This repository was archived by the owner on Jul 22, 2026. It is now read-only.
chore(deps-dev): bump the npm_and_yarn group across 2 directories wit… #9
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ─── SUNSET (2026-07-22): app decommissioned. This deploy workflow is commented | |
| # out (not deleted) so it can never redeploy the torn-down stack, while staying a | |
| # readable archive. Restore from git history to reactivate. See docs/progress.md. | |
| # | |
| # name: deploy-api | |
| # | |
| # # Builds the FastAPI Lambda image, pushes to ECR, and updates the functions. | |
| # # Terraform (HCP) owns the ECR repo, function shells, HTTP API, and authorizer; | |
| # # this workflow owns the image + function code (image_uri is ignore_changes in | |
| # # Terraform after creation). | |
| # # | |
| # # Required repo secrets: | |
| # # AWS_ACCESS_KEY_ID - access key for a deploy IAM user/role with | |
| # # ECR push + lambda:UpdateFunctionCode/PublishVersion/UpdateAlias | |
| # # AWS_SECRET_ACCESS_KEY - the matching secret access key | |
| # # AWS_REGION - e.g. us-east-1 | |
| # # ECR_REPOSITORY_URL - from `terraform output ecr_repository_url` | |
| # # API_LAMBDA_FUNCTION_NAME - from `terraform output api_lambda_function_name` (hipo-api) | |
| # # AUTHORIZER_LAMBDA_FUNCTION_NAME - hipo-api-authorizer | |
| # # STREAM_LAMBDA_FUNCTION_NAME - from `terraform output stream_lambda_function_name` (hipo-api-stream) | |
| # | |
| # on: | |
| # push: | |
| # branches: [master] | |
| # paths: | |
| # - "apps/api/**" | |
| # - "packages/contracts/**" | |
| # - "llm_gateway/**" | |
| # - ".github/workflows/deploy-api.yml" | |
| # workflow_dispatch: | |
| # | |
| # permissions: | |
| # contents: read | |
| # | |
| # jobs: | |
| # deploy: | |
| # name: build-push-update | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Checkout | |
| # uses: actions/checkout@v6 | |
| # | |
| # - name: Configure AWS credentials (access key) | |
| # uses: aws-actions/configure-aws-credentials@v4 | |
| # with: | |
| # aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| # aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| # aws-region: ${{ secrets.AWS_REGION }} | |
| # | |
| # - name: Login to ECR | |
| # id: ecr | |
| # uses: aws-actions/amazon-ecr-login@v2 | |
| # | |
| # - name: Build and push images | |
| # env: | |
| # REPO: ${{ secrets.ECR_REPOSITORY_URL }} | |
| # TAG: ${{ github.sha }} | |
| # run: | | |
| # docker build -f apps/api/Dockerfile -t "$REPO:$TAG" . | |
| # docker push "$REPO:$TAG" | |
| # docker build -f apps/api/Dockerfile.stream -t "$REPO:$TAG-stream" . | |
| # docker push "$REPO:$TAG-stream" | |
| # | |
| # - name: Update Mangum functions + move alias | |
| # env: | |
| # REPO: ${{ secrets.ECR_REPOSITORY_URL }} | |
| # TAG: ${{ github.sha }} | |
| # API_FN: ${{ secrets.API_LAMBDA_FUNCTION_NAME }} | |
| # AUTH_FN: ${{ secrets.AUTHORIZER_LAMBDA_FUNCTION_NAME }} | |
| # run: | | |
| # for FN in "$API_FN" "$AUTH_FN"; do | |
| # aws lambda update-function-code \ | |
| # --function-name "$FN" --image-uri "$REPO:$TAG" >/dev/null | |
| # aws lambda wait function-updated --function-name "$FN" | |
| # VERSION=$(aws lambda publish-version \ | |
| # --function-name "$FN" --query Version --output text) | |
| # if aws lambda get-alias --function-name "$FN" --name live >/dev/null 2>&1; then | |
| # aws lambda update-alias \ | |
| # --function-name "$FN" --name live --function-version "$VERSION" | |
| # else | |
| # aws lambda create-alias \ | |
| # --function-name "$FN" --name live --function-version "$VERSION" | |
| # fi | |
| # done | |
| # | |
| # - name: Update streaming function + move alias | |
| # env: | |
| # REPO: ${{ secrets.ECR_REPOSITORY_URL }} | |
| # TAG: ${{ github.sha }} | |
| # STREAM_FN: ${{ secrets.STREAM_LAMBDA_FUNCTION_NAME }} | |
| # run: | | |
| # aws lambda update-function-code \ | |
| # --function-name "$STREAM_FN" --image-uri "$REPO:$TAG-stream" >/dev/null | |
| # aws lambda wait function-updated --function-name "$STREAM_FN" | |
| # VERSION=$(aws lambda publish-version \ | |
| # --function-name "$STREAM_FN" --query Version --output text) | |
| # if aws lambda get-alias --function-name "$STREAM_FN" --name live >/dev/null 2>&1; then | |
| # aws lambda update-alias \ | |
| # --function-name "$STREAM_FN" --name live --function-version "$VERSION" | |
| # else | |
| # aws lambda create-alias \ | |
| # --function-name "$STREAM_FN" --name live --function-version "$VERSION" | |
| # fi |