Revert trigger promotion

Author: Sg312

.github/workflows/ci.yml

@@ -16,6 +16,7 @@ jobs:
     uses: ./.github/workflows/test-build.yml
     secrets: inherit
 
+<<<<<<< HEAD
   # Deploy Trigger.dev FIRST (right after test-build, before images)
   trigger-deploy:
     name: Deploy Trigger.dev
@@ -27,10 +28,12 @@ jobs:
       id-token: write
       contents: read
 
+=======
+>>>>>>> 27b05ad97 (Revert trigger promotion)
   # Build AMD64 images and push to ECR immediately (+ GHCR for main)
   build-amd64:
     name: Build AMD64
-    needs: trigger-deploy
+    needs: test-build
     if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/staging')
     runs-on: blacksmith-4vcpu-ubuntu-2404
     permissions:
@@ -122,7 +125,7 @@ jobs:
   # Build ARM64 images for GHCR (main branch only, runs in parallel)
   build-ghcr-arm64:
     name: Build ARM64 (GHCR Only)
-    needs: trigger-deploy
+    needs: test-build
     runs-on: linux-arm64-8-core
     if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     permissions:
@@ -170,6 +173,14 @@ jobs:
           provenance: false
           sbom: false
 
+  # Deploy Trigger.dev (after ECR images are pushed)
+  trigger-deploy:
+    name: Deploy Trigger.dev
+    needs: build-amd64
+    if: github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/staging')
+    uses: ./.github/workflows/trigger-deploy.yml
+    secrets: inherit
+
   # Create GHCR multi-arch manifests (only for main, after both builds)
   create-ghcr-manifests:
     name: Create GHCR Manifests

.github/workflows/trigger-deploy.yml

@@ -13,9 +13,6 @@ jobs:
       cancel-in-progress: false
     env:
       TRIGGER_ACCESS_TOKEN: ${{ secrets.TRIGGER_ACCESS_TOKEN }}
-    permissions:
-      id-token: write
-      contents: read
 
     steps:
       - name: Checkout code
@@ -34,44 +31,12 @@ jobs:
       - name: Install dependencies
         run: bun install
 
-      - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v4
-        with:
-          role-to-assume: ${{ github.ref == 'refs/heads/main' && secrets.AWS_ROLE_TO_ASSUME || secrets.STAGING_AWS_ROLE_TO_ASSUME }}
-          aws-region: ${{ github.ref == 'refs/heads/main' && secrets.AWS_REGION || secrets.STAGING_AWS_REGION }}
-
       - name: Deploy to Trigger.dev (Staging)
         if: github.ref == 'refs/heads/staging'
-        id: deploy-staging
         working-directory: ./apps/sim
-        env:
-          TRIGGER_ACCESS_TOKEN: ${{ secrets.TRIGGER_ACCESS_TOKEN }}
-        run: |
-          npx --yes trigger.dev@4.0.4 deploy -e staging --skip-promotion
-
-      - name: Store Staging version in Parameter Store
-        if: github.ref == 'refs/heads/staging'
-        run: |
-          aws ssm put-parameter \
-            --name "${{ secrets.TRIGGER_VERSION_SECRET_MANAGER_STAGING }}" \
-            --value "${{ steps.deploy-staging.outputs.deploymentVersion }}" \
-            --type "String" \
-            --overwrite
+        run: npx --yes trigger.dev@4.0.4 deploy -e staging
 
       - name: Deploy to Trigger.dev (Production)
         if: github.ref == 'refs/heads/main'
-        id: deploy-production
         working-directory: ./apps/sim
-        env:
-          TRIGGER_ACCESS_TOKEN: ${{ secrets.TRIGGER_ACCESS_TOKEN }}
-        run: |
-          npx --yes trigger.dev@4.0.4 deploy --skip-promotion
-
-      - name: Store Production version in Parameter Store
-        if: github.ref == 'refs/heads/main'
-        run: |
-          aws ssm put-parameter \
-            --name "${{ secrets.TRIGGER_VERSION_SECRET_MANAGER_PROD }}" \
-            --value "${{ steps.deploy-production.outputs.deploymentVersion }}" \
-            --type "String" \
-            --overwrite
+        run: npx --yes trigger.dev@4.0.4 deploy