Skip to content

chore(pages): publish the canonical www bundle - #60

Merged
hyperpolymath merged 1 commit into
mainfrom
chore/publish-canonical-bundle
Sep 19, 2026
Merged

hyperpolymath merged 1 commit into
mainfrom
chore/publish-canonical-bundle

Conversation

@hyperpolymath

Copy link
Copy Markdown
Owner

The repository carries www/.well-known/ and www/public/, but the publisher never copied them into the Pages artifact, so /.well-known/security.txt 404s.

Two changes, and they have to travel together:

  1. the overlay — between the build and the upload, additive only: www/public/ with no-clobber (a page the SSG produced always wins) and www/.well-known/ unconditionally.
  2. include-hidden-files: true — actions/upload-pages-artifact defaults to stripping dot-entries (its tar runs --exclude=.[^/]*), which deletes .well-known/ from the artifact after the overlay places it. Every step still reports success.

Without (2) the overlay is deleted; without (1) there is nothing to delete. Verified by checking the live URL after the deploy, not by the run's status.

The repository carries www/.well-known/ but nothing was copying it into
the Pages artifact, so /.well-known/security.txt 404s — RFC 9116
discovery, and the RSR check on www/.well-known/security.txt.

  * overlay the bundle between the build and the upload: www/public/
    with no-clobber (a page the SSG produced always wins) and
    www/.well-known/ unconditionally
  * include-hidden-files: true on the upload — without it
    actions/upload-pages-artifact strips .well-known/ from the artifact
    after the overlay places it, every step reports success, and the
    file still 404s

Additive only: nothing the SSG produces is replaced.

Signed-off-by: Jonathan D.A. Jewell <6759885+hyperpolymath@users.noreply.github.com>
@hyperpolymath
hyperpolymath merged commit 1855f35 into main Sep 19, 2026
21 of 24 checks passed
@hyperpolymath
hyperpolymath deleted the chore/publish-canonical-bundle branch September 19, 2026 20:57
@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Review Change StackReview Change Stack

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 1b40c463-ebb4-495f-9293-50c9f4146fcc

📥 Commits

Reviewing files that changed from the base of the PR and between 19df428 and 5592cce.

📒 Files selected for processing (2)
  • .github/workflows/casket-pages.yml
  • www/public/index.html
 __________________________________________________________________
< Ah yes, the classic pattern: 'parse first, ask questions never'. >
 ------------------------------------------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant