From 44552f24997e70454f1d19b04282708b1aa2e173 Mon Sep 17 00:00:00 2001
From: Daniel Norman <daniel@norman.life>
Date: Wed, 14 Oct 2026 10:27:23 +0200
Subject: [PATCH] chore: update ipfs-deploy-action

---
 .github/workflows/deploy.yml | 25 +++++++++++++++++++------
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 1ec0eda4..0e74a110 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -44,16 +44,29 @@ jobs:
           run-id: ${{ github.event.workflow_run.id }}
           github-token: ${{ github.token }}
 
-      - name: Deploy to IPFS
-        uses: ipshipyard/ipfs-deploy-action@v1
+      - name: Create IPFS CAR from build
+        uses: ipshipyard/ipfs-deploy-action@v3
         id: deploy
         with:
           path-to-deploy: ${{ env.BUILD_PATH }}
-          cluster-url: "/dnsaddr/ipfs-websites.collab.ipfscluster.io"
-          cluster-user: ${{ secrets.CLUSTER_USER }}
-          cluster-password: ${{ secrets.CLUSTER_PASSWORD }}
-          cluster-pin-expire-in: ${{ github.event.workflow_run.head_branch != 'main' && '2160h' || '' }}
           github-token: ${{ github.token }}
+          set-pr-comment: 'true'
+          set-github-status: 'true'
+
+      # Filebase unpacks and pins the CAR because of the import=car metadata
+      - name: Upload CAR to Filebase
+        env:
+          AWS_ACCESS_KEY_ID: ${{ secrets.FILEBASE_ACCESS_KEY }}
+          AWS_SECRET_ACCESS_KEY: ${{ secrets.FILEBASE_SECRET_KEY }}
+          AWS_REGION: us-east-1 # AWS CLI needs a region to sign; Filebase ignores it
+          FILEBASE_BUCKET: ${{ secrets.FILEBASE_BUCKET }}
+          CID: ${{ steps.deploy.outputs.cid }}
+          CAR_PATH: ${{ steps.deploy.outputs.car-path }}
+        run: |
+          OBJECT_KEY="${GITHUB_REPOSITORY//\//-}-${GITHUB_SHA:0:7}-${CID}.car"
+          aws --endpoint https://s3.filebase.com s3 cp \
+            "$CAR_PATH" "s3://${FILEBASE_BUCKET}/${OBJECT_KEY}" \
+            --metadata 'import=car'
 
   dnslink-update:
     runs-on: ubuntu-latest