
index b45a04b31733..9de285da2a65 100644
--- a/.github/workflows/build-shiboken6.yml
+++ b/.github/workflows/build-shiboken6.yml
@@ -147,5 +147,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: shiboken6-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplejpeg.yml b/.github/workflows/build-simplejpeg.yml
index a89529ca9331..c4804f0f324a 100644
--- a/.github/workflows/build-simplejpeg.yml
+++ b/.github/workflows/build-simplejpeg.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplejpeg-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplejson.yml b/.github/workflows/build-simplejson.yml
index f251876e3fc9..9ec4887760c1 100644
--- a/.github/workflows/build-simplejson.yml
+++ b/.github/workflows/build-simplejson.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplejson-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simplification.yml b/.github/workflows/build-simplification.yml
index f3b647d456b8..ce6da191b7ba 100644
--- a/.github/workflows/build-simplification.yml
+++ b/.github/workflows/build-simplification.yml
@@ -153,5 +153,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simplification-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-simsimd.yml b/.github/workflows/build-simsimd.yml
index d751e6de2c83..05c20945782f 100644
--- a/.github/workflows/build-simsimd.yml
+++ b/.github/workflows/build-simsimd.yml
@@ -133,6 +133,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: simsimd-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: simsimd-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-siphash24.yml b/.github/workflows/build-siphash24.yml
index 8bda8f904303..00d82c82c9de 100644
--- a/.github/workflows/build-siphash24.yml
+++ b/.github/workflows/build-siphash24.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: siphash24-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-siphashc.yml b/.github/workflows/build-siphashc.yml
index 605e03259af8..c99d8b205ff9 100644
--- a/.github/workflows/build-siphashc.yml
+++ b/.github/workflows/build-siphashc.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: siphashc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-skia-python.yml b/.github/workflows/build-skia-python.yml
index b31ec02c2909..ba4f0875c088 100644
--- a/.github/workflows/build-skia-python.yml
+++ b/.github/workflows/build-skia-python.yml
@@ -167,5 +167,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: skia-python-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-snowflake-connector-python.yml b/.github/workflows/build-snowflake-connector-python.yml
index ae217844ab37..314baed6b9d6 100644
--- a/.github/workflows/build-snowflake-connector-python.yml
+++ b/.github/workflows/build-snowflake-connector-python.yml
@@ -180,5 +180,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: snowflake-connector-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-solders.yml b/.github/workflows/build-solders.yml
index f3ed90146969..ed10036d142f 100644
--- a/.github/workflows/build-solders.yml
+++ b/.github/workflows/build-solders.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: solders-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-soxr.yml b/.github/workflows/build-soxr.yml
index bbbba29f7540..7b5fa8dbfc8f 100644
--- a/.github/workflows/build-soxr.yml
+++ b/.github/workflows/build-soxr.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: soxr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-spacy.yml b/.github/workflows/build-spacy.yml
index dbfee21876f2..1e2b4dcf2f53 100644
--- a/.github/workflows/build-spacy.yml
+++ b/.github/workflows/build-spacy.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spacy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sparsediffpy.yml b/.github/workflows/build-sparsediffpy.yml
index 0ebd4cf486ca..3d2f667d6d8c 100644
--- a/.github/workflows/build-sparsediffpy.yml
+++ b/.github/workflows/build-sparsediffpy.yml
@@ -157,6 +157,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sparsediffpy-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: sparsediffpy-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-spglib.yml b/.github/workflows/build-spglib.yml
index 3f0963f3e42b..66a55a080d25 100644
--- a/.github/workflows/build-spglib.yml
+++ b/.github/workflows/build-spglib.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spglib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sphn.yml b/.github/workflows/build-sphn.yml
index c0b88a1a33b9..de16a8d8dbc6 100644
--- a/.github/workflows/build-sphn.yml
+++ b/.github/workflows/build-sphn.yml
@@ -186,5 +186,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sphn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-spidev.yml b/.github/workflows/build-spidev.yml
index f09cd7a691c7..e1e7c724cf77 100644
--- a/.github/workflows/build-spidev.yml
+++ b/.github/workflows/build-spidev.yml
@@ -107,5 +107,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spidev-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-spookyhash.yml b/.github/workflows/build-spookyhash.yml
index fe12a2e9987f..d5a20f317832 100644
--- a/.github/workflows/build-spookyhash.yml
+++ b/.github/workflows/build-spookyhash.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: spookyhash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlalchemy.yml b/.github/workflows/build-sqlalchemy.yml
index 010932244122..652147509fc2 100644
--- a/.github/workflows/build-sqlalchemy.yml
+++ b/.github/workflows/build-sqlalchemy.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlalchemy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlean-py.yml b/.github/workflows/build-sqlean-py.yml
index edc74c67288b..ff96dd15b24e 100644
--- a/.github/workflows/build-sqlean-py.yml
+++ b/.github/workflows/build-sqlean-py.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlean-py-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlglotc.yml b/.github/workflows/build-sqlglotc.yml
index 126469e38fd1..591377646cde 100644
--- a/.github/workflows/build-sqlglotc.yml
+++ b/.github/workflows/build-sqlglotc.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlglotc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqlite-vec.yml b/.github/workflows/build-sqlite-vec.yml
index 27ea46adfe81..7e1fd673e723 100644
--- a/.github/workflows/build-sqlite-vec.yml
+++ b/.github/workflows/build-sqlite-vec.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqlite-vec-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqloxide.yml b/.github/workflows/build-sqloxide.yml
index ffb4cb512a51..cc0f6cab5c0f 100644
--- a/.github/workflows/build-sqloxide.yml
+++ b/.github/workflows/build-sqloxide.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqloxide-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sqruff.yml b/.github/workflows/build-sqruff.yml
index 27c28f1cf6c4..0cf42f5d55ff 100644
--- a/.github/workflows/build-sqruff.yml
+++ b/.github/workflows/build-sqruff.yml
@@ -139,5 +139,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sqruff-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-srsly.yml b/.github/workflows/build-srsly.yml
