Skip to content

Pin docs-actions deploy to the reviewed Node 24 Pages action - #45

Merged
novelKR merged 1 commit into
mainfrom
docs/pages-deploy-pin
Sep 17, 2026
Merged

novelKR merged 1 commit into
mainfrom
docs/pages-deploy-pin

Conversation

@novelKR

@novelKR novelKR commented Sep 17, 2026

Copy link
Copy Markdown
Owner

Issue

Closes #

Summary

CodeSpace adopts the reviewed docs-actions merge that moves Pages deploy from actions/deploy-pages v4 (Node 20) to v5.0.1 (Node 24). The caller still builds and verifies; only the pinned reusable deploys. pages: write and id-token: write stay on the deploy job. secrets: inherit is not used.

Pin: e110843b00303c1418cf8950ba8c5789acc31cbe (merge of novelKR/docs-actions#2). Workflow sha256 74419dfb5d506177e3d04a97175148b6652032188ada02d0245873504d235f9e.

Contract changes

None. No MCP tool schemas, error codes, or status values change.

Tests

Reviewed docs-actions#2: reusable workflow and contracts/pages-deploy-v1.json change only the deploy-pages SHA. Central contracts and docs-build checks passed. This PR only updates .github/workflows/docs.yml uses: and .github/docs-pages-deploy.lock.json.

Live site after enabling Pages (GitHub Actions source) and rerunning the failed deploy: https://novelkr.github.io/CodeSpace/ returned HTTP 200.

Security scenarios

  • Reusable still deploys the same-run verified artifact only.
  • Publication branch remains main. The github-pages environment already allows only main.
  • This is not the gateway docs-actions pin; it is the merge commit of the reviewed Node 24 bump.

Out of scope

  • Recopying the MIT docs-site toolchain (docs-site/PROVENANCE.json stays on the original copy commit)
  • Other docs-actions Dependabot PRs (checkout, setup-python, upload-pages-artifact)

Made with Cursor

The reusable workflow now calls deploy-pages v5.0.1. That removes the
Node 20 runner warning without changing the caller-owned Pages contract.

Co-authored-by: Cursor <cursoragent@cursor.com>
@novelKR
novelKR merged commit 7e9b3bd into main Sep 17, 2026
4 checks passed
@novelKR
novelKR deleted the docs/pages-deploy-pin branch September 17, 2026 16:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant