05a648b096
All checks were successful
Deploy Internet for Kids / Build & Push (push) Successful in 12s
Deploy Internet for Kids / Deploy (push) Successful in 6s
Deploy Internet for Kids / Health Check (push) Successful in 2s
Deploy Internet for Kids / Smoke Tests (push) Successful in 3s
Deploy Internet for Kids / Promote to Latest (push) Successful in 1s
Deploy Internet for Kids / Rollback (push) Has been skipped
Deploy Internet for Kids / Audit (push) Successful in 2s
Previously, :latest was pushed during build before any validation. If health checks failed, rollback restored locally but Watchtower re-pulled the broken :latest from registry, undoing the rollback. Now: build pushes only SHA tag, deploy uses SHA tag locally, new promote job pushes :latest only after smoke tests pass. Rollback also pushes restored image as :latest to registry. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>