Merge pull request #566 from algorandfoundation/chore/cloudflare-prod-deploy

Author: p2arthur

.github/workflows/release-web.yaml

@@ -19,9 +19,9 @@ on:
         required: true
         type: string
     secrets:
-      NETLIFY_SITE_ID:
+      CLOUDFLARE_API_TOKEN:
         required: true
-      NETLIFY_AUTH_TOKEN:
+      CLOUDFLARE_ACCOUNT_ID:
         required: true
 
 concurrency: deploy-to-production
@@ -42,6 +42,9 @@ jobs:
           name: app-build
           path: artifacts/website
 
-      - name: Deploy website to Netlify
-        run: |
-          npx [email protected] deploy --site ${{ secrets.NETLIFY_SITE_ID }} --auth ${{ secrets.NETLIFY_AUTH_TOKEN }} --dir artifacts/website --prod --no-build
+      - name: Deploy to Cloudflare
+        uses: cloudflare/wrangler-action@v3
+        with:
+          apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
+          command: pages deploy artifacts/website --project-name=algokit-lora --branch=release

.nsprc

@@ -1,17 +1,32 @@
 {
   "1112496": {
     "active": true,
-    "expiry": "2026-02-15",
+    "expiry": "2026-04-15",
     "notes": "undici vulnerability in @actions/http-client (semantic-release dep). No fix in v5 line, fix requires major version bump to v6.23.0+."
   },
   "1112659": {
     "active": true,
-    "expiry": "2026-02-15",
+    "expiry": "2026-04-15",
     "notes": "tar version 7.5.4 is bundled inside npm (semantic-release/npm) and can't be override. We need to wait for a fix from npm"
   },
   "1112954": {
     "active": true,
-    "expiry": "2026-02-15",
+    "expiry": "2026-04-15",
     "notes": "@isaacs/brace-expansion version 5.0.0 is bundled inside npm and can't be override. We need to wait for a fix from npm"
+  },
+  "1113214": {
+    "active": true,
+    "expiry": "2026-04-15",
+    "notes": "ajv ReDoS advisory. Temporary exception while dependency updates are scheduled."
+  },
+  "1113249": {
+    "active": true,
+    "expiry": "2026-04-15",
+    "notes": "tar is a transitive dependency of @semantic-release/npm: npm bundled in @semantic-release/npm - need semantic release to update their dependency on npm to a version that includes the fix for tar 7.5.4"
+  },
+  "1113296": {
+    "active": true,
+    "expiry": "2026-04-15",
+    "notes": "npm version 10.8.0 is bundled inside @semantic-release/npm and can't be override. We need to wait for a fix from npm"
   }
 }

_headers

@@ -0,0 +1,2 @@
+/assets/*
+  Cache-Control: max-age=31536000, immutable

_redirects

@@ -0,0 +1 @@
+/* /index.html  200

netlify.toml

@@ -6,14 +6,14 @@
   "scripts": {
     "dev": "vite",
     "build": "run-s build:[0-9]*",
-    "build:dev": "run-s build:0-clean build:1-icons build:2-svg build:3-tsc build:4-vite:dev build:5-netlify",
+    "build:dev": "run-s build:0-clean build:1-icons build:2-svg build:3-tsc build:4-vite:dev build:5-cloudflare",
     "build:0-clean": "node -e \"fs.rmSync('dist',{recursive:true,force:true}); fs.rmSync('src/features/common/components/icons',{recursive:true,force:true}); fs.rmSync('src/features/common/components/svg',{recursive:true,force:true})\"",
     "build:1-icons": "npx --yes @svgr/cli --config-file .svgrrc.cjs --icon --typescript --out-dir src/features/common/components/icons src/assets/icons --no-index --filename-case kebab --jsx-runtime automatic",
     "build:2-svg": "npx --yes @svgr/cli --config-file .svgrrc.cjs --typescript --out-dir src/features/common/components/svg src/assets/svg --no-index --filename-case kebab --jsx-runtime automatic",
     "build:3-tsc": "tsc",
     "build:4-vite": "vite build",
     "build:4-vite:dev": "vite build --mode development",
-    "build:5-netlify": "cpy netlify.toml dist",
+    "build:5-cloudflare": "cpy _redirects _headers dist",
     "lint": "eslint . --report-unused-disable-directives --max-warnings 0",
     "lint:fix": "npm run lint -- --fix",
     "preview": "vite preview",