From 31322cec14748d8883fd6ac56d75f43e36ffae9c Mon Sep 17 00:00:00 2001
From: serhhan <serhanelmali@gmail.com>
Date: Wed, 2 Sep 2026 14:36:01 -0300
Subject: [PATCH 1/2] chore: ignore local secret files

---
 .gitignore | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/.gitignore b/.gitignore
index 3acec70..dbb013c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,11 @@ dist/
 coverage/
 .DS_Store
 *.local
+.env
+.env.*
+!.env.example
+.dev.vars
+.dev.vars.*
+!.dev.vars.example
+*.pem
+*.key

From 49e54ad45c825facf94e92814392d942b3beb75a Mon Sep 17 00:00:00 2001
From: serhhan <serhanelmali@gmail.com>
Date: Wed, 2 Sep 2026 14:36:06 -0300
Subject: [PATCH 2/2] ci: pin production deployment toolchain

---
 .github/workflows/deploy-site.yml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/deploy-site.yml b/.github/workflows/deploy-site.yml
index 9c96f96..564abac 100644
--- a/.github/workflows/deploy-site.yml
+++ b/.github/workflows/deploy-site.yml
@@ -17,13 +17,13 @@ jobs:
   deploy:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0
         with:
           version: 10.18.3
 
-      - uses: actions/setup-node@v6
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6.5.0
         with:
           node-version-file: site/.node-version
           cache: pnpm
@@ -42,12 +42,12 @@ jobs:
         run: pnpm build
 
       - name: Deploy to Cloudflare Pages
-        uses: cloudflare/wrangler-action@v4
+        uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
           gitHubToken: ${{ secrets.GITHUB_TOKEN }}
           packageManager: pnpm
           workingDirectory: site
-          wranglerVersion: "4"
+          wranglerVersion: "4.128.0"
           command: pages deploy dist --project-name=airnodehub-community-preview --branch=main