website: Use latest release rather than edge

Signed-off-by: Charlie Egan <charlie@styra.com>

Author: Charlie Egan

Makefile

@@ -462,8 +462,11 @@ else
 release-ci: push-image push-manifest-list-latest
 endif
 
-.PHONY: netlify
-netlify: docs-clean docs-ci docs-build
+.PHONY: netlify-latest
+netlify-latest: docs-clean docs-ci docs-build-latest
+
+.PHONY: netlify-edge
+netlify-edge: docs-clean docs-ci docs-build
 
 # Kept for compatibility. Use `make fuzz` instead.
 .PHONY: check-fuzz

docs/Makefile

@@ -14,6 +14,21 @@ dev:
 build:
 	npx docusaurus build
 
+.PHONY: build-latest
+build-latest:
+	@if ! git diff --quiet HEAD -- || ! git diff --cached --quiet; then \
+		echo "Latest release build must be done without working changes"; \
+		git status; \
+		exit 1; \
+	fi
+	git fetch --tags origin
+	$(eval CURRENT_REF := $(shell git rev-parse HEAD))
+	LATEST_TAG=$(git tag --sort=-version:refname | grep -E '^v[0-9]+\.[0-9]+\.[0-9]+$' | head -1) && \
+	[ -n "$LATEST_TAG" ] || (echo "No valid release tag found (expected format: v1.2.3)" && exit 1) && \
+	git checkout $LATEST_TAG && \
+	BUILD_VERSION=$LATEST_TAG npx docusaurus build && \
+	git checkout $(CURRENT_REF)
+
 .PHONY: clean
 clean:
 	rm -rf build .docusaurus

netlify.toml

@@ -1,6 +1,6 @@
 [build]
 publish = "docs/build"
-command = "make netlify"
+command = "make netlify-latest"
 edge_functions = "docs/functions"
 
 [build.environment]
@@ -9,6 +9,9 @@ NODE_VERSION = "22.15.0"
 # secret scan
 SECRETS_SCAN_OMIT_PATHS = "v1/test/cases,v1/topdown/crypto_test.go"
 
+[context.deploy-preview]
+command = "make netlify-latest"
+
 [[edge_functions]]
 # this path should not be changed as various external sites depend on it for OPA
 # badges.