[GH] (texera/pin/3-read-paths): Workflow run "Required Checks" is working again!

[GitBox <gi...@apache.org>]

The GitHub Actions job "Required Checks" on texera.git/pin/3-read-paths has succeeded.
Run started by GitHub user yangzhang75 (triggered by yangzhang75).

Head commit for run:
bf743fbd0d41ffb17f1e5643147deb8944664a25 / Yang Zhang <ya...@uci.edu>
feat(workflow): serve the pinned copy to public viewers

With a version pinned, a workflow has two copies: the author's working
copy and the frozen one on public show. This routes every read that
serves a viewer without granted access through the frozen copy, and
freezes the name and description with the graph.

`WorkflowPublishService.publicCopyOf` returns the three fields as a
group, so a surface cannot pick up the published graph under a title the
author has not published; `WorkflowAccessResource.hasGrantedAccess` is
the seam that decides which copy a caller gets. Granted access -- owner,
shared, project member -- keeps tracking the author's latest, because
sharing is not publishing.

Name and description freeze because they are as public as the graph: if
only the graph froze, a report about a title could be answered by editing
the title while the pinned copy still advertised it.

Routed through it: opening a workflow, the hub's read, Clone, Duplicate,
`/workflow_name`, `/workflow_description` and the size a listing shows.
A workflow that follows the author's latest -- every workflow today --
is served exactly what it is served now.

Co-Authored-By: Claude Opus 5 <no...@anthropic.com>

Report URL: https://github.com/apache/texera/actions/runs/35271679662

With regards,
GitHub Actions via GitBox