chore(ci): remove provider upgrades from deploy workflow

Author: j4y

.github/workflows/deploy.yml

@@ -40,13 +40,17 @@ jobs:
         aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
         aws-region: us-east-1
 
-    - name: Update Terraform State and Providers
+    - name: Initialize Terragrunt (backend + providers)
+      # terragrunt init:
+      # - Configures the remote backend (S3 + DynamoDB)
+      # - Downloads provider versions pinned in the lockfile
+      # - Prepares the working directory for plan/apply
       uses: gruntwork-io/terragrunt-action@v3
       env:
         TERRAGRUNT_DISABLE_COPY: true
       with:
         tg_dir: ${{ env.working_dir }}
-        tg_command: init --upgrade
+        tg_command: init
 
     - name: Terragrunt Plan
       uses: gruntwork-io/terragrunt-action@v3
@@ -89,22 +93,6 @@ jobs:
     - name: Invalidate Cloudfront
       run: aws cloudfront create-invalidation --distribution-id ${{ steps.terragrunt_output.outputs.distribution_id }} --paths "/*"
 
-    - name: Auto-commit updated Terraform lockfile
-      run: |
-        git config --global user.email "actions@github.com"
-        git config --global user.name "GitHub Actions"
-
-        # Only commit the module lockfile — live lockfiles must never exist
-        git add terragrunt/modules/website/.terraform.lock.hcl
-
-        if git diff --cached --quiet; then
-          echo "No lockfile changes to commit."
-        else
-          echo "Committing updated lockfile..."
-          git commit -m "chore(terraform): update provider lock file"
-          git push
-        fi
-
     - name: Check for uncommitted changes
       run: |
         git config --global --add safe.directory "$GITHUB_WORKSPACE"
@@ -126,15 +114,3 @@ jobs:
           echo "✅ No uncommitted changes after deploy."
         fi
 
-
-
-    - name: Upload lock files on failure
-      if: failure()
-      uses: actions/upload-artifact@v7
-      with:
-        name: terraform-lock-files
-        path: |
-          terraform/website/.terraform.lock.hcl
-          terragrunt/live/website/.terraform.lock.hcl
-          terragrunt/dev/website/.terraform.lock.hcl
-        if-no-files-found: ignore