Skip to content

chore(pages): publish the canonical www bundle - #65

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/publish-canonical-bundle
Sep 19, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
chore/publish-canonical-bundle

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

The repository carries www/.well-known/ and www/public/, but the publisher never copied them into the Pages artifact, so /.well-known/security.txt 404s.

Two changes, and they have to travel together:

  1. the overlay — between the build and the upload, additive only: www/public/ with no-clobber (a page the SSG produced always wins) and www/.well-known/ unconditionally.
  2. include-hidden-files: trueactions/upload-pages-artifact defaults to stripping dot-entries (its tar runs --exclude=.[^/]*), which deletes .well-known/ from the artifact after the overlay places it. Every step still reports success.

Without (2) the overlay is deleted; without (1) there is nothing to delete. Verified by checking the live URL after the deploy, not by the run's status.

The repository carries www/.well-known/ but nothing was copying it into
the Pages artifact, so /.well-known/security.txt 404s — RFC 9116
discovery, and the RSR check on www/.well-known/security.txt.

  * overlay the bundle between the build and the upload: www/public/
    with no-clobber (a page the SSG produced always wins) and
    www/.well-known/ unconditionally
  * include-hidden-files: true on the upload — without it
    actions/upload-pages-artifact strips .well-known/ from the artifact
    after the overlay places it, every step reports success, and the
    file still 404s

Additive only: nothing the SSG produces is replaced.

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
@hyperpolymath
hyperpolymath merged commit badb5dd into main Sep 19, 2026
20 of 24 checks passed
@hyperpolymath
hyperpolymath deleted the chore/publish-canonical-bundle branch September 19, 2026 20:58
@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 162bfc68-8c7c-4f28-909f-c6df05fdb642

📥 Commits

Reviewing files that changed from the base of the PR and between dfa8fd3 and 4b4caea.

📒 Files selected for processing (2)
  • .github/workflows/casket-pages.yml
  • www/public/index.html
 __________________________________________________________________________________________________________
< Minimize coupling between modules. Avoid coupling by writing 'shy' code and applying the Law of Demeter. >
 ----------------------------------------------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant