Deploy to Cloudflare

Set up job

Diffinery runner: job deploy (Deploy to Cloudflare) for codician/diffinery@e4f0938e4a69Runner: image diffinery-runner:0d9b89e0a449e5faecf2b19c, in ams17, WEUR, container 3acf8df8b6d5435a4fe2d75acbbe810ff565fd7b784b0734a4e17457bc7ec7d5Runner size: large (4 vCPU, 12 GiB of memory, 20 GB of disk), this job uses what a smaller runner doesn't have; runs-on: diffinery-large (or -medium, -small, -tiny) sets a sizeHost: AMD EPYC (family 25, model 17), 4 vCPUs, 2550 MHzWorkspace: /workspace/diffineryHost: 2% of the vCPUs' time went to other work on the host (steal)Job completed with conclusion: successResources: 0.7 of 4 vCPUs busy on average (1.7 at the 95th percentile), peak memory 2.9 GiB of 11.9 GiB, peak disk 2.3 GB of 19.3 GB

Run actions/checkout@v41s

##[group]Run actions/checkout@v4with:  ref: e4f0938e4a69f52e5f8c8080bc6e736fa536a42d##[endgroup]Syncing repository: codician/diffineryFetching the repository (depth 1)remote: Enumerating objects: 628, done.        Receiving objects:   0% (1/628)
Receiving objects:   1% (7/628)
Receiving objects:   2% (13/628)
Receiving objects:   3% (19/628)
Receiving objects:   4% (26/628)
Receiving objects:   5% (32/628)
Receiving objects:   6% (38/628)
Receiving objects:   7% (44/628)
Receiving objects:   8% (51/628)
Receiving objects:   9% (57/628)
Receiving objects:  10% (63/628)
Receiving objects:  11% (70/628)
Receiving objects:  12% (76/628)
Receiving objects:  13% (82/628)
Receiving objects:  14% (88/628)
Receiving objects:  15% (95/628)
Receiving objects:  16% (101/628)
Receiving objects:  17% (107/628)
Receiving objects:  18% (114/628)
Receiving objects:  19% (120/628)
Receiving objects:  20% (126/628)
Receiving objects:  21% (132/628)
Receiving objects:  22% (139/628)
Receiving objects:  23% (145/628)
Receiving objects:  24% (151/628)
Receiving objects:  25% (157/628)
Receiving objects:  26% (164/628)
Receiving objects:  27% (170/628)
Receiving objects:  28% (176/628)
Receiving objects:  29% (183/628)
Receiving objects:  30% (189/628)
Receiving objects:  31% (195/628)
Receiving objects:  32% (201/628)
Receiving objects:  33% (208/628)
Receiving objects:  34% (214/628)
Receiving objects:  35% (220/628)
Receiving objects:  36% (227/628)
Receiving objects:  37% (233/628)
Receiving objects:  38% (239/628)
Receiving objects:  39% (245/628)
Receiving objects:  40% (252/628)
Receiving objects:  41% (258/628)
Receiving objects:  42% (264/628)
Receiving objects:  43% (271/628)
Receiving objects:  44% (277/628)
Receiving objects:  45% (283/628)
Receiving objects:  46% (289/628)
Receiving objects:  47% (296/628)
Receiving objects:  48% (302/628)
Receiving objects:  49% (308/628)
Receiving objects:  50% (314/628)
Receiving objects:  51% (321/628)
Receiving objects:  52% (327/628)
Receiving objects:  53% (333/628)
Receiving objects:  54% (340/628)
Receiving objects:  55% (346/628)
Receiving objects:  56% (352/628)
Receiving objects:  57% (358/628)
Receiving objects:  58% (365/628)
Receiving objects:  59% (371/628)
Receiving objects:  60% (377/628)
Receiving objects:  61% (384/628)
Receiving objects:  62% (390/628)
Receiving objects:  63% (396/628)
Receiving objects:  64% (402/628)
Receiving objects:  65% (409/628)
Receiving objects:  66% (415/628)
Receiving objects:  67% (421/628)
Receiving objects:  68% (428/628)
Receiving objects:  69% (434/628)
Receiving objects:  70% (440/628)
Receiving objects:  71% (446/628)
Receiving objects:  72% (453/628)
Receiving objects:  73% (459/628)
Receiving objects:  74% (465/628)
Receiving objects:  75% (471/628)
Receiving objects:  76% (478/628)
Receiving objects:  77% (484/628)
Receiving objects:  78% (490/628)
Receiving objects:  79% (497/628)
Receiving objects:  80% (503/628)
Receiving objects:  81% (509/628)
Receiving objects:  82% (515/628)
Receiving objects:  83% (522/628)
Receiving objects:  84% (528/628)
Receiving objects:  85% (534/628)
Receiving objects:  86% (541/628)
Receiving objects:  87% (547/628)
Receiving objects:  88% (553/628)
Receiving objects:  89% (559/628)
Receiving objects:  90% (566/628)
Receiving objects:  91% (572/628)
Receiving objects:  92% (578/628)
Receiving objects:  93% (585/628)
Receiving objects:  94% (591/628)
Receiving objects:  95% (597/628)
Receiving objects:  96% (603/628)
remote: Total 628 (delta 0), reused 628 (delta 0)        Receiving objects:  97% (610/628)
Receiving objects:  98% (616/628)
Receiving objects:  99% (622/628)
Receiving objects: 100% (628/628)
Receiving objects: 100% (628/628), 2.57 MiB | 16.77 MiB/s, done.From https://diffinery.com/codician/diffinery * [new ref]         e4f0938e4a69f52e5f8c8080bc6e736fa536a42d -> origin/diffinery-checkoutNote: switching to 'e4f0938e4a69f52e5f8c8080bc6e736fa536a42d'.You are in 'detached HEAD' state. You can look around, make experimentalchanges and commit them, and you can discard any commits you make in thisstate without impacting any branches by switching back to a branch.If you want to create a new branch to retain commits you create, you maydo so (now or later) by using -c with the switch command. Example:  git switch -c <new-branch-name>Or undo this operation with:  git switch -Turn off this advice by setting config variable advice.detachedHead to falseHEAD is now at e4f0938 Restart read-only jobs whose container the platform stops without warning (#215)HEAD is now at e4f0938e4a69f52e5f8c8080bc6e736fa536a42d

Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b12s

Download action repository 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1'##[group]Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1with:  dest: ~/setup-pnpm  run_install: null  cache: false  cache_dependency_path: pnpm-lock.yaml  package_json_file: package.json  standalone: false##[endgroup]##[group]Running self-installer...Progress: resolved 1, reused 0, downloaded 0, added 0Packages: +1+Progress: resolved 1, reused 0, downloaded 1, added 1, donedependencies:+ pnpm 10.28.0 (12.14.0 is available)Done in 1.2s##[endgroup]Installation Completed!

Run actions/setup-node@v412s

##[group]Run actions/setup-node@v4with:  node-version: 22  cache: pnpm##[endgroup]Found in cache @ 22.22.0 (pre-installed node satisfies '22')Cache Size: ~216 MB (226515969 B)Cache restored from key: node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0

Run pnpm install --frozen-lockfile14s

##[group]Run pnpm install --frozen-lockfile##[endgroup]Scope: all 7 workspace projectsLockfile is up to date, resolution step is skippedProgress: resolved 1, reused 0, downloaded 0, added 0Packages: +249++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++Progress: resolved 249, reused 243, downloaded 0, added 248Progress: resolved 249, reused 243, downloaded 0, added 249, donedevDependencies:+ turbo 2.11.7+ typescript 5.9.3Done in 13.3s using pnpm v10.28.0