index a42ce5112013..b8641c7509e3 100644
--- a/.github/workflows/build-srsly.yml
+++ b/.github/workflows/build-srsly.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: srsly-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ssh2-python.yml b/.github/workflows/build-ssh2-python.yml
index 081c9358a26e..f733c5efeff3 100644
--- a/.github/workflows/build-ssh2-python.yml
+++ b/.github/workflows/build-ssh2-python.yml
@@ -138,5 +138,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ssh2-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sspilib.yml b/.github/workflows/build-sspilib.yml
index aa90d4a11352..27f3d43fe94f 100644
--- a/.github/workflows/build-sspilib.yml
+++ b/.github/workflows/build-sspilib.yml
@@ -187,5 +187,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sspilib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-starlark-pyo3.yml b/.github/workflows/build-starlark-pyo3.yml
index 475a4186878a..96c20c0cd774 100644
--- a/.github/workflows/build-starlark-pyo3.yml
+++ b/.github/workflows/build-starlark-pyo3.yml
@@ -104,5 +104,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: starlark-pyo3-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsforecast.yml b/.github/workflows/build-statsforecast.yml
index 08440131b562..aff3e1cb1b7c 100644
--- a/.github/workflows/build-statsforecast.yml
+++ b/.github/workflows/build-statsforecast.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsforecast-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsig-python-core.yml b/.github/workflows/build-statsig-python-core.yml
index be63a6a5efd7..f5cead0b3778 100644
--- a/.github/workflows/build-statsig-python-core.yml
+++ b/.github/workflows/build-statsig-python-core.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsig_python_core-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-statsmodels.yml b/.github/workflows/build-statsmodels.yml
index 4a3464065000..d46799a0bc81 100644
--- a/.github/workflows/build-statsmodels.yml
+++ b/.github/workflows/build-statsmodels.yml
@@ -131,5 +131,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: statsmodels-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-stream-inflate.yml b/.github/workflows/build-stream-inflate.yml
index 61b3f9b77f9b..012350712059 100644
--- a/.github/workflows/build-stream-inflate.yml
+++ b/.github/workflows/build-stream-inflate.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: stream-inflate-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-stream-unzip.yml b/.github/workflows/build-stream-unzip.yml
index a02c9c6d1e41..1d400de20c4f 100644
--- a/.github/workflows/build-stream-unzip.yml
+++ b/.github/workflows/build-stream-unzip.yml
@@ -185,5 +185,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: stream-unzip-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-streaming-form-data.yml b/.github/workflows/build-streaming-form-data.yml
index baa913dede6a..308bc1c83dd2 100644
--- a/.github/workflows/build-streaming-form-data.yml
+++ b/.github/workflows/build-streaming-form-data.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: streaming-form-data-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sudachipy.yml b/.github/workflows/build-sudachipy.yml
index 543e6f291c53..d2455d309fd6 100644
--- a/.github/workflows/build-sudachipy.yml
+++ b/.github/workflows/build-sudachipy.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sudachipy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-swiglpk.yml b/.github/workflows/build-swiglpk.yml
index 6a724ae5339a..2ecd2bce10d0 100644
--- a/.github/workflows/build-swiglpk.yml
+++ b/.github/workflows/build-swiglpk.yml
@@ -196,6 +196,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: swiglpk-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: swiglpk-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-symengine.yml b/.github/workflows/build-symengine.yml
index 8c3443f94580..1c950fa5d308 100644
--- a/.github/workflows/build-symengine.yml
+++ b/.github/workflows/build-symengine.yml
@@ -175,6 +175,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: symengine-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: symengine-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-symusic.yml b/.github/workflows/build-symusic.yml
index f4813bba40d6..b258f113995f 100644
--- a/.github/workflows/build-symusic.yml
+++ b/.github/workflows/build-symusic.yml
@@ -155,5 +155,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: symusic-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-sysv-ipc.yml b/.github/workflows/build-sysv-ipc.yml
index a19b6d95b8de..5f9f54881537 100644
--- a/.github/workflows/build-sysv-ipc.yml
+++ b/.github/workflows/build-sysv-ipc.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: sysv-ipc-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ta-lib.yml b/.github/workflows/build-ta-lib.yml
index ef4cc2a8cc04..93bfa1e4bb9f 100644
--- a/.github/workflows/build-ta-lib.yml
+++ b/.github/workflows/build-ta-lib.yml
@@ -144,5 +144,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ta-lib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tables.yml b/.github/workflows/build-tables.yml
index 2d10b781a2e2..0c197a2c4eef 100644
--- a/.github/workflows/build-tables.yml
+++ b/.github/workflows/build-tables.yml
@@ -215,5 +215,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tables-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tach.yml b/.github/workflows/build-tach.yml
index a190665fbe93..5e5f203a75d8 100644
--- a/.github/workflows/build-tach.yml
+++ b/.github/workflows/build-tach.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tach-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tantivy.yml b/.github/workflows/build-tantivy.yml
index c332c822ac0b..7144eeaf0f14 100644
--- a/.github/workflows/build-tantivy.yml
+++ b/.github/workflows/build-tantivy.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tantivy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-taplo.yml b/.github/workflows/build-taplo.yml
index 6d9fc08af157..b811da8588c8 100644
--- a/.github/workflows/build-taplo.yml
+++ b/.github/workflows/build-taplo.yml
@@ -208,5 +208,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: taplo-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-tbb.yml b/.github/workflows/build-tbb.yml
index 1cfbc01f7a49..912dcd9b4e2e 100644
--- a/.github/workflows/build-tbb.yml
+++ b/.github/workflows/build-tbb.yml
@@ -140,5 +140,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tbb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tcmlib.yml b/.github/workflows/build-tcmlib.yml
index cd7102b048f2..d962bfaea843 100644
--- a/.github/workflows/build-tcmlib.yml
+++ b/.github/workflows/build-tcmlib.yml
@@ -165,5 +165,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tcmlib-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-temporalio.yml b/.github/workflows/build-temporalio.yml
index 08be291c965f..05298fb1b2dc 100644
