cicd tag

Author: claude

.planning/quick/260317-l9s-ci-cd-trigger-solo-su-push-tag/260317-l9s-PLAN.md

@@ -0,0 +1,110 @@
+---
+phase: quick
+plan: 260317-l9s
+type: execute
+wave: 1
+depends_on: []
+files_modified: [.github/workflows/ci-deploy.yml]
+autonomous: true
+requirements: [QUICK-CI-TAG-ONLY]
+
+must_haves:
+  truths:
+    - "CI/CD workflow triggers ONLY on push of a tag matching v*"
+    - "Push to main or develop does NOT trigger any workflow run"
+    - "Pull requests do NOT trigger any workflow run"
+    - "All deploy/build jobs still run correctly when triggered by a tag push"
+  artifacts:
+    - path: ".github/workflows/ci-deploy.yml"
+      provides: "CI/CD workflow with tag-only trigger"
+      contains: "tags:"
+  key_links:
+    - from: ".github/workflows/ci-deploy.yml"
+      to: "GitHub Actions"
+      via: "on.push.tags trigger"
+      pattern: "on:\\s+push:\\s+tags:"
+---
+
+<objective>
+Restrict CI/CD workflow to trigger ONLY on tag pushes (e.g., `v3.3`), removing triggers for branch pushes (main/develop) and pull requests.
+
+Purpose: Avoid unnecessary CI/CD runs on every push to main/develop. Deployments should only happen when a version tag is pushed.
+Output: Updated `.github/workflows/ci-deploy.yml` with tag-only trigger and simplified job conditions.
+</objective>
+
+<execution_context>
+@/home/toto/.claude/get-shit-done/workflows/execute-plan.md
+@/home/toto/.claude/get-shit-done/templates/summary.md
+</execution_context>
+
+<context>
+@.github/workflows/ci-deploy.yml
+</context>
+
+<tasks>
+
+<task type="auto">
+  <name>Task 1: Restrict workflow trigger to tag push only and simplify job conditions</name>
+  <files>.github/workflows/ci-deploy.yml</files>
+  <action>
+1. Change the `on:` trigger block from:
+```yaml
+on:
+  push:
+    branches: [main, develop]
+    tags:
+      - 'v*'
+  pull_request:
+    branches: [main, develop]
+```
+to:
+```yaml
+on:
+  push:
+    tags:
+      - 'v*'
+```
+
+2. Simplify all job `if` conditions. Since the workflow now ONLY triggers on tag pushes, the `github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')` checks are redundant. Update each job:
+
+- `build-apk` (line 50): Change from `if: (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) && github.event_name == 'push' && needs.lint-and-typecheck.result == 'success'` to `if: needs.lint-and-typecheck.result == 'success'` (event_name is always 'push' and ref is always a tag now)
+
+- `create-release` (line 135): Change from `if: (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) && github.event_name == 'push' && needs.build-apk.result == 'success'` to `if: needs.build-apk.result == 'success'`
+
+- `deploy-landing` (line 167): Change from `if: (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v')) && github.event_name == 'push' && needs.lint-and-typecheck.result == 'success'` to `if: needs.lint-and-typecheck.result == 'success'`
+
+- `deploy-deck-builder` (line 208): Same simplification as deploy-landing — change to `if: needs.lint-and-typecheck.result == 'success'`
+
+- `deploy-migrations` (line 271): Same simplification — change to `if: needs.lint-and-typecheck.result == 'success'`
+
+- `deploy-functions` (line 312): Same simplification — change to `if: needs.lint-and-typecheck.result == 'success'`
+
+3. Update stale comments:
+- Line 17: Change `# CI Jobs - Run on all pushes and PRs` to `# CI Jobs - Run on tag push`
+- Line 161: Change `# Deploy Jobs - Only on push to main` to `# Deploy Jobs - Run on tag push`
+
+Do NOT change anything else — keep all job steps, secrets, env vars, and artifacts exactly as they are.
+  </action>
+  <verify>
+    <automated>cd /home/toto/scm-projects/lumio && grep -c 'branches:' .github/workflows/ci-deploy.yml | grep '^0$' && grep -c 'pull_request:' .github/workflows/ci-deploy.yml | grep '^0$' && grep "tags:" .github/workflows/ci-deploy.yml && echo "PASS: trigger is tag-only"</automated>
+  </verify>
+  <done>Workflow triggers only on tag push. No branch push or PR triggers remain. All job `if` conditions simplified to only check dependency results. Stale comments updated.</done>
+</task>
+
+</tasks>
+
+<verification>
+- `grep -c 'branches:' .github/workflows/ci-deploy.yml` returns 0
+- `grep -c 'pull_request:' .github/workflows/ci-deploy.yml` returns 0
+- `grep 'tags:' .github/workflows/ci-deploy.yml` shows the v* tag filter
+- No job has `github.ref == 'refs/heads/main'` in its condition
+- YAML is valid (no syntax errors)
+</verification>
+
+<success_criteria>
+The CI/CD workflow file triggers exclusively on tag pushes matching `v*`. No workflow runs occur on pushes to main/develop or on pull requests. All deploy jobs retain their correct dependency chains and run successfully when a tag is pushed.
+</success_criteria>
+
+<output>
+After completion, create `.planning/quick/260317-l9s-ci-cd-trigger-solo-su-push-tag/260317-l9s-SUMMARY.md`
+</output>