chore(template): sync with dailydevops/dotnet-template [skip ci]

Author: samtrion

.github/workflows/cleanup-cache.yml

@@ -0,0 +1,44 @@
+name: Delete Cache after PR merge
+
+on:
+  pull_request:
+    types:
+      - closed
+
+permissions:
+  contents: read
+  actions: write
+
+jobs:
+  cleanup:
+    name: Clear cache
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+        with:
+          fetch-depth: 0
+
+      - name: Cleanup
+        run: |
+          gh extension install actions/gh-actions-cache
+
+          REPO=${{ github.repository }}
+
+          # get the branch
+          BRANCH="refs/pull/${{ github.event.pull_request.number }}/merge"
+
+          # fetch list of cache key
+          cacheKeysForPR=$(gh actions-cache list -R $REPO -B $BRANCH | cut -f 1 )
+
+          # set this to not fail the workflow while deleting cache keys
+          set +e
+
+          # delete cache key
+          for cacheKey in $cacheKeysForPR
+          do
+              gh actions-cache delete $cacheKey -R $REPO -B $BRANCH --confirm
+          done
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish-nuget.yml

@@ -9,11 +9,16 @@ on:
 permissions:
   actions: read
   contents: write
+  pull-requests: write
+
+concurrency:
+  group: publish-nuget
+  cancel-in-progress: true
 
 jobs:
   nuget:
     name: Publish
-    if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' }}
+    if: ${{ github.event.workflow_run.conclusion == 'success' && github.actor != 'dependabot[bot]' && github.actor != 'renovate[bot]' }}
     uses: dailydevops/pipelines/.github/workflows/publish-nuget.yml@cb37352bc6f2f8b723d966d5d879625d3dd5413b # 1.3.13
     with:
       workflowName: ${{ github.event.workflow_run.name }}