--- a/.github/workflows/build-temporalio.yml
+++ b/.github/workflows/build-temporalio.yml
@@ -145,5 +145,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: temporalio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tensor-grep.yml b/.github/workflows/build-tensor-grep.yml
index 35bf8e19358d..b17e07fe4149 100644
--- a/.github/workflows/build-tensor-grep.yml
+++ b/.github/workflows/build-tensor-grep.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tensor-grep-${{ matrix.version }}-cp311-abi3-manylinux_riscv64
diff --git a/.github/workflows/build-tensordict.yml b/.github/workflows/build-tensordict.yml
index 1955a3f589cb..18e879b8df55 100644
--- a/.github/workflows/build-tensordict.yml
+++ b/.github/workflows/build-tensordict.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tensordict-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tesserocr.yml b/.github/workflows/build-tesserocr.yml
index 6d0d515d0528..e4340e0f9a48 100644
--- a/.github/workflows/build-tesserocr.yml
+++ b/.github/workflows/build-tesserocr.yml
@@ -210,5 +210,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tesserocr-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-test-results-parser.yml b/.github/workflows/build-test-results-parser.yml
index b3632b52cc42..8500d2afb972 100644
--- a/.github/workflows/build-test-results-parser.yml
+++ b/.github/workflows/build-test-results-parser.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: test-results-parser-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-text2num.yml b/.github/workflows/build-text2num.yml
index 1c7eb5647d97..bc3ab14d64ad 100644
--- a/.github/workflows/build-text2num.yml
+++ b/.github/workflows/build-text2num.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: text2num-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-textual-speedups.yml b/.github/workflows/build-textual-speedups.yml
index 94a85ff34d4e..5bec1e9b1272 100644
--- a/.github/workflows/build-textual-speedups.yml
+++ b/.github/workflows/build-textual-speedups.yml
@@ -230,5 +230,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: textual-speedups-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-texture2ddecoder.yml b/.github/workflows/build-texture2ddecoder.yml
index ea0515630646..cfa3a4027a34 100644
--- a/.github/workflows/build-texture2ddecoder.yml
+++ b/.github/workflows/build-texture2ddecoder.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: texture2ddecoder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tgcrypto.yml b/.github/workflows/build-tgcrypto.yml
index 0b9badc268ec..84668e51f95e 100644
--- a/.github/workflows/build-tgcrypto.yml
+++ b/.github/workflows/build-tgcrypto.yml
@@ -94,5 +94,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tgcrypto-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-thinc.yml b/.github/workflows/build-thinc.yml
index 6cb8d3d7d642..df656a3eee31 100644
--- a/.github/workflows/build-thinc.yml
+++ b/.github/workflows/build-thinc.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thinc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-thrift.yml b/.github/workflows/build-thrift.yml
index de25d195cfa2..12931ceee67c 100644
--- a/.github/workflows/build-thrift.yml
+++ b/.github/workflows/build-thrift.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thrift-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-thriftpy2.yml b/.github/workflows/build-thriftpy2.yml
index 196a77e849d8..a7c15af15f83 100644
--- a/.github/workflows/build-thriftpy2.yml
+++ b/.github/workflows/build-thriftpy2.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: thriftpy2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-tibs.yml b/.github/workflows/build-tibs.yml
index 03734bb3f85e..7ca5de925538 100644
--- a/.github/workflows/build-tibs.yml
+++ b/.github/workflows/build-tibs.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tibs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tiktoken.yml b/.github/workflows/build-tiktoken.yml
index bee22b5057f3..dd756afefaca 100644
--- a/.github/workflows/build-tiktoken.yml
+++ b/.github/workflows/build-tiktoken.yml
@@ -93,5 +93,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tiktoken-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tilelang.yml b/.github/workflows/build-tilelang.yml
index 8f287220adff..784a311eedcf 100644
--- a/.github/workflows/build-tilelang.yml
+++ b/.github/workflows/build-tilelang.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tilelang-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-time-machine.yml b/.github/workflows/build-time-machine.yml
index ccaa546a7c64..15d58151f31c 100644
--- a/.github/workflows/build-time-machine.yml
+++ b/.github/workflows/build-time-machine.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: time-machine-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-timezonefinder.yml b/.github/workflows/build-timezonefinder.yml
index 6d12f435c8d6..33ef4dd473dd 100644
--- a/.github/workflows/build-timezonefinder.yml
+++ b/.github/workflows/build-timezonefinder.yml
@@ -114,5 +114,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: timezonefinder-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tink.yml b/.github/workflows/build-tink.yml
index 6feecaf0c7bb..a9235ad379c6 100644
--- a/.github/workflows/build-tink.yml
+++ b/.github/workflows/build-tink.yml
@@ -289,5 +289,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tink-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tinyobjloader.yml b/.github/workflows/build-tinyobjloader.yml
index 009326c168c2..20a5e889d68f 100644
--- a/.github/workflows/build-tinyobjloader.yml
+++ b/.github/workflows/build-tinyobjloader.yml
@@ -98,5 +98,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tinyobjloader-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tombi.yml b/.github/workflows/build-tombi.yml
index bf51d9c90136..911eb82177c5 100644
--- a/.github/workflows/build-tombi.yml
+++ b/.github/workflows/build-tombi.yml
@@ -177,5 +177,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tombi-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-tomli.yml b/.github/workflows/build-tomli.yml
index cafb2d20619a..02addc0f9ec3 100644
--- a/.github/workflows/build-tomli.yml
+++ b/.github/workflows/build-tomli.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tomli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-toons.yml b/.github/workflows/build-toons.yml
index 8f74565bceb3..c23119a96903 100644
--- a/.github/workflows/build-toons.yml
+++ b/.github/workflows/build-toons.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: toons-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-torch.yml b/.github/workflows/build-torch.yml
index 14c16bbb54c1..e31eaa512aa4 100644
--- a/.github/workflows/build-torch.yml
+++ b/.github/workflows/build-torch.yml
@@ -228,5 +228,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: torch-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-torchaudio.yml b/.github/workflows/build-torchaudio.yml
