Merge pull request 'Promote to Production: CAR-1374 deploy-uat checkout-ref fix + CAR-1365 alembic version_num widen (uat→main)' (#301 ) from uat into main

chore(uat): CAR-1375 UAT regression no-op trigger
Co-authored-by: Deal Dottie <cs_dottie@users.noreply.git.farh.net>
2026-06-11 12:13:02 +00:00 · 2026-06-10 22:57:22 +00:00 · 2026-06-10 22:53:10 +00:00 · 2026-06-08 13:10:54 +00:00 · 2026-06-08 12:41:45 +00:00 · 2026-06-07 15:50:29 +00:00
3 changed files with 6 additions and 2 deletions
@@ -484,7 +484,7 @@ jobs:
        with:
          repository: cartsnitch/infra
          token: ${{ secrets.CI_GITEA_TOKEN }}
-          ref: main
+          ref: ${{ github.ref == 'refs/heads/main' && 'main' || (github.ref == 'refs/heads/uat' && 'uat' || 'dev') }}
          path: infra

      - name: Install kubectl
@@ -630,7 +630,7 @@ jobs:
        with:
          repository: cartsnitch/infra
          token: ${{ secrets.CI_GITEA_TOKEN }}
-          ref: main
+          ref: ${{ github.ref == 'refs/heads/main' && 'main' || (github.ref == 'refs/heads/uat' && 'uat' || 'dev') }}
          path: infra

      - name: Install kubectl
@@ -0,0 +1,2 @@
+# CAR-1374 verification no-op
+2026-06-10T22:57:17Z CAR-1375 uat regression trigger
@@ -313,3 +313,5 @@ Secrets are managed via **Bitnami Sealed Secrets**. No plain Kubernetes secrets
 ## License

 MIT &copy; 2025 CartSnitch
+
+<!-- CAR-1371 verification: trigger deploy-dev to confirm --arg base dev -->
Author	SHA1	Message	Date
Coupon Carl	9af2e64080	Merge pull request 'Promote to Production: CAR-1374 deploy-uat checkout-ref fix + CAR-1365 alembic version_num widen (uat→main)' (#301 ) from uat into main CI / test (push) Successful in 14s Details CI / lint (push) Successful in 16s Details CI / e2e (push) Failing after 2s Details CI / audit (push) Successful in 13s Details CI / lighthouse (push) Successful in 1m0s Details CI / build-and-push-api (push) Successful in 3m47s Details CI / build-and-push-receiptwitness (push) Successful in 4m54s Details CI / build-and-push (push) Has been skipped Details CI / build-and-push-auth (push) Successful in 1m20s Details CI / deploy-dev (push) Failing after 4s Details CI / deploy-uat (push) Failing after 3s Details	2026-06-11 12:13:02 +00:00
Deal Dottie	fbc8476e0c	chore(uat): CAR-1375 UAT regression no-op trigger CI / audit (push) Successful in 14s Details CI / test (push) Successful in 17s Details CI / e2e (push) Successful in 43s Details CI / lighthouse (push) Successful in 54s Details CI / lint (push) Successful in 16m18s Details CI / build-and-push (push) Successful in 1m0s Details CI / build-and-push-api (push) Successful in 14m14s Details CI / build-and-push-receiptwitness (push) Successful in 15m17s Details CI / build-and-push-auth (push) Successful in 37s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Successful in 12s Details CI / lint (pull_request) Successful in 14s Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / test (pull_request) Successful in 13s Details CI / audit (pull_request) Successful in 15s Details CI / e2e (pull_request) Successful in 46s Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / build-and-push (pull_request) Has been skipped Details CI / deploy-dev (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details CI / lighthouse (pull_request) Successful in 1m2s Details Co-authored-by: Deal Dottie <cs_dottie@users.noreply.git.farh.net>	2026-06-10 22:57:22 +00:00
Savannah Savings	5c38a6cc89	CAR-1374 + CAR-1365: deploy-dev/uat checkout ref match base + alembic version_num widen — dev → uat CI / lint (push) Successful in 13s Details CI / audit (push) Successful in 11s Details CI / e2e (push) Successful in 45s Details CI / lighthouse (push) Successful in 58s Details CI / test (push) Successful in 13s Details CI / build-and-push-api (push) Successful in 2m45s Details CI / deploy-dev (push) Has been cancelled Details CI / deploy-uat (push) Has been cancelled Details CI / build-and-push (push) Has been cancelled Details CI / build-and-push-receiptwitness (push) Has been cancelled Details CI / build-and-push-auth (push) Has been cancelled Details Co-authored-by: Savannah Savings <31+cs_savannah@noreply.git.farh.net> Co-committed-by: Savannah Savings <31+cs_savannah@noreply.git.farh.net>	2026-06-10 22:53:10 +00:00
