From d9fa11a55cbb8fdb90bb6f6f2ace9f5e4e0d0042 Mon Sep 17 00:00:00 2001 From: Justin Stayton Date: Wed, 14 Oct 2026 05:51:09 -0400 Subject: [PATCH] Update deploy workflow Build on the latest Node.js LTS, since v20 is end-of-life, and update each action to its latest major version. Major version tags rather than commit SHAs, so sites created from this template keep getting patches without maintaining the workflow. Also limit the token to read-only access, don't persist it after checkout, and install with `npm ci`. `include-hidden-files` keeps dotfiles like `public/.well-known/` in the deploy, which `upload-pages-artifact` excludes by default since v4. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/deploy.yml | 18 ++++++++++++------ 1 file changed, 12 insertions(+), 6 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 0c51d13..430e240 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -6,6 +6,9 @@ on: - main workflow_dispatch: +permissions: + contents: read + concurrency: group: deploy cancel-in-progress: false @@ -14,20 +17,23 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 + with: + persist-credentials: false - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: - node-version: 20.x + node-version: lts/* cache: npm - name: Install npm dependencies - run: npm install + run: npm ci - name: Build with Suri run: npm run build - name: Upload GitHub Pages artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v5 with: path: build/ + include-hidden-files: true deploy: needs: build permissions: @@ -40,4 +46,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5