index 16519505feb9..4ee2afb00be6 100644
--- a/.github/workflows/build-torchaudio.yml
+++ b/.github/workflows/build-torchaudio.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: torchaudio-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tornado.yml b/.github/workflows/build-tornado.yml
index fa395f8c3560..fd25f4863bfe 100644
--- a/.github/workflows/build-tornado.yml
+++ b/.github/workflows/build-tornado.yml
@@ -111,5 +111,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: artifacts-*
diff --git a/.github/workflows/build-traits.yml b/.github/workflows/build-traits.yml
index a7bb0676401b..50fe5c42e4c4 100644
--- a/.github/workflows/build-traits.yml
+++ b/.github/workflows/build-traits.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: traits-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-tree-sitter-bash.yml b/.github/workflows/build-tree-sitter-bash.yml
index 5adb3b8f3a53..8088e87fa64a 100644
--- a/.github/workflows/build-tree-sitter-bash.yml
+++ b/.github/workflows/build-tree-sitter-bash.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-bash-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-c-sharp.yml b/.github/workflows/build-tree-sitter-c-sharp.yml
index bea5670a6156..0703134548a5 100644
--- a/.github/workflows/build-tree-sitter-c-sharp.yml
+++ b/.github/workflows/build-tree-sitter-c-sharp.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-c-sharp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-c.yml b/.github/workflows/build-tree-sitter-c.yml
index aa9f71f67926..ea516a152950 100644
--- a/.github/workflows/build-tree-sitter-c.yml
+++ b/.github/workflows/build-tree-sitter-c.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-c-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-cpp.yml b/.github/workflows/build-tree-sitter-cpp.yml
index 4afab9f2e173..94ae4bb59ba2 100644
--- a/.github/workflows/build-tree-sitter-cpp.yml
+++ b/.github/workflows/build-tree-sitter-cpp.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-css.yml b/.github/workflows/build-tree-sitter-css.yml
index 71a155aef651..35b1962c1751 100644
--- a/.github/workflows/build-tree-sitter-css.yml
+++ b/.github/workflows/build-tree-sitter-css.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-css-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-dart.yml b/.github/workflows/build-tree-sitter-dart.yml
index 4383d96b0a10..8604bd0e90cd 100644
--- a/.github/workflows/build-tree-sitter-dart.yml
+++ b/.github/workflows/build-tree-sitter-dart.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-dart-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-dockerfile.yml b/.github/workflows/build-tree-sitter-dockerfile.yml
index 341ef410060f..2614d0b5b0b2 100644
--- a/.github/workflows/build-tree-sitter-dockerfile.yml
+++ b/.github/workflows/build-tree-sitter-dockerfile.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-dockerfile-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-elixir.yml b/.github/workflows/build-tree-sitter-elixir.yml
index d9cc5dbb929c..148d94dcd7eb 100644
--- a/.github/workflows/build-tree-sitter-elixir.yml
+++ b/.github/workflows/build-tree-sitter-elixir.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-elixir-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-embedded-template.yml b/.github/workflows/build-tree-sitter-embedded-template.yml
index 36723e0fd165..fc38586344f1 100644
--- a/.github/workflows/build-tree-sitter-embedded-template.yml
+++ b/.github/workflows/build-tree-sitter-embedded-template.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-embedded-template-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-fortran.yml b/.github/workflows/build-tree-sitter-fortran.yml
index 55b0e9efcecf..9ea5d54539c5 100644
--- a/.github/workflows/build-tree-sitter-fortran.yml
+++ b/.github/workflows/build-tree-sitter-fortran.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-fortran-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-go.yml b/.github/workflows/build-tree-sitter-go.yml
index a73928c67802..026a6ee439e9 100644
--- a/.github/workflows/build-tree-sitter-go.yml
+++ b/.github/workflows/build-tree-sitter-go.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-go-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-groovy.yml b/.github/workflows/build-tree-sitter-groovy.yml
index 6d0c252b6cc7..37c84a50eebb 100644
--- a/.github/workflows/build-tree-sitter-groovy.yml
+++ b/.github/workflows/build-tree-sitter-groovy.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-groovy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-hcl.yml b/.github/workflows/build-tree-sitter-hcl.yml
index cff521a5e071..86afe25b955a 100644
--- a/.github/workflows/build-tree-sitter-hcl.yml
+++ b/.github/workflows/build-tree-sitter-hcl.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-hcl-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-html.yml b/.github/workflows/build-tree-sitter-html.yml
index 6d8fae5d962a..35fbb57fde24 100644
--- a/.github/workflows/build-tree-sitter-html.yml
+++ b/.github/workflows/build-tree-sitter-html.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-html-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-java.yml b/.github/workflows/build-tree-sitter-java.yml
index fce18edf04cf..9e080c48eb04 100644
--- a/.github/workflows/build-tree-sitter-java.yml
+++ b/.github/workflows/build-tree-sitter-java.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-java-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-javascript.yml b/.github/workflows/build-tree-sitter-javascript.yml
index 9a3cfe4fb3ce..d82d55bee762 100644
--- a/.github/workflows/build-tree-sitter-javascript.yml
+++ b/.github/workflows/build-tree-sitter-javascript.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-javascript-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-json.yml b/.github/workflows/build-tree-sitter-json.yml
index eda9a7fe68ed..7047e23eac17 100644
--- a/.github/workflows/build-tree-sitter-json.yml
+++ b/.github/workflows/build-tree-sitter-json.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-json-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-julia.yml b/.github/workflows/build-tree-sitter-julia.yml
index e73fd8350f85..78f0b73eaefd 100644
--- a/.github/workflows/build-tree-sitter-julia.yml
+++ b/.github/workflows/build-tree-sitter-julia.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-julia-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-kotlin.yml b/.github/workflows/build-tree-sitter-kotlin.yml
index 058f5bc78fb1..7ad5230da6e1 100644
--- a/.github/workflows/build-tree-sitter-kotlin.yml
+++ b/.github/workflows/build-tree-sitter-kotlin.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-kotlin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-language-pack.yml b/.github/workflows/build-tree-sitter-language-pack.yml
index 4ccba1ef127f..3d29760b56af 100644
--- a/.github/workflows/build-tree-sitter-language-pack.yml
+++ b/.github/workflows/build-tree-sitter-language-pack.yml
@@ -192,5 +192,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-language-pack-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-languages.yml b/.github/workflows/build-tree-sitter-languages.yml
index 68edce637349..4ee2aa9df447 100644
--- a/.github/workflows/build-tree-sitter-languages.yml
+++ b/.github/workflows/build-tree-sitter-languages.yml
@@ -120,5 +120,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-languages-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-lua.yml b/.github/workflows/build-tree-sitter-lua.yml
index ea749134b2ff..289e2f8f43de 100644
--- a/.github/workflows/build-tree-sitter-lua.yml
+++ b/.github/workflows/build-tree-sitter-lua.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-lua-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-markdown.yml b/.github/workflows/build-tree-sitter-markdown.yml
index 6c4ffcac61be..1dc305a4727a 100644
--- a/.github/workflows/build-tree-sitter-markdown.yml
+++ b/.github/workflows/build-tree-sitter-markdown.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-markdown-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-objc.yml b/.github/workflows/build-tree-sitter-objc.yml
index b8df98d227ac..d89d81ca582a 100644
--- a/.github/workflows/build-tree-sitter-objc.yml
+++ b/.github/workflows/build-tree-sitter-objc.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-objc-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-php.yml b/.github/workflows/build-tree-sitter-php.yml
index 7fd97d135197..f337e67ec1d9 100644
--- a/.github/workflows/build-tree-sitter-php.yml
+++ b/.github/workflows/build-tree-sitter-php.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-php-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-powershell.yml b/.github/workflows/build-tree-sitter-powershell.yml
index 566958144b7f..812ada21c12d 100644
--- a/.github/workflows/build-tree-sitter-powershell.yml
+++ b/.github/workflows/build-tree-sitter-powershell.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-powershell-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-python.yml b/.github/workflows/build-tree-sitter-python.yml
index 699a528a079f..634cf27223e9 100644
--- a/.github/workflows/build-tree-sitter-python.yml
+++ b/.github/workflows/build-tree-sitter-python.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-regex.yml b/.github/workflows/build-tree-sitter-regex.yml
index 10b1275d88c2..c672a9f37631 100644
--- a/.github/workflows/build-tree-sitter-regex.yml
+++ b/.github/workflows/build-tree-sitter-regex.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-regex-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-ruby.yml b/.github/workflows/build-tree-sitter-ruby.yml
index 96cd8f050f5c..2560ae175abf 100644
--- a/.github/workflows/build-tree-sitter-ruby.yml
+++ b/.github/workflows/build-tree-sitter-ruby.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-ruby-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-rust.yml b/.github/workflows/build-tree-sitter-rust.yml
index 640fe6412ba7..7a3227586e19 100644
--- a/.github/workflows/build-tree-sitter-rust.yml
+++ b/.github/workflows/build-tree-sitter-rust.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-rust-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-scala.yml b/.github/workflows/build-tree-sitter-scala.yml
index d6c9f78fbc76..dc5197c51a38 100644
--- a/.github/workflows/build-tree-sitter-scala.yml
+++ b/.github/workflows/build-tree-sitter-scala.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-scala-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-sql.yml b/.github/workflows/build-tree-sitter-sql.yml
index 428a6c29684f..789980b41336 100644
--- a/.github/workflows/build-tree-sitter-sql.yml
+++ b/.github/workflows/build-tree-sitter-sql.yml
@@ -134,5 +134,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-sql-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-swift.yml b/.github/workflows/build-tree-sitter-swift.yml
index 3697cde8af2b..f70f8c83be6e 100644
--- a/.github/workflows/build-tree-sitter-swift.yml
+++ b/.github/workflows/build-tree-sitter-swift.yml
@@ -136,5 +136,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-swift-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-toml.yml b/.github/workflows/build-tree-sitter-toml.yml
index d1360adec568..67314c107709 100644
--- a/.github/workflows/build-tree-sitter-toml.yml
+++ b/.github/workflows/build-tree-sitter-toml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-toml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-typescript.yml b/.github/workflows/build-tree-sitter-typescript.yml
index 1648688c144c..2cf838e02021 100644
--- a/.github/workflows/build-tree-sitter-typescript.yml
+++ b/.github/workflows/build-tree-sitter-typescript.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-typescript-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-verilog.yml b/.github/workflows/build-tree-sitter-verilog.yml
index 0fb2efbc5fab..016c2a386b1f 100644
--- a/.github/workflows/build-tree-sitter-verilog.yml
+++ b/.github/workflows/build-tree-sitter-verilog.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-verilog-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-xml.yml b/.github/workflows/build-tree-sitter-xml.yml
index 67151550361c..a72ef69d1c42 100644
--- a/.github/workflows/build-tree-sitter-xml.yml
+++ b/.github/workflows/build-tree-sitter-xml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-xml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-yaml.yml b/.github/workflows/build-tree-sitter-yaml.yml
index 3b4a55a474b4..a0696ce9c2ce 100644
--- a/.github/workflows/build-tree-sitter-yaml.yml
+++ b/.github/workflows/build-tree-sitter-yaml.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-yaml-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tree-sitter-zig.yml b/.github/workflows/build-tree-sitter-zig.yml
index d588ee0599ce..2765dc78c157 100644
--- a/.github/workflows/build-tree-sitter-zig.yml
+++ b/.github/workflows/build-tree-sitter-zig.yml
@@ -89,5 +89,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tree-sitter-zig-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-treelite.yml b/.github/workflows/build-treelite.yml
index aa6e7b373d9b..eb311adfcac8 100644
--- a/.github/workflows/build-treelite.yml
+++ b/.github/workflows/build-treelite.yml
@@ -146,6 +146,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: treelite-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: treelite-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-tsdownsample.yml b/.github/workflows/build-tsdownsample.yml
index 5c1c723ff36e..9d63d5c938d8 100644
--- a/.github/workflows/build-tsdownsample.yml
+++ b/.github/workflows/build-tsdownsample.yml
@@ -117,5 +117,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tsdownsample-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tsv2py.yml b/.github/workflows/build-tsv2py.yml
index 9ed68b928497..71562043e40e 100644
--- a/.github/workflows/build-tsv2py.yml
+++ b/.github/workflows/build-tsv2py.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tsv2py-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-typedunits.yml b/.github/workflows/build-typedunits.yml
index 9efa353ef43f..490492afd91a 100644
--- a/.github/workflows/build-typedunits.yml
+++ b/.github/workflows/build-typedunits.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typedunits-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-typeid-python.yml b/.github/workflows/build-typeid-python.yml
index 3b90905e392f..4d0ac0ce8713 100644
--- a/.github/workflows/build-typeid-python.yml
+++ b/.github/workflows/build-typeid-python.yml
@@ -105,5 +105,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typeid-python-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-typos.yml b/.github/workflows/build-typos.yml
index 61d1e7a2aeda..33e20d40b30f 100644
--- a/.github/workflows/build-typos.yml
+++ b/.github/workflows/build-typos.yml
@@ -157,5 +157,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typos-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-typst.yml b/.github/workflows/build-typst.yml
index 3b53f8774d38..31f213e46253 100644
--- a/.github/workflows/build-typst.yml
+++ b/.github/workflows/build-typst.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: typst-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-tzfpy.yml b/.github/workflows/build-tzfpy.yml
index 210ebad73f83..de8b8a7eac36 100644
--- a/.github/workflows/build-tzfpy.yml
+++ b/.github/workflows/build-tzfpy.yml
@@ -116,5 +116,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: tzfpy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-ua-parser-rs.yml b/.github/workflows/build-ua-parser-rs.yml
index 3bef4fd03967..df63d1cc84e8 100644
--- a/.github/workflows/build-ua-parser-rs.yml
+++ b/.github/workflows/build-ua-parser-rs.yml
@@ -132,5 +132,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ua_parser_rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-uamqp.yml b/.github/workflows/build-uamqp.yml
index d5e1da305af7..4b38ced7dae8 100644
--- a/.github/workflows/build-uamqp.yml
+++ b/.github/workflows/build-uamqp.yml
@@ -150,5 +150,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uamqp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-uharfbuzz.yml b/.github/workflows/build-uharfbuzz.yml
index cb3c65a46a5f..4730ef154ab7 100644
--- a/.github/workflows/build-uharfbuzz.yml
+++ b/.github/workflows/build-uharfbuzz.yml
@@ -119,5 +119,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uharfbuzz-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-ulid-transform.yml b/.github/workflows/build-ulid-transform.yml
index 29f2c1d071eb..d564bc9ba4f6 100644
--- a/.github/workflows/build-ulid-transform.yml
+++ b/.github/workflows/build-ulid-transform.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: ulid-transform-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-unicode-segmentation-rs.yml b/.github/workflows/build-unicode-segmentation-rs.yml
index 3d6ae4a6e171..9d90790df794 100644
--- a/.github/workflows/build-unicode-segmentation-rs.yml
+++ b/.github/workflows/build-unicode-segmentation-rs.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicode-segmentation-rs-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-unicodedata2.yml b/.github/workflows/build-unicodedata2.yml
index 9737287b2588..858cf3903b03 100644
--- a/.github/workflows/build-unicodedata2.yml
+++ b/.github/workflows/build-unicodedata2.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicodedata2-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-unicorn.yml b/.github/workflows/build-unicorn.yml
index 75f510f9160e..a5398d90691d 100644
--- a/.github/workflows/build-unicorn.yml
+++ b/.github/workflows/build-unicorn.yml
@@ -121,5 +121,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: unicorn-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-usearch.yml b/.github/workflows/build-usearch.yml
index c4f829e17696..b69e822175ae 100644
--- a/.github/workflows/build-usearch.yml
+++ b/.github/workflows/build-usearch.yml
@@ -139,6 +139,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: usearch-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: usearch-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-uuid-utils.yml b/.github/workflows/build-uuid-utils.yml
index 4de7dbdbb5e8..2bcc59788f5b 100644
--- a/.github/workflows/build-uuid-utils.yml
+++ b/.github/workflows/build-uuid-utils.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: uuid-utils-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-valkey-glide.yml b/.github/workflows/build-valkey-glide.yml
index 566b76dc0643..8760a34c4ea3 100644
--- a/.github/workflows/build-valkey-glide.yml
+++ b/.github/workflows/build-valkey-glide.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: valkey-glide-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vesin.yml b/.github/workflows/build-vesin.yml
index d8fa185457b3..c05db9e5a2d3 100644
--- a/.github/workflows/build-vesin.yml
+++ b/.github/workflows/build-vesin.yml
@@ -115,5 +115,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vesin-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vhacdx.yml b/.github/workflows/build-vhacdx.yml
index ab833b14e6d2..9bf8b588767a 100644
--- a/.github/workflows/build-vhacdx.yml
+++ b/.github/workflows/build-vhacdx.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vhacdx-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-vispy.yml b/.github/workflows/build-vispy.yml
index 1919171e7b4d..86ce05ef846a 100644
--- a/.github/workflows/build-vispy.yml
+++ b/.github/workflows/build-vispy.yml
@@ -101,5 +101,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vispy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-viztracer.yml b/.github/workflows/build-viztracer.yml
index cdbe4bb9cafa..85afec5f5d5a 100644
--- a/.github/workflows/build-viztracer.yml
+++ b/.github/workflows/build-viztracer.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: viztracer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vodozemac.yml b/.github/workflows/build-vodozemac.yml
index 19a89deed218..6e0da040d021 100644
--- a/.github/workflows/build-vodozemac.yml
+++ b/.github/workflows/build-vodozemac.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vodozemac-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vtk.yml b/.github/workflows/build-vtk.yml
index 09bd18721939..9214701c1ac5 100644
--- a/.github/workflows/build-vtk.yml
+++ b/.github/workflows/build-vtk.yml
@@ -243,5 +243,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vtk-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-vtracer.yml b/.github/workflows/build-vtracer.yml
index 15a5062c2770..63ad9459ae61 100644
--- a/.github/workflows/build-vtracer.yml
+++ b/.github/workflows/build-vtracer.yml
@@ -113,5 +113,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: vtracer-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-wandb.yml b/.github/workflows/build-wandb.yml
