fix(web): enable authorized main production deployments - #2873
Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub. |
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 078bb97378
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
1 participant
The production request was canceled because main deployments were disabled. Enable main eligibility while requiring TZUDONG_APPROVED_PRODUCTION_SHA to match the exact 40-character VERCEL_GIT_COMMIT_SHA; missing, malformed, or mismatched authorization still cancels the build. Subsequent main revisions remain held until explicitly authorized.
The owner authorized this web deployment configuration correction. Protected develop → data → main promotion, rollback evidence and deployment identity readback remain required. G037 write freeze, database migrations, DNS and unrelated external release evidence remain unchanged.
Validation: 9 focused ignored-build policy tests pass with 49 assertions, including exact SHA authorization, mismatch/malformed/missing authorization, false/malformed configuration, and branch restrictions. Production's stale custom VERCEL_GIT_COMMIT_SHA override was removed after backup and readback; Vercel automatically supplies the actual commit identity.