Build runner agent and web islands3s

##[group]Run pnpm -r --if-present build##[endgroup]Scope: 6 of 7 workspace projectsapps/cli build$ esbuild src/bin.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/diffinery.mjs "--banner:js=#!/usr/bin/env nodeimport { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/diffinery build$ node islands/build.mjs && node scripts/build-docs.mjscontainers/runner build$ esbuild src/main.ts --bundle --platform=node --target=node22 --format=esm --outfile=dist/agent.mjs --external:bufferutil --external:utf-8-validate "--banner:js=import { createRequire as __diffineryCreateRequire } from 'node:module'; const require = __diffineryCreateRequire(import.meta.url);"apps/cli build:   dist/diffinery.mjs  445.1kbapps/cli build: ⚡ Done in 117msapps/cli build: Donecontainers/runner build:   dist/agent.mjs  666.9kbcontainers/runner build: ⚡ Done in 137mscontainers/runner build: Doneapps/diffinery build: islands: kumo.js 466 KB, kumo.css 149 KB, terminal.js 286 KBapps/diffinery build: docs: 65 pages (+2 generated at runtime), CLI 0.1.0 (234 KiB)apps/diffinery build: Done

Runner image (built only when the runner changed)5s

##[group]Run scripts/runner-image.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]reusing diffinery-runner:0d9b89e0a449e5faecf2b19c: the runner hasn't changed since it was builtregistry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c

Create or update Cloudflare resources11s

##[group]Run scripts/bootstrap.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]##[group]D1 databaseD1 database exists: 2c3f0cb1-7ded-438c-88ef-4c3d39930ba6read replication: auto (turn it on with the 'D1 read replication' workflow)##[endgroup]##[group]R2 bucketR2 bucket existsR2 lifecycle rules set##[endgroup]##[group]Queuesqueue diffinery-events existsqueue diffinery-events-dlq existsqueue diffinery-mail existsqueue diffinery-mail-dlq existsqueue diffinery-mail-events exists##[endgroup]##[group]Email Sending event subscriptionevent subscription acc79fd40fbe4ed3ae2ecd2a538a1605 sends diffinery.com's bounces and complaints to diffinery-mail-events##[endgroup]##[group]Email Sending for diffinery.comzone diffinery.com (379c97b13ecaec46db00b8e87f377c37)can't read Email Sending settings with this token (10000: Authentication error), checking public DNS insteadok       MX cf-bounce.diffinery.comok       TXT cf-bounce.diffinery.com (SPF)ok       TXT _dmarc.diffinery.comdiffinery.com looks onboarded to Email Sending (public DNS)##[endgroup]##[group]TurnstileTurnstile widget "diffinery diffinery.com" exists: 0x4AAAAAAFWX2OQHwh_jT9_hTURNSTILE_SECRET goes with site key 0x4AAAAAAFWX2OQHwh_jT9_hsite key: 0x4AAAAAAFWX2OQHwh_jT9_h##[endgroup]##[group]Cloudflare AccessAccess app covers diffinery.com/auth/accessteam=assaysol-pages.cloudflareaccess.com aud=set##[endgroup]##[group]Render config and migrate D1wrote /workspace/diffinery/apps/diffinery/wrangler.deploy.jsonc ⛅️ wrangler 4.149.0────────────────────Resource location: remote ✅ No migrations to apply!##[endgroup]

