back to actual tokens vs OIDC trusted publish if this doesn't work
I suppose

…ld be as well

those code paths are dependent in actions/setup-node

Temporarily admitting defeat on tokenless OIDC Trusted Publish

It was working, then stopped working approximately Nov 27. Why?
Unknown but I know a lot of reasons how it can not work now.

…-setup

as discovered before, that's how the .npmrc with auth config is written
and apparently without that things still don't work

Co-authored-by: Mike Hardy <github@mikehardy.net>

…an>` not `boolean` (#8798)

…ense now works (#8809)

Update both the native iOS SDK and the JS SDK to their recent 12.7.0 versions
In particular this allows the JS sdk to move it's dep (and our transitive dep) of
react-native-async-storage to the v2.x series for react-native new architecture
compatibility in react-native-firebase library consumers

use the separate actions/cache "restore" and "save" actions so we may
only save optional based on whether we are on main or not

actions/cache isolates branch caches from main to avoid branch cache
poison attacks on main runs

but branches may see main cache as those caches are considered trustworthy

branch caches do consume available LRU storage though, meaning branch caches
could evict main caches and in high traffic / large cache repositories like
this one that means caches LRU out frequently and cache hit rates are terrible
unless you cache on main only

very occasionally, there are errors in the `hashFiles` function used
to calculate cache keys, and this causes a build error that is a flake,
not a valid CI failure signal

so, continue the workflow even if the caching setup has errors, as
that is a recoverable problem and the workflow may still have a valid
success outcome

the downloaded/cached files are pure javascript and java, they may be
shared across operating systems safely

- modular API only we are no longer adding namespaced-functionality
- supported usage is to create with `vector` or `fromJSON`, serialize w/toArray()

Co-authored-by: Mike Hardy <github@mikehardy.net>

prevents LRU eviction thrashing of caches since we are near the limit
on useful caches for a single CI run