From 849c4808b8e42cc47aa3f2359246bd0e3917cb8c Mon Sep 17 00:00:00 2001
From: Marc Mintel <marc@mintel.me>
Date: Thu, 9 Apr 2026 22:00:05 +0200
Subject: [PATCH] chore: bump version to 2.3.9 and harden deploy pipeline

---
 .gitea/workflows/deploy.yml | 15 +++++++++++----
 package.json                |  2 +-
 2 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/.gitea/workflows/deploy.yml b/.gitea/workflows/deploy.yml
index f2d7ef45..28715372 100644
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -121,16 +121,23 @@ jobs:
           # ⏳ Wait for Upstream Packages/Images if Tagged
           if [[ "${{ github.ref_type }}" == "tag" ]]; then
             echo "🔎 Checking for @mintel dependencies in package.json..."
-            # Extract any @mintel/ version (they should be synced in monorepo)
-            UPSTREAM_VERSION=$(grep -o '"@mintel/.*": "[^"]*"' package.json | grep -v "next-utils" | cut -d'"' -f4 | sed 's/\^//; s/\~//' | sort -V | tail -1)
-            TAG_TO_WAIT="v$UPSTREAM_VERSION"
+            # Extract @mintel versions, cleaning caret/tilde, and filtering out workspace refs
+            VERSIONS=$(grep "@mintel/" package.json | sed -E 's/.*: "[^0-9]*([0-9]+\.[0-9]+\.[0-9]+).*/\1/' | sort -u)
+            echo "Found @mintel versions in package.json: $VERSIONS"
             
-            if [[ -n "$UPSTREAM_VERSION" && "$UPSTREAM_VERSION" != "workspace:"* ]]; then
+            UPSTREAM_VERSION=$(echo "$VERSIONS" | sort -V | tail -1)
+            
+            if [[ -n "$UPSTREAM_VERSION" ]]; then
+              TAG_TO_WAIT="v$UPSTREAM_VERSION"
+              echo "🔎 Verifying tag $TAG_TO_WAIT in mmintel/at-mintel..."
+              
               # 1. Discovery (Works without token for public repositories)
               UPSTREAM_SHA=$(git ls-remote --tags https://git.infra.mintel.me/mmintel/at-mintel.git "$TAG_TO_WAIT" | grep "$TAG_TO_WAIT" | tail -n1 | awk '{print $1}')
               
               if [[ -z "$UPSTREAM_SHA" ]]; then
                 echo "❌ Error: Tag $TAG_TO_WAIT not found in mmintel/at-mintel."
+                echo "Full @mintel dependencies in package.json:"
+                grep "@mintel/" package.json
                 exit 1
               fi
               echo "✅ Tag verified: Found upstream SHA $UPSTREAM_SHA for $TAG_TO_WAIT"
diff --git a/package.json b/package.json
index 7fbc7308..2d51f469 100644
--- a/package.json
+++ b/package.json
@@ -160,7 +160,7 @@
     "prepare": "husky",
     "preinstall": "npx only-allow pnpm"
   },
-  "version": "2.3.8",
+  "version": "2.3.9",
   "pnpm": {
     "onlyBuiltDependencies": [
       "@parcel/watcher",