Coupon Carl	90031d65a3	Merge pull request 'Release: uat→main (UAT PASS Deal Dottie, Security PASS Stockboy Steve)' (#296 ) from uat into main CI / lint (push) Successful in 12s Details CI / test (push) Successful in 13s Details CI / audit (push) Successful in 11s Details CI / e2e (push) Successful in 43s Details CI / lighthouse (push) Failing after 1m17s Details CI / build-and-push-api (push) Successful in 1m43s Details CI / build-and-push-receiptwitness (push) Successful in 2m23s Details CI / build-and-push-auth (push) Successful in 42s Details CI / build-and-push (push) Successful in 41s Details CI / deploy-dev (push) Successful in 7s Details CI / deploy-uat (push) Successful in 8s Details Merge uat→main: UAT PASS (Deal Dottie, uat HEAD `9a811f9e`) + Security PASS (Stockboy Steve, CAR-1327)	2026-06-08 13:10:54 +00:00
Savannah Savings	9a811f9e93	Merge pull request 'promote: deploy jobs compute sha tag from $GITHUB_SHA (CAR-1319, CAR-1316)' (#295 ) from dev into uat CI / lint (push) Successful in 12s Details CI / test (push) Successful in 10s Details CI / audit (push) Successful in 9s Details CI / e2e (push) Successful in 40s Details CI / lighthouse (push) Failing after 1m18s Details CI / build-and-push-receiptwitness (push) Successful in 2m19s Details CI / build-and-push-api (push) Successful in 1m27s Details CI / build-and-push-auth (push) Successful in 1m1s Details CI / build-and-push (push) Successful in 1m1s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Successful in 6s Details CI / deploy-dev (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details CI / test (pull_request) Successful in 13s Details CI / audit (pull_request) Successful in 12s Details CI / e2e (pull_request) Successful in 44s Details CI / build-and-push (pull_request) Has been skipped Details CI / lint (pull_request) Successful in 13s Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 1m41s Details	2026-06-08 12:41:45 +00:00
Coupon Carl	309a837c77	Merge pull request 'Promote to Production: CAR-1318 frontend image-bump alignment + CAR-1216/CAR-1279 Phase 2' (#294 ) from uat into main CI / lint (push) Successful in 14s Details CI / test (push) Successful in 13s Details CI / audit (push) Successful in 13s Details CI / e2e (push) Successful in 48s Details CI / lighthouse (push) Failing after 1m17s Details CI / build-and-push-api (push) Successful in 2m31s Details CI / build-and-push-receiptwitness (push) Successful in 3m16s Details CI / build-and-push-auth (push) Successful in 1m15s Details CI / build-and-push (push) Successful in 2m12s Details CI / deploy-uat (push) Successful in 9s Details CI / deploy-dev (push) Successful in 10s Details Promote to Production: CAR-1318 frontend image-bump alignment + CAR-1216/CAR-1279 Phase 2 UAT PASS (Deal Dottie) + Security PASS (Stockboy Steve) on CAR-1320. Merged by CEO (Coupon Carl) as production gate. cc @cpfarhood	2026-06-07 15:50:29 +00:00
Savannah Savings	a0f3eff2a4	Merge pull request 'promote(uat): frontend image-bump alignment (CAR-1318)' (#293 ) from dev into uat CI / build-and-push (push) Successful in 29s Details CI / lint (push) Successful in 18s Details CI / test (push) Successful in 17s Details CI / audit (push) Successful in 18s Details CI / build-and-push-receiptwitness (push) Successful in 2m1s Details CI / e2e (push) Successful in 58s Details CI / lighthouse (push) Failing after 1m20s Details CI / build-and-push-auth (push) Successful in 1m35s Details CI / build-and-push-api (push) Failing after 2m21s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Successful in 6s Details CI / lint (pull_request) Successful in 19s Details CI / test (pull_request) Successful in 52s Details CI / audit (pull_request) Successful in 30s Details CI / e2e (pull_request) Successful in 43s Details CI / deploy-dev (pull_request) Has been skipped Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 1m21s Details CI / build-and-push (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details	2026-06-07 11:52:13 +00:00
