chore: bump version to 2.3.9 and harden deploy pipeline

.gitea/workflows/deploy.yml

@@ -121,16 +121,23 @@ jobs:
           # ⏳ Wait for Upstream Packages/Images if Tagged
           if [[ "${{ github.ref_type }}" == "tag" ]]; then
             echo "🔎 Checking for @mintel dependencies in package.json..."
-            # Extract any @mintel/ version (they should be synced in monorepo)
+            # Extract @mintel versions, cleaning caret/tilde, and filtering out workspace refs
-            UPSTREAM_VERSION=$(grep -o '"@mintel/.*": "[^"]*"' package.json | grep -v "next-utils" | cut -d'"' -f4 | sed 's/\^//; s/\~//' | sort -V | tail -1)
+            VERSIONS=$(grep "@mintel/" package.json | sed -E 's/.*: "[^0-9]*([0-9]+\.[0-9]+\.[0-9]+).*/\1/' | sort -u)
-            TAG_TO_WAIT="v$UPSTREAM_VERSION"
+            echo "Found @mintel versions in package.json: $VERSIONS"
             
-            if [[ -n "$UPSTREAM_VERSION" && "$UPSTREAM_VERSION" != "workspace:"* ]]; then
+            UPSTREAM_VERSION=$(echo "$VERSIONS" | sort -V | tail -1)
+            
+            if [[ -n "$UPSTREAM_VERSION" ]]; then
+              TAG_TO_WAIT="v$UPSTREAM_VERSION"
+              echo "🔎 Verifying tag $TAG_TO_WAIT in mmintel/at-mintel..."
+              
               # 1. Discovery (Works without token for public repositories)
               UPSTREAM_SHA=$(git ls-remote --tags https://git.infra.mintel.me/mmintel/at-mintel.git "$TAG_TO_WAIT" | grep "$TAG_TO_WAIT" | tail -n1 | awk '{print $1}')
               
               if [[ -z "$UPSTREAM_SHA" ]]; then
                 echo "❌ Error: Tag $TAG_TO_WAIT not found in mmintel/at-mintel."
+                echo "Full @mintel dependencies in package.json:"
+                grep "@mintel/" package.json
                 exit 1
               fi
               echo "✅ Tag verified: Found upstream SHA $UPSTREAM_SHA for $TAG_TO_WAIT"

package.json

@@ -160,7 +160,7 @@
     "prepare": "husky",
     "preinstall": "npx only-allow pnpm"
   },
-  "version": "2.3.8",
+  "version": "2.3.9",
   "pnpm": {
     "onlyBuiltDependencies": [
       "@parcel/watcher",