fix(ci): make nightly release branch static and fix workflow structure (#14219)

* fix(ci): make nightly release branch static

* fix(ci): repair nightly workflow structure and static branch refs

* fix(ci): scope nightly reusable test job token permissions

Author: vjgit96

.github/workflows/nightly_build.yml

@@ -49,31 +49,9 @@ jobs:
         run: |
           echo "Cannot skip tests while push_to_registry is true."
           exit 1
-  resolve-release-branch:
-    runs-on: ubuntu-latest
-    outputs:
-      branch: ${{ steps.get_branch.outputs.branch }}
-    steps:
-      - name: Find latest release branch
-        id: get_branch
-        run: |
-          git ls-remote --heads https://github.com/${{ github.repository }} 'refs/heads/release-*' \
-          | awk '{print $2}' \
-          | sed 's|refs/heads/||' \
-          | grep -E '^release-[0-9]+\.[0-9]+\.[0-9]+$' \
-          | sort -V \
-          | tail -n 1 > branch.txt
-
-          BRANCH=$(cat branch.txt)
-          if [ -z "$BRANCH" ]; then
-            echo "No release-* branch found in ${{ github.repository }}"
-            exit 1
-          fi
-           echo "branch=$BRANCH" >> $GITHUB_OUTPUT
-           echo "Using release branch: $BRANCH"
   create-nightly-tag:
     if: github.repository == 'langflow-ai/langflow'
-    needs: [validate-inputs, resolve-release-branch]
+    needs: [validate-inputs]
     runs-on: ubuntu-latest
     defaults:
       run:
@@ -90,7 +68,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v6
         with:
-          ref: ${{ needs.resolve-release-branch.outputs.branch }}
+          ref: release-1.11.0
           persist-credentials: true
       - name: Confirm branch
         run: git branch --show-current
@@ -223,13 +201,15 @@ jobs:
   frontend-tests-linux:
     if: github.repository == 'langflow-ai/langflow' && !inputs.skip_frontend_tests
     name: Run Frontend Tests - Linux
-    needs: [resolve-release-branch, create-nightly-tag]
+    needs: [create-nightly-tag]
+    permissions:
+      contents: read
     uses: ./.github/workflows/typescript_test.yml
     with:
       tests_folder: "tests"
       release: true
       runs-on: ubuntu-latest
-      ref: ${{ needs.resolve-release-branch.outputs.branch }}
+      ref: release-1.11.0
     secrets:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       STORE_API_KEY: ${{ secrets.STORE_API_KEY }}
@@ -239,7 +219,9 @@ jobs:
   frontend-tests-windows:
     if: github.repository == 'langflow-ai/langflow' && !inputs.skip_frontend_tests
     name: Run Frontend Tests - Windows
-    needs: [resolve-release-branch, create-nightly-tag]
+    needs: [create-nightly-tag]
+    permissions:
+      contents: read
     # Windows tests are non-blocking - the release-nightly-build job only checks
     # frontend-tests-linux.result, allowing Windows tests to fail without blocking the build.
     # This gives us visibility into Windows-specific issues while we stabilize the tests.
@@ -248,7 +230,7 @@ jobs:
       tests_folder: "tests"
       release: true
       runs-on: windows-latest
-      ref: ${{ needs.resolve-release-branch.outputs.branch }}
+      ref: release-1.11.0
     secrets:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       STORE_API_KEY: ${{ secrets.STORE_API_KEY }}
@@ -258,12 +240,14 @@ jobs:
   backend-unit-tests:
     if: github.repository == 'langflow-ai/langflow' && !inputs.skip_backend_tests
     name: Run Backend Unit Tests
-    needs: [resolve-release-branch, create-nightly-tag]
+    needs: [create-nightly-tag]
+    permissions:
+      contents: read
     uses: ./.github/workflows/python_test.yml
     with:
       python-versions: '["3.10", "3.11", "3.12", "3.13", "3.14"]'
       runs-on: ${{ inputs['runs_on'] || github.event.inputs['runs_on'] || 'ubuntu-latest' }}
-      ref: ${{ needs.resolve-release-branch.outputs.branch }}
+      ref: release-1.11.0
     secrets:
       OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
       ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -282,10 +266,12 @@ jobs:
   stress-tests:
     if: github.repository == 'langflow-ai/langflow' && !inputs.skip_backend_tests
     name: Run Stress Tests
-    needs: [resolve-release-branch, create-nightly-tag]
+    needs: [create-nightly-tag]
+    permissions:
+      contents: read
     uses: ./.github/workflows/stress-tests.yml
     with:
-      ref: ${{ needs.resolve-release-branch.outputs.branch }}
+      ref: release-1.11.0
 
   release-nightly-build:
     if: github.repository == 'langflow-ai/langflow' && always() && needs.create-nightly-tag.result == 'success' && needs.frontend-tests-linux.result != 'failure' && needs.backend-unit-tests.result != 'failure'