Deploy Worker and runner image26s

##[group]Run pnpm exec wrangler deploy -c wrangler.deploy.jsoncenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup] ⛅️ wrangler 4.149.0 (update available 4.151.1)───────────────────────────────────────────────Cloudflare collects anonymous telemetry about your usage of Wrangler. Learn more at https://github.com/cloudflare/workers-sdk/tree/main/packages/wrangler/telemetry.mdTotal Upload: 12585.05 KiB / gzip: 2938.02 KiBWorker Startup Time: 83 msYour Worker has access to the following bindings:Binding                                                                  Resource                  env.REPO (RepoDO)                                                        Durable Object            env.SCHEDULER (SchedulerDO)                                              Durable Object            env.RUNNER (RunnerContainer)                                             Durable Object            env.RUNNER_MEDIUM (RunnerContainerMedium)                                Durable Object            env.RUNNER_SMALL (RunnerContainerSmall)                                  Durable Object            env.RUNNER_TINY (RunnerContainerTiny)                                    Durable Object            env.SANDBOX (SandboxContainer)                                           Durable Object            env.IMPORTER (ImportContainer)                                           Durable Object            env.PROJECT (ProjectDO)                                                  Durable Object            env.RUN_WORKFLOW (RunWorkflow)                                           Workflow                  env.IMPORT_WORKFLOW (ImportWorkflow)                                     Workflow                  env.ACCOUNT_WORKFLOW (AccountWorkflow)                                   Workflow                  env.EMAIL (unrestricted)                                                 Send Email                env.EVENTS (inherited)                                                   Queue                     env.MAIL (inherited)                                                     Queue                     env.DB (diffinery)                                                       D1 Database               env.BUCKET (diffinery-data)                                              R2 Bucket                 env.RL_AUTH (20 requests/60s)                                            Rate Limit                env.RL_ANON (300 requests/60s)                                           Rate Limit                env.RL_ACCOUNT (2000 requests/60s)                                       Rate Limit                env.RL_CREATE (60 requests/60s)                                          Rate Limit                env.RL_MODEL (600 requests/60s)                                          Rate Limit                env.PUBLIC_URL ("https://diffinery.com")                                 Environment Variable      env.MAIL_FROM ("notifications@diffinery.com")                            Environment Variable      env.BOOTSTRAP_ADMINS ("iletisim@canberkdemirci.com,canberkde...")        Environment Variable      env.ACCESS_TEAM_DOMAIN ("assaysol-pages.cloudflareaccess.com")           Environment Variable      env.ACCESS_AUD ("a40b189c8d5b52a71b3c3ec3260f18157c284...")              Environment Variable      env.RUNNER_IMAGE ("diffinery-runner:0d9b89e0a449e5faecf2...")            Environment Variable      env.TURNSTILE_SITE_KEY ("0x4AAAAAAFWX2OQHwh_jT9_h")                      Environment Variable      The following containers are available:- diffinery-runnercontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)- diffinery-runnercontainermedium (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)- diffinery-runnercontainersmall (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)- diffinery-runnercontainertiny (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)- diffinery-sandboxcontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)- diffinery-importcontainer (registry.cloudflare.com/***/diffinery-runner:0d9b89e0a449e5faecf2b19c)Uploaded diffinery (9.55 sec)╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainermedium│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainersmall│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-runnercontainertiny│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-sandboxcontainer│╰ No changes to be made ╭ Deploy a container application deploy changes to your application││ Container application changes│├ no changes diffinery-importcontainer│╰ No changes to be made Deployed diffinery triggers (7.54 sec)  diffinery.com/* (zone name: diffinery.com)  schedule: */5 * * * *  Producer for diffinery-events  Producer for diffinery-mail  Consumer for diffinery-events  Consumer for diffinery-mail  Consumer for diffinery-mail-events  workflow: diffinery-run  workflow: diffinery-import  workflow: diffinery-accountCurrent Version ID: 5ea23b8e-4b43-4d3c-9c64-d9c6bfa9df1a

Wait for new containers to get the new image0s

##[group]Run scripts/wait-container-rollout.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]

Worker secrets (generated on the first deploy; TURNSTILE_SECRET when missing)2s

##[group]Run scripts/ensure-secrets.shenv:  CLOUDFLARE_API_TOKEN: ***  CLOUDFLARE_ACCOUNT_ID: ***##[endgroup]

