fix(netlify): trigger master deploys on actual source changes (#3195)

Author: drewstone

apps/leaderboard/netlify.toml

@@ -2,8 +2,13 @@
   publish = "dist/apps/leaderboard"
   command = "yarn nx build leaderboard"
 
-  # If the branch is not master, continue the build process
-  # If the branch is master, check if the project's CHANGELOG.md file has changed
-  # If the CHANGELOG.md file has changed, continue the build process,
-  # Otherwise, stop the build process
-  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/leaderboard/CHANGELOG.md && exit 0 || exit 1"
+  # Trigger a master deploy whenever the app's own source, the shared
+  # libs it consumes, or the workspace dep manifest changes. The previous
+  # version gated on apps/leaderboard/CHANGELOG.md only, which silently
+  # cancelled every push that wasn't a release-PR — leaderboard had
+  # never deployed before we caught it. CHANGELOG.md is now implicitly
+  # covered (it's inside apps/leaderboard/), and any source/config/
+  # lockfile change also re-triggers.
+  #
+  # Non-master branches always build (gives PR-preview deploys).
+  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/leaderboard/ libs/ package.json yarn.lock tsconfig.base.json nx.json && exit 0 || exit 1"

apps/tangle-cloud/netlify.toml

@@ -2,6 +2,17 @@
   publish = "dist/apps/tangle-cloud"
   command = "yarn nx build tangle-cloud"
 
+  # Trigger a master deploy whenever the app's own source, the shared
+  # libs it consumes, or the workspace dep manifest changes. The previous
+  # version gated on apps/tangle-cloud/CHANGELOG.md only, which silently
+  # cancelled every push that wasn't a release-PR — a year of overhaul
+  # work piled up un-deployed before we caught it. CHANGELOG.md is now
+  # implicitly covered (it's inside apps/tangle-cloud/), and any source/
+  # config/lockfile change also re-triggers.
+  #
+  # Non-master branches always build (gives PR-preview deploys).
+  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/tangle-cloud/ libs/ package.json yarn.lock tsconfig.base.json nx.json && exit 0 || exit 1"
+
 # ─── Per-context environment ───────────────────────────────────────────
 #
 # Vite reads VITE_* vars at build time and inlines them into the bundle,
@@ -28,12 +39,6 @@
   # Same default for any non-master branch deploy (e.g. staging).
   VITE_BLUEPRINT_IFRAME_ENABLED = "true"
 
-  # If the branch is not master, continue the build process
-  # If the branch is master, check if the project's CHANGELOG.md file has changed
-  # If the CHANGELOG.md file has changed, continue the build process,
-  # Otherwise, stop the build process
-  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/tangle-cloud/CHANGELOG.md && exit 0 || exit 1"
-
 # ─── Security headers ───────────────────────────────────────────────────
 #
 # Scope is intentionally narrow: we set ONLY the headers needed to harden

apps/tangle-dapp/netlify.toml

@@ -2,11 +2,16 @@
   publish = "dist/apps/tangle-dapp"
   command = "yarn nx build tangle-dapp"
 
-  # If the branch is not master, continue the build process
-  # If the branch is master, check if the project's CHANGELOG.md file has changed
-  # If the CHANGELOG.md file has changed, continue the build process,
-  # Otherwise, stop the build process
-  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/tangle-dapp/CHANGELOG.md && exit 0 || exit 1"
+  # Trigger a master deploy whenever the app's own source, the shared
+  # libs it consumes, or the workspace dep manifest changes. The previous
+  # version gated on apps/tangle-dapp/CHANGELOG.md only, which silently
+  # cancelled every push that wasn't a release-PR — production was stuck
+  # on the August 2025 release until we caught it. CHANGELOG.md is now
+  # implicitly covered (it's inside apps/tangle-dapp/), and any source/
+  # config/lockfile change also re-triggers.
+  #
+  # Non-master branches always build (gives PR-preview deploys).
+  ignore = "[ \"$BRANCH\" != \"master\" ] && exit 1 || git diff --quiet $CACHED_COMMIT_REF $COMMIT_REF -- apps/tangle-dapp/ libs/ package.json yarn.lock tsconfig.base.json nx.json && exit 0 || exit 1"
 
 # ─── Cache headers ──────────────────────────────────────────────────────
 #