Fix release and build warnings

.github/workflows/deploy.yml

@@ -28,12 +28,14 @@ jobs:
       - run: pnpm build
 
       - name: Deploy to Cloudflare Pages
-        id: deploy
-        uses: cloudflare/wrangler-action@v3
-        with:
-          apiToken: ${{ secrets.CF_API_TOKEN }}
-          accountId: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
-          command: pages deploy dist/ --project-name=chess-9a0 --branch=${{ github.head_ref || github.ref_name }}
+        env:
+          CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CF_API_TOKEN }}
+        run: >-
+          pnpm exec wrangler pages deploy dist/
+          --project-name=chess-9a0
+          --branch=${{ github.head_ref || github.ref_name }}
+          --commit-hash=${{ github.sha }}
 
       - name: Smoke production
         run: curl --fail --silent --show-error --location --output /dev/null --retry 5 --retry-delay 5 --max-time 20 https://chess.significanthobbies.com/

docs/operations/deployment.md

@@ -13,8 +13,9 @@ proxying and the dormant Vercel path were retired on 2026-08-01.
 `.github/workflows/deploy.yml` — **manual only** (`workflow_dispatch`).
 
 1. Checkout, pnpm install (frozen lockfile, `--ignore-scripts`), `pnpm build`.
-2. `cloudflare/wrangler-action@v3` runs
-   `pages deploy dist/ --project-name=chess-9a0 --branch=<branch>`.
+2. The exact development dependency `wrangler@4.120.0` runs
+   `pages deploy dist/ --project-name=chess-9a0 --branch=<branch>
+   --commit-hash=<git-sha>`.
 3. Needs the `CF_API_TOKEN` secret and `CLOUDFLARE_ACCOUNT_ID` Actions variable.
 
 The workflow uploads only `dist/`; local CLI coaching is development-only.

package.json

@@ -44,6 +44,15 @@
     "knip": "^6.29.0",
     "tailwindcss": "^4.3.3",
     "typescript": "6.0.3",
-    "vite": "8.1.5"
+    "vite": "8.1.5",
+    "wrangler": "4.120.0"
+  },
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "workerd"
+    ],
+    "overrides": {
+      "dompurify": "3.4.13"
+    }
   }
 }

playwright.config.ts

@@ -1,5 +1,7 @@
 import { defineConfig } from '@playwright/test';
 
+delete process.env.NO_COLOR;
+
 const baseURL = 'http://127.0.0.1:5173';
 
 export default defineConfig({