Finish Access setup on first deploy

Smoke test0s

##[group]Run # A new custom domain can take a few minutes to get its certificate.for i in $(seq 1 30); do  code=$(curl -s -o /dev/null -w '%{http_code}' https://$DIFFINERY_DOMAIN/healthz) && [ "$code" = 200 ] && exit 0  sleep 10doneecho "::error::https://$DIFFINERY_DOMAIN/healthz did not return 200 (last: $code). Check that the $DIFFINERY_DOMAIN DNS record is proxied (orange cloud)."; exit 1##[endgroup]

Check sign-in pages0s

##[group]Run set -upage=$(curl -sS https://$DIFFINERY_DOMAIN/login)grep -q "Sign in with a passkey" <<<"$page" || { echo "::error::/login is not the Diffinery sign-in page"; exit 1; }echo "/login serves the passkey sign-in page"loc=$(curl -sS -o /dev/null -w '%{http_code} %{redirect_url}' https://$DIFFINERY_DOMAIN/auth/access)echo "/auth/access -> $loc"[[ "$loc" == 302\ https://*.cloudflareaccess.com/* ]] || echo "::warning::/auth/access is not behind Cloudflare Access yet, so email recovery and first admin sign-in will not work"report=$(curl -sS -w '\n%{http_code}' https://$DIFFINERY_DOMAIN/security/report)code=${report##*$'\n'}if grep -q 'class="cf-turnstile"' <<<"$report"; then  echo "/security/report shows Turnstile to people who aren't signed in"elif grep -q 'has no Turnstile configured' <<<"$report"; then  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: the Worker lacks TURNSTILE_SITE_KEY or TURNSTILE_SECRET (see the bootstrap and Worker secrets steps)"else  echo "::warning::/security/report has no Turnstile, so only people who are signed in can send security reports: it answered $code without the form"fifor kind in js css; do  asset=$(grep -o "/-/kumo/[a-z0-9]*\.$kind" <<<"$page" | head -1)  [ -n "$asset" ] || { echo "::error::/login does not load the Kumo $kind bundle"; exit 1; }  code=$(curl -sS -o /dev/null -w '%{http_code}' "https://$DIFFINERY_DOMAIN$asset")  [ "$code" = 200 ] || { echo "::error::$asset returned $code"; exit 1; }  echo "$asset -> 200"done##[endgroup]/login serves the passkey sign-in page/auth/access -> 302 https://assaysol-pages.cloudflareaccess.com/cdn-cgi/access/login/diffinery.com?kid=a40b189c8d5b52a71b3c3ec3260f18157c2840312dbfc32bee30e2609b15d02e&meta=eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsImtpZCI6IjhlZTM2NTQ0OTNkMjJhYTM1NzJlMjVjMGUwZTM0ZDIxNDk4YjZjNmIxMzRhMWE2ZjcxNzk4MDFkMjVmMTcwMDQifQ.eyJ0eXBlIjoibWV0YSIsImF1ZCI6ImE0MGIxODljOGQ1YjUyYTcxYjNjM2VjMzI2MGYxODE1N2MyODQwMzEyZGJmYzMyYmVlMzBlMjYwOWIxNWQwMmUiLCJob3N0bmFtZSI6ImRpZmZpbmVyeS5jb20iLCJyZWRpcmVjdF91cmwiOiIvYXV0aC9hY2Nlc3MiLCJzZXJ2aWNlX3Rva2VuX3N0YXR1cyI6ZmFsc2UsImlzX3dhcnAiOmZhbHNlLCJpc19nYXRld2F5IjpmYWxzZSwiZXhwIjoxNzkyMTY0NzI1LCJuYmYiOjE3OTIxNjQ0MjUsImlhdCI6MTc5MjE2NDQyNSwiYXV0aF9zdGF0dXMiOiJOT05FIiwibXRsc19hdXRoIjp7ImNlcnRfaXNzdWVyX2RuIjoiIiwiY2VydF9zZXJpYWwiOiIiLCJjZXJ0X2lzc3Vlcl9za2kiOiIiLCJjZXJ0X3ByZXNlbnRlZCI6ZmFsc2UsImNvbW1vbl9uYW1lIjoiIiwiYXV0aF9zdGF0dXMiOiJOT05FIn0sInJlYWxfY291bnRyeSI6Ik5MIiwiYXBwX3Nlc3Npb25faGFzaCI6IjQ4NzgwYTViZjI3NWJkMjJiOWY3MjNhNGJhMGFiMzAwNjYxZWIzNTQ3YTFjN2FiNjI2YThhNDdlMTllODUwNDEifQ.G7LhrO7qVzE8xQcHtfjoHt5MV_y5fDRYZdUn8l6UIUfGEJ4oJSYOYEbmSPZaLIwelSb8bW5riO9iiH2q_4N0w1XQNppq25k6k7aFn0lew_eCZ_XD99hGLJsexjFupAGwvqAMYz8l5Q5TgDZyUHcHChjZAHNOxJDpxDSOWoWEdRL-YE38iwWQMRkuuibxokjyKJ5Tb5BWbSr0MRCFliz0NyrAd5ZzlHQH9JXlmtqP81hgXaUu-I7z2Wu236iRj0hWyVIccl_SihCWhiTNTIPvzyJ37_a2QLxrllZj_V0OCLPwla_lnDjAwaW9sODg9d-MKGhk-dgblcQkwVQL7lm6PA&redirect_url=%2Fauth%2Faccess/security/report shows Turnstile to people who aren't signed in/-/kumo/1emzyjz.js -> 200/-/kumo/1tekldh.css -> 200