Savannah Savings	292f428bc7	Merge pull request 'promote: CAR-1216 deploy never hard-fail on infra-PR merge (dev → uat)' (#290 ) from dev into uat CI / build-and-push-api (push) Successful in 1m2s Details CI / build-and-push-auth (push) Successful in 27s Details CI / build-and-push-receiptwitness (push) Successful in 2m30s Details CI / deploy-dev (push) Has been skipped Details CI / audit (push) Successful in 9s Details CI / lint (push) Successful in 14s Details CI / test (push) Successful in 14s Details CI / e2e (push) Successful in 40s Details CI / lighthouse (push) Failing after 1m16s Details CI / build-and-push (push) Successful in 55s Details CI / deploy-uat (push) Successful in 6s Details	2026-06-07 10:26:22 +00:00
Savannah Savings	a3b6ba488f	promote(uat): pin auth base image to node 22.22.2 digest (CAR-1287 / CAR-1279 Phase 2) (#288 ) CI / lint (push) Successful in 13s Details CI / test (push) Successful in 12s Details CI / audit (push) Successful in 12s Details CI / e2e (push) Successful in 41s Details CI / lighthouse (push) Failing after 1m12s Details CI / build-and-push-api (push) Successful in 1m6s Details CI / build-and-push-receiptwitness (push) Successful in 1m55s Details CI / build-and-push (push) Successful in 2m1s Details CI / build-and-push-auth (push) Successful in 2m13s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 8s Details	2026-06-06 06:23:12 +00:00
Coupon Carl	c27f6a1e3c	Merge pull request 'Promote to Production: CAR-1276 Phase 1 — auth /health 503 error-log fix' (#286 ) from uat into main CI / test (push) Successful in 10s Details CI / lint (push) Successful in 14s Details CI / audit (push) Successful in 13s Details CI / e2e (push) Successful in 40s Details CI / lighthouse (push) Failing after 1m20s Details CI / build-and-push-api (push) Successful in 1m4s Details CI / build-and-push-receiptwitness (push) Successful in 1m52s Details CI / build-and-push-auth (push) Successful in 1m14s Details CI / build-and-push (push) Successful in 1m14s Details CI / deploy-uat (push) Failing after 7s Details CI / deploy-dev (push) Failing after 7s Details Promote to Production: CAR-1276 Phase 1 — auth /health 503 error-log fix UAT PASS (Deal Dottie) + Security PASS (Stockboy Steve) on CAR-1282. Merged by CEO (Coupon Carl) as production gate. cc @cpfarhood	2026-06-06 00:25:10 +00:00
Savannah Savings	f283d5aa02	promote: auth /health 503 error-log fix (CAR-1276 Phase 1) dev→uat (#285 ) CI / lint (push) Successful in 14s Details CI / e2e (push) Successful in 48s Details CI / test (push) Successful in 14s Details CI / audit (push) Successful in 15s Details CI / lighthouse (push) Failing after 1m19s Details CI / build-and-push-api (push) Successful in 2m31s Details CI / build-and-push-receiptwitness (push) Successful in 3m14s Details CI / build-and-push-auth (push) Successful in 2m2s Details CI / build-and-push (push) Failing after 2m13s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 7s Details CI / audit (pull_request) Successful in 10s Details CI / lint (pull_request) Successful in 11s Details CI / test (pull_request) Successful in 12s Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / e2e (pull_request) Successful in 40s Details CI / lighthouse (pull_request) Failing after 1m22s Details CI / build-and-push (pull_request) Has been skipped Details CI / deploy-dev (pull_request) Has been skipped Details CI / deploy-uat (pull_request) Has been skipped Details	2026-06-06 00:02:56 +00:00
Coupon Carl	a0088acb1a	Merge pull request 'Promote to Production: CAR-1215 react-router audit-gate fix' (#282 ) from uat into main CI / lint (push) Successful in 11s Details CI / audit (push) Successful in 11s Details CI / test (push) Successful in 13s Details CI / e2e (push) Successful in 42s Details CI / build-and-push-receiptwitness (push) Failing after 55s Details CI / build-and-push-auth (push) Failing after 21s Details CI / lighthouse (push) Failing after 1m14s Details CI / build-and-push (push) Successful in 30s Details CI / build-and-push-api (push) Successful in 1m19s Details CI / deploy-dev (push) Failing after 12s Details CI / deploy-uat (push) Failing after 13s Details Promote to Production: CAR-1215 react-router audit-gate fix UAT PASS: Deal Dottie — all 5 regression steps green Security PASS: Stockboy Steve — lockfile-only, 3 high advisories cleared ref: CAR-1215, CAR-1217	2026-06-04 01:53:08 +00:00
Savannah Savings	eff1098289	Promote to UAT: CAR-1215 react-router audit-gate fix (#280 ) CI / audit (push) Successful in 10s Details CI / lint (push) Successful in 11s Details CI / test (push) Successful in 14s Details CI / e2e (push) Successful in 58s Details CI / lighthouse (push) Failing after 1m25s Details CI / build-and-push-api (push) Successful in 1m26s Details CI / build-and-push-auth (push) Successful in 43s Details CI / build-and-push-receiptwitness (push) Successful in 1m59s Details CI / build-and-push (push) Successful in 1m6s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 7s Details CI / build-and-push-api (pull_request) Has been skipped Details CI / build-and-push-auth (pull_request) Has been skipped Details CI / build-and-push (pull_request) Has been skipped Details CI / test (pull_request) Successful in 12s Details CI / build-and-push-receiptwitness (pull_request) Has been skipped Details CI / e2e (pull_request) Successful in 45s Details CI / audit (pull_request) Successful in 10s Details CI / lint (pull_request) Successful in 14s Details CI / deploy-uat (pull_request) Has been skipped Details CI / deploy-dev (pull_request) Has been skipped Details CI / lighthouse (pull_request) Failing after 1m17s Details Promotes CAR-1215 to uat. audit gate green; lighthouse pre-existing red (tracked separately).	2026-06-03 22:14:58 +00:00
Savannah Savings	009aa92777	Merge pull request 'Promote to UAT: deploy-dev/deploy-uat approval-gate success (CAR-1212)' (#277 ) from dev into uat CI / lint (push) Successful in 13s Details CI / test (push) Successful in 13s Details CI / audit (push) Failing after 11s Details CI / e2e (push) Successful in 50s Details CI / lighthouse (push) Failing after 1m19s Details CI / build-and-push-auth (push) Successful in 31s Details CI / build-and-push-api (push) Successful in 1m3s Details CI / build-and-push-receiptwitness (push) Successful in 2m29s Details CI / build-and-push (push) Successful in 1m40s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 6s Details	2026-06-03 21:49:34 +00:00
Savannah Savings	b3a452be50	Merge pull request 'promote(dev→uat): CI deploy PR-based image bump (CAR-1195, CAR-1194)' (#275 ) from dev into uat CI / lint (push) Successful in 11s Details CI / audit (push) Successful in 11s Details CI / test (push) Successful in 12s Details CI / e2e (push) Successful in 45s Details CI / build-and-push-api (push) Successful in 1m7s Details CI / build-and-push-auth (push) Successful in 36s Details CI / lighthouse (push) Failing after 1m20s Details CI / build-and-push (push) Successful in 33s Details CI / build-and-push-receiptwitness (push) Successful in 2m10s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 7s Details	2026-06-03 21:13:44 +00:00
Coupon Carl	80786b9f1f	fix(ci): use CI_GITEA_TOKEN for cross-repo checkout CI / audit (push) Failing after 16s Details CI / e2e (push) Successful in 52s Details CI / lint (push) Successful in 1m14s Details CI / test (push) Successful in 1m16s Details CI / build-and-push (push) Failing after 14s Details CI / build-and-push-api (push) Failing after 17s Details CI / build-and-push-auth (push) Failing after 12s Details CI / lighthouse (push) Failing after 1m5s Details CI / build-and-push-receiptwitness (push) Failing after 3m23s Details CI / deploy-dev (push) Has been skipped Details CI / deploy-uat (push) Failing after 10s Details Update deploy-dev and deploy-uat jobs to use CI_GITEA_TOKEN for checking out the cartsnitch/infra repository instead of REGISTRY_TOKEN. CI_GITEA_TOKEN is the org-level Actions secret configured for cross-repo access, while REGISTRY_TOKEN continues to be used for Docker registry login. This resolves CAR-986 by enabling CI to commit image tag updates to the private infra repository. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-05-25 22:47:40 +00:00