build(deps): pin dependencies (#1227) #940

	name: Deploy to GKE

	on:
	push:
	branches: [main]
	paths:
	- .github/workflows/deploy.yml
	- k8s/**
	- '!k8s/overlays/development/**'

	jobs:
	build-publish-deploy:
	name: Build, Publish, and Deploy
	runs-on: ubuntu-24.04
	permissions:
	contents: read
	id-token: write

	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

	- name: Authenticate to GCP
	uses: google-github-actions/auth@6fc4af4b145ae7821d527454aa9bd537d1f2dc5f # v2
	with:
	workload_identity_provider: ${{ secrets.GOOGLE_WORKLOAD_IDENTITY_PROVIDER }}
	service_account: ${{ secrets.GOOGLE_SERVICE_ACCOUNT }}

	- name: Set up GKE
	uses: google-github-actions/get-gke-credentials@9025e8f90f2d8e0c3dafc3128cc705a26d992a6a # v2
	with:
	cluster_name: ${{ secrets.GKE_CLUSTER_NAME }}
	location: ${{ secrets.GOOGLE_REGION }}

	- name: Build, and Publish
	uses: docker://gcr.io/k8s-skaffold/skaffold:v2.13.2
	with:
	args: build --file-output tags.json --profile production
	entrypoint: skaffold

	- name: Deploy
	uses: docker://gcr.io/k8s-skaffold/skaffold:v2.13.2
	with:
	args: deploy --build-artifacts tags.json --profile production
	entrypoint: skaffold

Provide feedback