Check favicon and search metadata1s

##[group]Run set -ufor p in /favicon.ico /favicon.svg /favicon-48.png /apple-touch-icon.png /og-image.png /site.webmanifest /robots.txt /sitemap.xml; do  code=$(curl -sS -o /dev/null -w '%{http_code} %{content_type}' "https://$DIFFINERY_DOMAIN$p")  [[ "$code" == 200\ * ]] || { echo "::error::$p returned $code"; exit 1; }  echo "$p -> $code"donehome=$(curl -sS https://$DIFFINERY_DOMAIN/)for tag in 'rel="icon" href="/favicon.ico"' 'property="og:image"' 'rel="canonical"' 'application/ld+json'; do  grep -qF "$tag" <<<"$home" || { echo "::error::the home page is missing $tag"; exit 1; }doneecho "the home page carries the favicon, canonical, Open Graph and structured data tags"bm=$(curl -sS -D - -o /dev/null https://$DIFFINERY_DOMAIN/sitemap.xml | tr -d '\r' | sed -n 's/^x-d1-bookmark: //Ip')[ -n "$bm" ] || { echo "::error::D1 queries don't run in a session (no x-d1-bookmark header)"; exit 1; }echo "D1 sessions are on (bookmark $bm)"##[endgroup]/favicon.ico -> 200 image/x-icon/favicon.svg -> 200 image/svg+xml/favicon-48.png -> 200 image/png/apple-touch-icon.png -> 200 image/png/og-image.png -> 200 image/png/site.webmanifest -> 200 application/manifest+json/robots.txt -> 200 text/plain; charset=UTF-8/sitemap.xml -> 200 application/xml; charset=utf-8the home page carries the favicon, canonical, Open Graph and structured data tagsD1 sessions are on (bookmark 00000340-000051f3-00005106-14ade9661212d241ff3b34c1abce446e)

Post Run actions/setup-node@v40s

Cache hit occurred on the primary key node-cache-Linux-x64-pnpm-aa519d0d5d7e5a224fb440987e5331e1cb7b3a95e67805db372d6def9572f2b0, not saving cache.

Post Run pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b10s

Pruning is unnecessary.

Post Run actions/checkout@v40s

Removing persisted credentials

codician/diffinerypublic

Deploy to Cloudflare