ci: label-gated Cloudflare previews and a visible site version #18

Merged

circleci-bot merged 10 commits from ci/previews-and-version into main 2026-11-15 13:16:33 +00:00

Conversation 2 Commits 10 Files changed 10 +172 -41

drcrow commented 2026-11-14 20:08:36 +00:00

Member

• Copy link
• Copy Markdown

Why

Cloudflare previews on CircleCI, like Forgejo's today, but only when asked for, so drive-by PRs don't spend Cloudflare usage. And a visible site version, to see what's live.

What changed

• ci: same-repo PRs with the preview label get a Cloudflare preview version (wrangler versions upload --preview-alias pr-<n>) and one comment: the PR preview link and "this commit on its own" link, as preview.yml posts. The job checks the label first and stops before any Cloudflare call without it. The label takes effect on the next push, because CircleCI gets push events, not label events. PR content enters only as public/ via git archive, wrangler config and lockfiles come from main, and installs use --ignore-scripts. Not part of gate. Logs a site-preview deploy marker.
• ci: the artifact preview is opt-in (artifact_preview pipeline parameter, API run), so a PR without the label runs only lint, test and gate. Fork PRs keep the artifact preview until cutover; forks never get Cloudflare tokens.
• feat: a "Version: …" footer and /version.json (version, commit, build time), stamped at build time as YYYY.MM.DD.<run>+<sha7>, in CircleCI's deploy and previews and in Forgejo's deploy.yml and preview.yml, so the live site shows its version now. The repo copy says "dev". Deploy markers use the same version string.
• docs: README and docs/ci.md.

Testing

circleci config validate, orb conftest policies (16 pass), routing checked for every event, mise run lint (actionlint) and mise run test. Live test on this PR: it carries the preview label, so the run should post the Cloudflare preview comment.

## Why Cloudflare previews on CircleCI, like Forgejo's today, but only when asked for, so drive-by PRs don't spend Cloudflare usage. And a visible site version, to see what's live. ## What changed - ci: same-repo PRs with the `preview` label get a Cloudflare preview version (`wrangler versions upload --preview-alias pr-<n>`) and one comment: the PR preview link and "this commit on its own" link, as `preview.yml` posts. The job checks the label first and stops before any Cloudflare call without it. The label takes effect on the next push, because CircleCI gets push events, not label events. PR content enters only as `public/` via `git archive`, wrangler config and lockfiles come from main, and installs use `--ignore-scripts`. Not part of `gate`. Logs a `site-preview` deploy marker. - ci: the artifact preview is opt-in (`artifact_preview` pipeline parameter, API run), so a PR without the label runs only lint, test and `gate`. Fork PRs keep the artifact preview until cutover; forks never get Cloudflare tokens. - feat: a "Version: …" footer and `/version.json` (version, commit, build time), stamped at build time as `YYYY.MM.DD.<run>+<sha7>`, in CircleCI's deploy and previews and in Forgejo's `deploy.yml` and `preview.yml`, so the live site shows its version now. The repo copy says "dev". Deploy markers use the same version string. - docs: README and `docs/ci.md`. ## Testing `circleci config validate`, orb conftest policies (16 pass), routing checked for every event, `mise run lint` (actionlint) and `mise run test`. Live test on this PR: it carries the `preview` label, so the run should post the Cloudflare preview comment.

drcrow added 6 commits 2026-11-14 20:08:36 +00:00

feat: show the build version in the page footer 575e6de6cd

ci: stamp the version in Forgejo's deploy and preview 821d66b13b

ci: stamp the version in CircleCI builds and deploy markers 6231e995aa

ci: label-gated Cloudflare preview on same-repo PRs ba3ef34543

ci: make the artifact preview opt-in via artifact_preview e7eaa7d0a5

docs: describe the previews and the site version 13dba52e27

drcrow added the

preview

label 2026-11-14 20:08:37 +00:00

drcrow added 1 commit 2026-11-14 20:08:40 +00:00

chore: re-run CI 7d336c439f

HumanBean removed the

preview

label 2026-11-14 20:14:21 +00:00

HumanBean commented 2026-11-14 20:14:36 +00:00

Owner

• Copy link
• Copy Markdown

Preview: https://pr-18-magicbean-site.hckr-5e0.workers.dev

This commit (e0db259383) on its own: https://5eea07b9-magicbean-site.hckr-5e0.workers.dev

<!-- preview-deploy --> **Preview:** https://pr-18-magicbean-site.hckr-5e0.workers.dev This commit (e0db259383b1) on its own: https://5eea07b9-magicbean-site.hckr-5e0.workers.dev

drcrow added 1 commit 2026-11-14 20:22:30 +00:00

fix(ci): pipe JSON into jq instead of a here-string (<< breaks the config) 27bd8eab7b

drcrow added 1 commit 2026-11-14 20:27:35 +00:00

ci: gate Cloudflare previews on a sticky ci: preview label (Forgejo's preview label is one-shot) f5f6e0c02f

drcrow added the

ci: preview

label 2026-11-14 20:27:45 +00:00

drcrow added 1 commit 2026-11-14 20:28:18 +00:00

chore: re-run CI c651c7b08a

BeanCI commented 2026-11-14 20:30:15 +00:00

Member

• Copy link
• Copy Markdown

Preview: https://pr-18-magicbean-site.hckr-5e0.workers.dev

This commit (e0db259383) on its own: https://529c58a9-magicbean-site.hckr-5e0.workers.dev

<!-- circleci-cloudflare-preview --> **Preview:** https://pr-18-magicbean-site.hckr-5e0.workers.dev This commit (e0db259383b1) on its own: https://529c58a9-magicbean-site.hckr-5e0.workers.dev

drcrow force-pushed ci/previews-and-version from c651c7b08a to 87077645a4 2026-11-15 13:09:30 +00:00 Compare

drcrow added 1 commit 2026-11-15 13:09:43 +00:00

fix(ci): pipe JSON into jq in the preview PR lookup (rebase brought the here-string back) e0db259383

drcrow referenced this pull request 2026-11-15 13:11:32 +00:00

ci: cut Site over to CircleCI (remove Forgejo Actions, live deploy) #19

circleci-bot merged commit 480cd427e3 into main 2026-11-15 13:16:33 +00:00

circleci-bot referenced this pull request from a commit 2026-11-15 13:16:34 +00:00

Merge pull request 'ci: label-gated Cloudflare previews and a visible site version' (#18) from ci/previews-and-version into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

ci: approved

A maintainer approved CircleCI for this fork PR (sticky; removed after 14 quiet days)

  

ci: preview

CircleCI posts a Cloudflare preview on each push (sticky; costs Cloudflare usage)

  

preview

Maintainers: preview this PR on Cloudflare (approves its current commit; comes off after the run)

  

risk

high

Broad or core change: the renderer, defaults on many systems, saves, installs, security

  

risk

low

Small, contained change: little can break

  

risk

medium

Changes behaviour in one area, or a default on some systems

  

ci: approved

No labels

ci: approved

ci: preview

preview

risk

high

risk

low

risk

medium

ci: approved

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

3 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

MagicBeanDev/Site!18

No description provided.