Oliver Kieselbach fd2b5c2da2 fix(ci): drop invalid SWA input, gate deploy on token via env guard ...

Azure/static-web-apps-deploy@v1 has no `skip_deploy_on_missing_secrets`
input (confirmed against its action.yml), so passing it did nothing but
emit an "Unexpected input(s)" warning — the intended "skip green on
Dependabot PRs" behaviour was never actually in effect.

Replace it with the documented mechanism: surface the deploy token as a
job-level env var and gate the deploy/close step with `if: env.DEPLOY_TOKEN
!= ''` (secrets cannot be referenced directly in an `if:`). On Dependabot
PRs the token is absent, so the step skips and the job stays green; real
deploys on main and internal PRs still run. Applied to both jobs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-24 16:38:58 +02:00

..

codeql

fix(security): resolve CodeQL log-forging findings and suppress by-design queries

2026-07-22 01:38:47 +02:00

scripts

feat(versioning): one version contract for agent, backend and MCP

2026-07-22 17:41:03 +02:00

workflows

fix(ci): drop invalid SWA input, gate deploy on token via env guard

2026-07-24 16:38:58 +02:00

dependabot.yml

chore(dependabot): stop auto-PRing npm major bumps

2026-07-22 01:03:22 +02:00

FUNDING.yml

Update Buy Me a Coffee username in FUNDING.yml

2026-02-24 11:55:17 +01:00