fix(MCP): deploy the released image instead of redeploying the old one

[germangarces]

The MCP task definition now points at a fixed image version (set by Pulumi) instead of a moving latest tag. The old deploy step only forced a restart, so it kept running the same pinned version — new releases never went live. This makes the deploy step actually put the released image onto the service.

Changes

• Deploy now updates the service to run the newly released image
• Shared the deploy steps between staging and production so they can't drift apart

Before merge

• Needs the matching AWS permissions, added in Pulumi PR Flagsmith/pulumi#288. That must land first, or the deploy step will fail.

Review effort: 2/5

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

3 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs	Ignored	Preview	Jul 24, 2026 10:19am
flagsmith-frontend-preview	Ignored	Preview	Jul 24, 2026 10:19am
flagsmith-frontend-staging	Ignored	Preview	Jul 24, 2026 10:19am

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: ff26f408-a5ef-447a-90cd-99b542f173b3

📥 Commits

Reviewing files that changed from the base of the PR and between 215f69f and e974e14.

📒 Files selected for processing (2)

• .github/actions/mcp-deploy-ecs/action.yml
• .github/workflows/mcp-docker-build-publish-deploy.yml

---

📝 Walkthrough

Walkthrough

Adds a reusable composite GitHub Action for updating an ECS service from its live task definition, replacing a selected container image, and waiting for deployment stability. The MCP Docker workflow now exposes staging and production image outputs, prioritises the staging SHA tag, and uses the shared action for both deployment paths instead of inline AWS ECS commands.

Estimated code review effort: 3 (Moderate) | ~20 minutes

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Docker builds report

Image	Build Status	Security report
ghcr.io/flagsmith/flagsmith-api-test:pr-8093	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-e2e:pr-8093	Finished ✅	Skipped
ghcr.io/flagsmith/flagsmith-frontend:pr-8093	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-api:pr-8093	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith:pr-8093	Finished ✅	Results ✅
ghcr.io/flagsmith/flagsmith-private-cloud:pr-8093	Finished ✅	Results ✅

[coderabbitai]

Actionable comments posted: 2

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 90780f7a-28b0-4384-86df-35e636a3a4d0

📥 Commits

Reviewing files that changed from the base of the PR and between 44b2464 and 215f69f.

📒 Files selected for processing (2)

• .github/actions/mcp-deploy-ecs/action.yml
• .github/workflows/mcp-docker-build-publish-deploy.yml

[github-actions]

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #18697 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 3 passed

Details

 3 tests across 3 suites
 6.6 seconds
 e974e14
 🔄 Run: #18697 (attempt 1)

🗂️ Previous results

✅ private-cloud · depot-ubuntu-latest-16 — run #18697 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 3 passed

Details

 3 tests across 3 suites
 32.2 seconds
 e974e14
 🔄 Run: #18697 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #18697 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 1 passed

Details

 1 test across 1 suite
 41.2 seconds
 e974e14
 🔄 Run: #18697 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #18697 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 34.4 seconds
 e974e14
 🔄 Run: #18697 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-16 — run #18696 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 54.7 seconds
 215f69f
 🔄 Run: #18696 (attempt 1)

✅ private-cloud · depot-ubuntu-latest-arm-16 — run #18696 (attempt 1)

Playwright Test Results (private-cloud - depot-ubuntu-latest-arm-16)

 3 passed

Details

 3 tests across 3 suites
 37.5 seconds
 215f69f
 🔄 Run: #18696 (attempt 1)

✅ oss · depot-ubuntu-latest-arm-16 — run #18696 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-arm-16)

 2 passed

Details

 2 tests across 2 suites
 4.5 seconds
 215f69f
 🔄 Run: #18696 (attempt 1)

✅ oss · depot-ubuntu-latest-16 — run #18696 (attempt 1)

Playwright Test Results (oss - depot-ubuntu-latest-16)

 1 passed

Details

 1 test across 1 suite
 33.3 seconds
 215f69f
 🔄 Run: #18696 (attempt 1)

[github-actions]

Visual Regression

19 screenshots compared. See report for details.
View full report

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.69%. Comparing base (1792fb2) to head (e974e14).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8093   +/-   ##
=======================================
  Coverage   98.69%   98.69%           
=======================================
  Files        1525     1525           
  Lines       60605    60605           
=======================================
  Hits        59817    59817           
  Misses        788      788           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[khvn26]

LGTM