Deploy to staging

.docker-hub/print/Dockerfile

@@ -1,6 +1,6 @@
 # build stage
-FROM node:24.10.0 AS build-stage
+FROM node:24.11.0 AS build-stage
 ARG SENTRY_AUTH_TOKEN
 ARG SENTRY_ORG
 ARG SENTRY_PRINT_PROJECT
 ARG SENTRY_RELEASE_NAME
@@ -11,7 +11,7 @@
 
 COPY print/package*.json ./
 
 ENV NUXT_SENTRY_AUTH_TOKEN=$SENTRY_AUTH_TOKEN
 ENV NUXT_SENTRY_ORG=$SENTRY_ORG
 ENV NUXT_SENTRY_PROJECT=$SENTRY_PRINT_PROJECT
 ENV NUXT_SENTRY_RELEASE_NAME=$SENTRY_RELEASE_NAME
@@ -22,13 +22,13 @@
 RUN npm run build
 
 # production stage
-FROM node:24.10.0 AS production-stage
+FROM node:24.11.0 AS production-stage
 WORKDIR /app
 
 COPY --from=build-stage /app/.output ./.output
 
 ENV NITRO_HOST 0.0.0.0
 ENV NITRO_PORT 80
 
 EXPOSE 80
 CMD node ./.output/server/index.mjs

.github/workflows/check-dependencies.yml

@@ -22,11 +22,11 @@ jobs:
     name: 'Api Platform check dependencies'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: xdebug
 

.github/workflows/continuous-integration-optional.yml

@@ -17,11 +17,11 @@ jobs:
     name: 'Validate Api Platform composer.lock'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: xdebug
 
@@ -32,11 +32,11 @@ jobs:
     name: 'Lint: API (psalm)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: xdebug
 
@@ -62,11 +62,11 @@ jobs:
     name: 'Lint: API (phpstan)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: xdebug
 
@@ -110,11 +110,11 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: xdebug
 

.github/workflows/continuous-integration.yml

@@ -87,11 +87,11 @@ jobs:
       - api-check-needed
     if: needs.api-check-needed.outputs.should_skip != 'true'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           tools: composer:2.8.0
           coverage: none
 
@@ -110,7 +110,7 @@ jobs:
       - run: composer install --no-interaction --no-plugins --no-scripts --prefer-dist
         working-directory: api
 
-      - run: PHP_CS_FIXER_IGNORE_ENV=1 php vendor/bin/php-cs-fixer fix --config=.php-cs-fixer.php -v --dry-run --diff
+      - run: php vendor/bin/php-cs-fixer fix --config=.php-cs-fixer.php -v --dry-run --diff
         working-directory: api
 
   frontend-eslint:
@@ -120,11 +120,11 @@ jobs:
       - frontend-check-needed
     if: needs.frontend-check-needed.outputs.should_skip != 'true'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -149,11 +149,11 @@ jobs:
     name: 'Lint: ClientPrint (ESLint)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -178,11 +178,11 @@ jobs:
     name: 'Lint: Print (ESLint)'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -210,11 +210,11 @@ jobs:
       - e2e-check-needed
     if: needs.e2e-check-needed.outputs.should_skip != 'true'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -260,11 +260,11 @@ jobs:
           --health-retries 5
 
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - uses: shivammathur/setup-php@v2
         with:
-          php-version: '8.4.13'
+          php-version: '8.4.14'
           extensions: intl-73.1
           tools: composer:2.8.0
           coverage: pcov
@@ -349,11 +349,11 @@ jobs:
       - frontend-check-needed
     if: needs.frontend-check-needed.outputs.should_skip != 'true'
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -392,11 +392,11 @@ jobs:
     name: 'Tests: Print'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -431,11 +431,11 @@ jobs:
     name: 'Tests: PDF'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
-          node-version: '24.10.0'
+          node-version: '24.11.0'
 
       - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
@@ -530,7 +530,7 @@ jobs:
       - workflow-success
     runs-on: ubuntu-latest
     steps:
-      - uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f # v4
+      - uses: peter-evans/repository-dispatch@28959ce8df70de7be546dd1250a005dd32156697 # v4
         with:
           event-type: ci-passed
           client-payload: '{"ref": "${{ github.ref }}", "sha": "${{ github.sha }}"}'

.github/workflows/deploy-ecamp3-logging.yml

@@ -31,7 +31,7 @@ jobs:
             }
 
 
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Dump secrets to /tmp/secrets.yaml
         run: |

.github/workflows/deploy-ingress.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: ${{ github.event.inputs.environment }}
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Setup helm
         run: |

.github/workflows/deploy-ops-dashboard.yml

@@ -31,7 +31,7 @@ jobs:
             }
 
 
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Dump secrets to /tmp/secrets.yaml
         run: |

.github/workflows/deployment-devel.yml

@@ -5,6 +5,15 @@ on:
     branches:
       - devel
   workflow_dispatch:
+    inputs:
+      action:
+        description: "Choose action"
+        type: choice
+        required: true
+        default: diff
+        options:
+          - diff
+          - deploy
 
 jobs:
   continuous-integration:
@@ -25,8 +34,9 @@ jobs:
   upgrade-or-install-deployment:
     name: Upgrade or install deployment
     needs: build-and-push
-    uses: ./.github/workflows/reusable-dev-deployment.yml
+    uses: ./.github/workflows/reusable-ecamp3-deployment.yml
     with:
       name: dev
       env: dev
-    secrets: inherit
+      action: ${{ github.event.inputs.action || 'deploy' }}
+    secrets: inherit

.github/workflows/deployment-pr-cleanup.yml

@@ -13,7 +13,7 @@ jobs:
       to-uninstall: ${{ steps.to-uninstall.outputs.list }}
       never-uninstall: ${{ steps.to-uninstall.outputs.never_uninstall }}
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
       - name: Find all open PRs that have a "deploy!" label
         id: deployment-candidates

.github/workflows/deployment-pr.yml

@@ -3,6 +3,16 @@ name: CD for feature branches
 on:
   pull_request_target:
     types: [opened, reopened, labeled, synchronize]
+  workflow_dispatch:
+    inputs:
+      action:
+        description: "Choose action"
+        type: choice
+        required: true
+        default: diff
+        options:
+          - diff
+          - deploy
 
 concurrency:
   group: ${{ github.workflow}}-${{ github.event.pull_request.number }}
@@ -23,11 +33,12 @@ jobs:
   upgrade-or-install-deployment:
     name: Upgrade or install deployment
     needs: build-and-push
-    uses: ./.github/workflows/reusable-dev-deployment.yml
+    uses: ./.github/workflows/reusable-ecamp3-deployment.yml
     with:
       name: pr${{ github.event.pull_request.number }}
       sha: ${{ github.event.pull_request.head.sha }}
       env: feature-branch
       pr-number: ${{ github.event.pull_request.number }}
       dropDBOnUninstall: true
+      action: ${{ github.event.inputs.action || 'deploy' }}
     secrets: inherit

.github/workflows/deployment-stage-prod.yml

@@ -9,6 +9,15 @@ on:
       - staging
       - prod
   workflow_dispatch:
+    inputs:
+      action:
+        description: "Choose action"
+        type: choice
+        required: true
+        default: diff
+        options:
+          - diff
+          - deploy
 
 jobs:
   build-and-push:
@@ -24,5 +33,9 @@ jobs:
   upgrade-or-install-deployment:
     name: Upgrade or install deployment
     needs: build-and-push
-    uses: ./.github/workflows/reusable-stage-prod-deployment.yml
+    uses: ./.github/workflows/reusable-ecamp3-deployment.yml
+    with:
+      name: ${{ github.ref_name }}
+      env: ${{ github.ref_name }}
+      action: ${{ github.event.inputs.action || 'deploy' }}
     secrets: inherit

.github/workflows/restore-backup-dev-pr.yml

@@ -21,6 +21,14 @@ on:
         description: The environment, if name is dev then dev, else feature-branch
         required: true
         default: dev
+      action:
+        description: "Choose action"
+        type: choice
+        required: true
+        default: diff
+        options:
+          - diff
+          - deploy
 
 
 jobs:
@@ -36,12 +44,13 @@ jobs:
   upgrade-or-install-deployment:
     name: Upgrade or install deployment
     needs: build-and-push
-    uses: ./.github/workflows/reusable-dev-deployment.yml
+    uses: ./.github/workflows/reusable-ecamp3-deployment.yml
     with:
       name: ${{ inputs.pr-number == null && 'dev' || format('pr{0}', inputs.pr-number) }}
       sha: ${{ github.sha }}
       env: ${{ inputs.env }}
       pr-number: ${{ inputs.pr-number }}
       dropDBOnUninstall: ${{ inputs.pr-number != null }}
       restoreSourceFile: ${{ inputs.restoreSourceFile }}
+      action: ${{ github.event.inputs.action }}
     secrets: inherit