From 205ffe35b4969aa4e43a268131f621e7610a5c51 Mon Sep 17 00:00:00 2001
From: Afonso Jorge Ramos <afonsojorgeramos@gmail.com>
Date: Thu, 30 Jul 2026 18:22:19 +0200
Subject: [PATCH 1/3] ci: deploy website after the release pipeline publishes

---
 .github/workflows/release.yml | 8 ++++++++
 .github/workflows/website.yml | 6 +++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 6e70beca1..5bac7b569 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -79,3 +79,11 @@ jobs:
       APPLE_ID_USERNAME: ${{ secrets.APPLE_ID_USERNAME }}
       APPLE_ID_PASSWORD: ${{ secrets.APPLE_ID_PASSWORD }}
       APPLE_ID_TEAM_ID: ${{ secrets.APPLE_ID_TEAM_ID }}
+
+  website:
+    name: Website
+    uses: ./.github/workflows/website.yml
+    needs: publish
+    permissions: {}
+    secrets:
+      NETLIFY_BUILD_HOOK_URL: ${{ secrets.NETLIFY_BUILD_HOOK_URL }}
diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index a38166bca..7b7d208d6 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -1,10 +1,14 @@
 name: Website
 
 on:
+  workflow_call: # For chaining onto the release pipeline
+    secrets:
+      NETLIFY_BUILD_HOOK_URL:
+        required: true
   workflow_dispatch: # For manually running website deployment
   release:
     types:
-      - published # For running on release publish
+      - published # For releases published by hand via the GitHub UI
 
 permissions: {}
 

From e7df7322e762174b41da1638ca26877b141bdf49 Mon Sep 17 00:00:00 2001
From: Afonso Jorge Ramos <afonsojorgeramos@gmail.com>
Date: Thu, 30 Jul 2026 18:22:26 +0200
Subject: [PATCH 2/3] ci: fail the website deploy when the Netlify hook errors

---
 .github/workflows/website.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 7b7d208d6..8fb06e622 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -18,4 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     permissions: {}
     steps:
-      - run: curl -X POST -d {} ${{ secrets.NETLIFY_BUILD_HOOK_URL }}
+      - name: Trigger Netlify build
+        env:
+          BUILD_HOOK_URL: ${{ secrets.NETLIFY_BUILD_HOOK_URL }}
+        run: curl --fail --silent --show-error -X POST -d '{}' "$BUILD_HOOK_URL"

From 8823d89543e84a788ca937b8739ee54ecde377f9 Mon Sep 17 00:00:00 2001
From: Afonso Jorge Ramos <afonsojorgeramos@gmail.com>
Date: Thu, 30 Jul 2026 18:35:50 +0200
Subject: [PATCH 3/3] ci: drop trigger comments from the website workflow

---
 .github/workflows/website.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/website.yml b/.github/workflows/website.yml
index 8fb06e622..06dc19d4b 100644
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -1,14 +1,14 @@
 name: Website
 
 on:
-  workflow_call: # For chaining onto the release pipeline
+  workflow_call:
     secrets:
       NETLIFY_BUILD_HOOK_URL:
         required: true
-  workflow_dispatch: # For manually running website deployment
+  workflow_dispatch:
   release:
     types:
-      - published # For releases published by hand via the GitHub UI
+      - published
 
 permissions: {}