From 7a08def43bbcdf7676bd4d36323582c621a3c697 Mon Sep 17 00:00:00 2001
From: Kevin Miao <kevin.miao@fingerprint.com>
Date: Tue, 8 Sep 2026 17:00:17 -0700
Subject: [PATCH] ci: deploy coverage report via GitHub Pages Actions artifact

---
 .github/workflows/coverage-report.yml | 33 +++++++++++++++++++++------
 1 file changed, 26 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/coverage-report.yml b/.github/workflows/coverage-report.yml
index a6a4d1e6..6563032d 100644
--- a/.github/workflows/coverage-report.yml
+++ b/.github/workflows/coverage-report.yml
@@ -5,11 +5,16 @@ on:
       - main
       - coverage # remove before merge to main
 
-permissions:
-  contents: write
+concurrency:
+  group: coverage-report-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
-  coverage-report:
+  build:
+    name: Build
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v7
       - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
@@ -33,8 +38,22 @@ jobs:
           output: htmlcov/badges.svg
           jsonPath: total.statements.pct
 
-      - name: Deploy 🚀
-        uses: JamesIves/github-pages-deploy-action@d92aa235d04922e8f08b40ce78cc5442fcfbfa2f # v4.8.0
+      - name: Upload GitHub Pages artifact 📦
+        uses: actions/upload-pages-artifact@v5
         with:
-          branch: gh-pages
-          folder: htmlcov
+          path: htmlcov
+
+  deploy-pages:
+    name: Deploy to GitHub Pages 🚀
+    needs: build
+    runs-on: ubuntu-latest
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    permissions:
+      pages: write
+      id-token: write
+    steps:
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v5