chore(ci): replace Ruby Pages build with Bun/Node publisher

.github/dependabot.yml

@@ -2,6 +2,10 @@
 version: 2
 updates:
   - package-ecosystem: "github-actions"
+    # Ruby is banned for this estate: bump the action, or delete it? Delete.
+    ignore:
+      - dependency-name: "ruby/setup-ruby"
+      - dependency-name: "actions/jekyll-build-pages"
     directory: "/"
     schedule:
       interval: "weekly"

.github/workflows/actions.lock

@@ -27,12 +27,6 @@ workflows:
         - 'trufflesecurity/trufflehog@v3.97.4'
     '.github/workflows/governance.yml': []
     '.github/workflows/hypatia-scan.yml': []
-    '.github/workflows/jekyll-gh-pages.yml':
-        - 'actions/checkout@v7.0.1'
-        - 'actions/configure-pages@v6.0.0'
-        - 'actions/deploy-pages@v5.0.1'
-        - 'actions/jekyll-build-pages@v1.0.13'
-        - 'actions/upload-pages-artifact@v5.0.0'
     '.github/workflows/label-triage.yml': []
     '.github/workflows/labels.yml': []
     '.github/workflows/mirror.yml': []
@@ -98,11 +92,6 @@ dependencies:
         commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
         owner_id: 44036562
         repo_id: 192626254
-    'actions/jekyll-build-pages@v1.0.13':
-        ref: 'v1.0.13'
-        commit: 'sha1-44a6e6beabd48582f863aeeb6cb2151cc1716697'
-        owner_id: 44036562
-        repo_id: 438323626
     'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
         ref: 'v7.0.0'
         commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'

.github/workflows/pages.yml

@@ -1,55 +1,60 @@
-# This workflow is managed by gh actions-lock.
 # SPDX-License-Identifier: MPL-2.0
-# This workflow is managed by gh actions-lock.
-# This workflow is managed by gh actions-lock.
-name: GitHub Pages (Ddraig SSG)
+#
+# Generated by scripts/estate-ruby-exit.mjs — Ruby-free Pages deploy.
+# Replaces the Jekyll workflow (ruby/setup-ruby or actions/jekyll-build-pages):
+# Ruby is banned for this estate, see hyperpolymath/verisimdb-data ADR-0002.
+name: Deploy Pages site
+
 on:
   push:
-    branches: [main, master]
+    branches: ["main", "master"]
   workflow_dispatch:
+
 permissions:
   contents: read
   pages: write
   id-token: write
+
 concurrency:
   group: "pages"
   cancel-in-progress: false
+
 jobs:
   build:
     runs-on: ubuntu-latest
-    timeout-minutes: 15
-    container:
-      image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff
     steps:
-      - name: Checkout Site
+      - name: Checkout
         uses: actions/checkout@v7.0.1
-      - name: Checkout Ddraig SSG
-        uses: actions/checkout@v7.0.1
-        with:
-          repository: hyperpolymath/ddraig-ssg
-          path: .ddraig-ssg
-      - name: Compile Ddraig
-        working-directory: .ddraig-ssg
-        run: idris2 Ddraig.idr -o ddraig
-      - name: Build site
+      - name: Setup Pages
+        id: pages
+        uses: actions/configure-pages@v6.0.0
+      - name: Build site and prove reproducibility
+        env:
+          BASE_PATH: ${{ steps.pages.outputs.base_path }}
         run: |
-          mkdir -p src
-          if [ ! -f src/index.md ] && [ -f README.md ]; then
-            cp README.md src/index.md
-          elif [ ! -f src/index.md ]; then
-            echo "# ${GITHUB_REPOSITORY}" > src/index.md
+          set -euo pipefail
+          if command -v bun >/dev/null 2>&1; then runtime="bun run"; else runtime="node"; fi
+          echo "build runtime: $runtime"
+          $runtime scripts/build-site.mjs --config site.json --baseurl "$BASE_PATH" | tee /tmp/build-1.log
+          rm -rf _site
+          $runtime scripts/build-site.mjs --config site.json --baseurl "$BASE_PATH" | tee /tmp/build-2.log
+          first=$(sed -n 's/.*\(sha256=[0-9a-f]\{64\}\).*/\1/p' /tmp/build-1.log | head -1)
+          second=$(sed -n 's/.*\(sha256=[0-9a-f]\{64\}\).*/\1/p' /tmp/build-2.log | head -1)
+          if [ -z "$first" ] || [ "$first" != "$second" ]; then
+            echo "::error::site build is not reproducible ($first vs $second)"
+            exit 1
           fi
-          ./.ddraig-ssg/build/exec/ddraig build src _site https://hyperpolymath.github.io/${GITHUB_REPOSITORY#*/}
       - name: Upload artifact
         uses: actions/upload-pages-artifact@v5.0.0
         with:
-          path: '_site'
+          path: _site
+          include-hidden-files: true
+
   deploy:
     environment:
       name: github-pages
       url: ${{ steps.deployment.outputs.page_url }}
     runs-on: ubuntu-latest
-    timeout-minutes: 15
     needs: build
     steps:
       - name: Deploy to GitHub Pages

.gitignore

@@ -50,3 +50,6 @@ dist/
 lake-packages/
 lakefile.olean
 lake-manifest.json
+
+# Pages output
+/_site/