index af0c6c86d739..c3f29736c90b 100644
--- a/.github/workflows/build-wandb.yml
+++ b/.github/workflows/build-wandb.yml
@@ -162,5 +162,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: wandb-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-webrtcvad-wheels.yml b/.github/workflows/build-webrtcvad-wheels.yml
index 53de725ac17d..e42df4d305df 100644
--- a/.github/workflows/build-webrtcvad-wheels.yml
+++ b/.github/workflows/build-webrtcvad-wheels.yml
@@ -92,5 +92,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: webrtcvad-wheels-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-wordcloud.yml b/.github/workflows/build-wordcloud.yml
index cf530c15b1f5..d0633686f3ee 100644
--- a/.github/workflows/build-wordcloud.yml
+++ b/.github/workflows/build-wordcloud.yml
@@ -110,5 +110,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: wordcloud-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xatlas.yml b/.github/workflows/build-xatlas.yml
index bf1f8b39ef12..a35ac43f29a6 100644
--- a/.github/workflows/build-xatlas.yml
+++ b/.github/workflows/build-xatlas.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xatlas-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xattr.yml b/.github/workflows/build-xattr.yml
index e95bc7a3b761..5d5febef1b4d 100644
--- a/.github/workflows/build-xattr.yml
+++ b/.github/workflows/build-xattr.yml
@@ -91,5 +91,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xattr-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xgboost-cpu.yml b/.github/workflows/build-xgboost-cpu.yml
index e8003df75e32..bc46ec7ec78c 100644
--- a/.github/workflows/build-xgboost-cpu.yml
+++ b/.github/workflows/build-xgboost-cpu.yml
@@ -161,6 +161,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgboost-cpu-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: xgboost-cpu-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-xgboost.yml b/.github/workflows/build-xgboost.yml
index c7fcca37210d..681e70e67ef9 100644
--- a/.github/workflows/build-xgboost.yml
+++ b/.github/workflows/build-xgboost.yml
@@ -164,6 +164,8 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgboost-${{ matrix.version }}-*-manylinux_riscv64
       gpl-sources-artifact: xgboost-${{ matrix.version }}-gpl-sources
diff --git a/.github/workflows/build-xgrammar.yml b/.github/workflows/build-xgrammar.yml
index 544494953c2a..009e0ca8fd7e 100644
--- a/.github/workflows/build-xgrammar.yml
+++ b/.github/workflows/build-xgrammar.yml
@@ -122,5 +122,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xgrammar-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xmhuffman.yml b/.github/workflows/build-xmhuffman.yml
index 334bbe6fc969..7d6942301737 100644
--- a/.github/workflows/build-xmhuffman.yml
+++ b/.github/workflows/build-xmhuffman.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xmhuffman-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-xrootd.yml b/.github/workflows/build-xrootd.yml
index 68c4100a0a4f..424d1487aed8 100644
--- a/.github/workflows/build-xrootd.yml
+++ b/.github/workflows/build-xrootd.yml
@@ -197,5 +197,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: xrootd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yappi.yml b/.github/workflows/build-yappi.yml
index 44b516e155d7..1a437415bd34 100644
--- a/.github/workflows/build-yappi.yml
+++ b/.github/workflows/build-yappi.yml
@@ -96,5 +96,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yappi-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yara-python.yml b/.github/workflows/build-yara-python.yml
index 94d61b5cd7e1..eae308db7879 100644
--- a/.github/workflows/build-yara-python.yml
+++ b/.github/workflows/build-yara-python.yml
@@ -125,5 +125,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yara-python-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-yara-x.yml b/.github/workflows/build-yara-x.yml
index e41f70f3d665..21c8305e8a7e 100644
--- a/.github/workflows/build-yara-x.yml
+++ b/.github/workflows/build-yara-x.yml
@@ -129,5 +129,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yara-x-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-yggdrasil-engine.yml b/.github/workflows/build-yggdrasil-engine.yml
index df09fcae92c1..f80133d70175 100644
--- a/.github/workflows/build-yggdrasil-engine.yml
+++ b/.github/workflows/build-yggdrasil-engine.yml
@@ -190,5 +190,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: yggdrasil-engine-${{ matrix.version }}-cp312-abi3-manylinux_riscv64
diff --git a/.github/workflows/build-zensical.yml b/.github/workflows/build-zensical.yml
index ab81723b9113..b0ce985d66fb 100644
--- a/.github/workflows/build-zensical.yml
+++ b/.github/workflows/build-zensical.yml
@@ -126,5 +126,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zensical-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zeroconf.yml b/.github/workflows/build-zeroconf.yml
index 3c496fa15d9e..6e4518a4b424 100644
--- a/.github/workflows/build-zeroconf.yml
+++ b/.github/workflows/build-zeroconf.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zeroconf-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zipcodes.yml b/.github/workflows/build-zipcodes.yml
index 1ebc72bb28fb..520e30c10c97 100644
--- a/.github/workflows/build-zipcodes.yml
+++ b/.github/workflows/build-zipcodes.yml
@@ -118,5 +118,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zipcodes-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zipfile-deflate64.yml b/.github/workflows/build-zipfile-deflate64.yml
index 28adc429cc26..8c5686a2c154 100644
--- a/.github/workflows/build-zipfile-deflate64.yml
+++ b/.github/workflows/build-zipfile-deflate64.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zipfile-deflate64-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zizmor.yml b/.github/workflows/build-zizmor.yml
index 87d984a50baf..f005e15a4cd6 100644
--- a/.github/workflows/build-zizmor.yml
+++ b/.github/workflows/build-zizmor.yml
@@ -173,5 +173,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zizmor-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-zlib-ng.yml b/.github/workflows/build-zlib-ng.yml
index 55161f80088b..bd1fa0362e23 100644
--- a/.github/workflows/build-zlib-ng.yml
+++ b/.github/workflows/build-zlib-ng.yml
@@ -112,5 +112,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zlib-ng-${{ matrix.version }}-*riscv64
diff --git a/.github/workflows/build-zlib-state.yml b/.github/workflows/build-zlib-state.yml
index 71a5f85b0503..31b67c3ed8ad 100644
--- a/.github/workflows/build-zlib-state.yml
+++ b/.github/workflows/build-zlib-state.yml
@@ -102,5 +102,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zlib-state-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-container.yml b/.github/workflows/build-zope-container.yml
index 3810e7ca2882..c31d9216c024 100644
--- a/.github/workflows/build-zope-container.yml
+++ b/.github/workflows/build-zope-container.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-container-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-hookable.yml b/.github/workflows/build-zope-hookable.yml
index 76852d133e6c..85c4ea03b67b 100644
--- a/.github/workflows/build-zope-hookable.yml
+++ b/.github/workflows/build-zope-hookable.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-hookable-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-i18nmessageid.yml b/.github/workflows/build-zope-i18nmessageid.yml
index dc2fb182dce5..4f13ba64df83 100644
--- a/.github/workflows/build-zope-i18nmessageid.yml
+++ b/.github/workflows/build-zope-i18nmessageid.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-i18nmessageid-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-interface.yml b/.github/workflows/build-zope-interface.yml
index 871a64265dc6..d3be17ec7c07 100644
--- a/.github/workflows/build-zope-interface.yml
+++ b/.github/workflows/build-zope-interface.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-interface-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-proxy.yml b/.github/workflows/build-zope-proxy.yml
index 9891f8e336d1..afff856c4106 100644
--- a/.github/workflows/build-zope-proxy.yml
+++ b/.github/workflows/build-zope-proxy.yml
@@ -100,5 +100,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-proxy-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zope-security.yml b/.github/workflows/build-zope-security.yml
index b70dffdd8166..cd296c85033b 100644
--- a/.github/workflows/build-zope-security.yml
+++ b/.github/workflows/build-zope-security.yml
@@ -103,5 +103,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zope-security-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zopfli.yml b/.github/workflows/build-zopfli.yml
index aa58fee5ef25..4c3dfe28b59a 100644
--- a/.github/workflows/build-zopfli.yml
+++ b/.github/workflows/build-zopfli.yml
@@ -99,5 +99,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zopfli-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zstandard.yml b/.github/workflows/build-zstandard.yml
index 614b98ad1222..88186b509095 100644
--- a/.github/workflows/build-zstandard.yml
+++ b/.github/workflows/build-zstandard.yml
@@ -123,5 +123,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zstandard-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zstd.yml b/.github/workflows/build-zstd.yml
index bcf9884f74a7..1e87dc12d5bf 100644
--- a/.github/workflows/build-zstd.yml
+++ b/.github/workflows/build-zstd.yml
@@ -109,5 +109,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zstd-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/.github/workflows/build-zuban.yml b/.github/workflows/build-zuban.yml
index 65fa70c03fbe..d81932160379 100644
--- a/.github/workflows/build-zuban.yml
+++ b/.github/workflows/build-zuban.yml
@@ -174,5 +174,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zuban-${{ matrix.version }}-manylinux_riscv64
diff --git a/.github/workflows/build-zxing-cpp.yml b/.github/workflows/build-zxing-cpp.yml
index d53c278d51ab..7af2a54ad614 100644
--- a/.github/workflows/build-zxing-cpp.yml
+++ b/.github/workflows/build-zxing-cpp.yml
@@ -106,5 +106,7 @@ jobs:
       contents: write
       pull-requests: write
     uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
     with:
       artifact-pattern: zxing-cpp-${{ matrix.version }}-*-manylinux_riscv64
diff --git a/ci_scripts/update_doc.py b/ci_scripts/update_doc.py
index b3c5cc386e80..62f5f750a0f4 100644
--- a/ci_scripts/update_doc.py
+++ b/ci_scripts/update_doc.py
@@ -37,6 +37,7 @@
 RELEASE_TAG = os.environ.get("RELEASE_TAG")
 GPL_SOURCES_DESCRIPTION = os.environ.get("GPL_SOURCES_DESCRIPTION", "").strip()
 DRY_RUN = os.environ.get("DRY_RUN", "false").strip().lower() == "true"
+GH_TOKEN = os.environ.get("GH_TOKEN", "")
 
 
 def find_wheel_files(path):
@@ -262,6 +263,21 @@ def git_run(*args, check=True):
     return subprocess.run(["git", *args], check=check)
 
 
+def push_remote():
+    """
+    Where to push the docs branch.
+
+    The checkout's own credentials are whatever the workflow gave it, and a
+    push made with GITHUB_TOKEN raises no events, so the documentation PR would
+    get no checks. Push over GH_TOKEN instead -- the App installation token
+    when the publish workflow minted one -- and fall back to the checkout's
+    remote when there is none. Actions masks the token in the logs.
+    """
+    if not GH_TOKEN:
+        return "origin"
+    return f"https://x-access-token:{GH_TOKEN}@github.com/{REPO}"
+
+
 def checkout_shared_branch(branch):
     """
     Check out the shared docs branch as a local worktree HEAD, based on
@@ -430,7 +446,7 @@ def compute_content():
 
     # The rebase rewrote whatever was on the branch, so the push is no longer a
     # fast-forward; the lease keeps it from clobbering a concurrent update.
-    push = ["push", "origin", f"HEAD:{branch}"]
+    push = ["push", push_remote(), f"HEAD:{branch}"]
     if remote_sha:
         push.insert(1, f"--force-with-lease={branch}:{remote_sha}")
     git_run(*push)
diff --git a/docs/workflows.md b/docs/workflows.md
index c5eacf3ba86f..918fb50873f1 100644
--- a/docs/workflows.md
+++ b/docs/workflows.md
@@ -114,15 +114,26 @@ following workflows beyond those used for specific package builds:
 ### The riseproject-dev App
 
 Branches pushed and pull requests opened with the default `GITHUB_TOKEN` raise
-no events, so nothing ever runs on them: the nightly upgrade PRs would sit
-there with no checks. `nightly.yml` therefore mints an installation token for
-the `riseproject-dev` GitHub App and commits as `riseproject-dev[bot]`. It
-needs the repository variable `RISEPROJECT_APP_CLIENT_ID` (the App's Client ID)
-and the repository secret `RISEPROJECT_APP_PRIVATE_KEY` (the App's private key,
-PEM included), and the App must be installed on this repository with read and
-write access to contents and pull requests, plus read access to issues. With
-the variable unset the workflow falls back to `GITHUB_TOKEN` and the
-`github-actions[bot]` identity, checkless as before.
+no events, so nothing ever runs on them: the nightly upgrade PRs and the
+documentation PR would sit there with no checks. `nightly.yml` and
+`_publish-wheel.yml` therefore mint an installation token for the
+`riseproject-dev` GitHub App and commit as `riseproject-dev[bot]`. It needs the
+repository variable `RISEPROJECT_APP_CLIENT_ID` (the App's Client ID) and the
+repository secret `RISEPROJECT_APP_PRIVATE_KEY` (the App's private key, PEM
+included), and the App must be installed on this repository with read and write
+access to contents and pull requests, plus read access to issues. With the
+variable unset both fall back to `GITHUB_TOKEN` and the `github-actions[bot]`
+identity, checkless as before.
+
+`_publish-wheel.yml` is called by every `build-<package>.yml`, and a reusable
+workflow sees no secret it is not handed, so each caller passes the key on:
+
+```yaml
+  publish:
+    uses: $/.github/workflows/_publish-wheel.yml
+    secrets:
+      app-private-key: ${{ secrets.RISEPROJECT_APP_PRIVATE_KEY }}
+```
 
 ## The RISC-V Wheels Dashboard