Skip to content

PRE-168: Update entra id mappings - #539

Merged
tashian merged 1 commit into
mainfrom
carl/entra-mappings
Jul 27, 2026
Merged

PRE-168: Update entra id mappings#539
tashian merged 1 commit into
mainfrom
carl/entra-mappings

Conversation

@tashian

@tashian tashian commented Jul 27, 2026

Copy link
Copy Markdown
Member

No description provided.

@tashian
tashian requested a review from a team as a code owner July 27, 2026 17:06
@tashian tashian changed the title Update entra id mappings PRE-168: Update entra id mappings Jul 27, 2026
@tashian
tashian enabled auto-merge July 27, 2026 17:12
@tashian
tashian merged commit 3ee5b3a into main Jul 27, 2026
4 checks passed
@tashian
tashian deleted the carl/entra-mappings branch July 27, 2026 17:15
tashian added a commit that referenced this pull request Jul 27, 2026
Updated graphics have not been reaching readers. The workflow uploaded them
to S3 correctly, but the site serves graphics through imgix, which caches
origin objects for 30 days and does not notice that an object was replaced
under the same key. Without a purge the upload is invisible — PR #539's
updated entra-id-mappings.png is still serving the old bytes right now.

Adds a purge step driven from the same git diff as the upload, so the two
lists cannot drift. Verification compares imgix's Last-Modified against the
S3 object's timestamp rather than byte size, because imgix rewrites SVGs on
serve and a correctly purged SVG never matches its origin byte-for-byte.

Also replaces the archived-or-stale third-party S3 action with the AWS CLI
and GitHub OIDC. Uploads are now limited to changed files instead of all 128
every run, and the role can only write under graphics/ — the bucket is
shared with the Strapi CMS. Clears the Node 20 deprecation warnings.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
tashian added a commit that referenced this pull request Jul 27, 2026
Updated graphics have not been reaching readers. The workflow uploaded them
to S3 correctly, but the site serves graphics through imgix, which caches
origin objects for 30 days and does not notice that an object was replaced
under the same key. Without a purge the upload is invisible — PR #539's
updated entra-id-mappings.png is still serving the old bytes right now.

Adds a purge step driven from the same git diff as the upload, so the two
lists cannot drift. Verification compares imgix's Last-Modified against the
S3 object's timestamp rather than byte size, because imgix rewrites SVGs on
serve and a correctly purged SVG never matches its origin byte-for-byte.

Also replaces the archived-or-stale third-party S3 action with the AWS CLI
and GitHub OIDC. Uploads are now limited to changed files instead of all 128
every run, and the role can only write under graphics/ — the bucket is
shared with the Strapi CMS. Clears the Node 20 deprecation warnings.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
tashian added a commit that referenced this pull request Jul 27, 2026
Updated graphics have not been reaching readers. The workflow uploaded them
to S3 correctly, but the site serves graphics through imgix, which caches
origin objects for 30 days and does not notice that an object was replaced
under the same key. Without a purge the upload is invisible — PR #539's
updated entra-id-mappings.png is still serving the old bytes right now.

Adds a purge step driven from the same git diff as the upload, so the two
lists cannot drift. Verification compares imgix's Last-Modified against the
S3 object's timestamp rather than byte size, because imgix rewrites SVGs on
serve and a correctly purged SVG never matches its origin byte-for-byte.

Also replaces the archived-or-stale third-party S3 action with the AWS CLI
and GitHub OIDC. Uploads are now limited to changed files instead of all 128
every run, and the role can only write under graphics/ — the bucket is
shared with the Strapi CMS. Clears the Node 20 deprecation warnings.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants