hsiegeln ca2a725953 ci(deploy): merge build+deploy into one job, manual trigger only ...

Two changes:

1. Merge build and deploy jobs into a single 'deploy' job. This
   eliminates the actions/upload-artifact@v3 round-trip, which was
   silently stripping dotfiles (.htaccess) from the artifact and
   leaving the deployed origin without security headers. The built
   dist/ (including .htaccess) now flows directly into rsync in the
   same workspace.

2. Remove the 'push: branches: [main]' trigger so deploy runs only
   on workflow_dispatch (manual click in Gitea Actions UI).
   Merges to main no longer auto-deploy — production promotion is
   an explicit user action.

The concurrency group at workflow level still prevents overlapping
deploys. All secrets remain unchanged.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-24 21:24:42 +02:00

..

ci.yml

ci: probe Chromium binary, fall back to Playwright-bundled

2026-04-24 18:50:28 +02:00

deploy.yml

ci(deploy): merge build+deploy into one job, manual trigger only

2026-04-24 21:24:42 +02:00