From 49067a1a6650add988ddb5ed150f0f7d4b137eb5 Mon Sep 17 00:00:00 2001 From: Thanatat Tamtan Date: Mon, 22 Jun 2026 15:44:22 +0700 Subject: [PATCH] docs(static-sites): clarify release URLs inherit the deployment's access gate MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The "Per-release immutable URLs" section said both URLs are "public… shareable but unlisted, the same as the default URL". That's accurate for public sites but misleading for access-gated ones: a pinned release URL now inherits the deployment's access policy, so a "Require Google login" site's release URLs are gated by the same login (a private site is never exposed through them). Reword to state the access posture is the same as the default URL, public or gated. Co-Authored-By: Claude Opus 4.8 (1M context) Claude-Session: https://claude.ai/code/session_01YYMGjvqWELm2ctgKamiMSS --- content/deployments/static-sites.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/content/deployments/static-sites.md b/content/deployments/static-sites.md index 0b0fdcd..7f277ce 100644 --- a/content/deployments/static-sites.md +++ b/content/deployments/static-sites.md @@ -153,9 +153,13 @@ A static deployment is reachable at **two** hostnames: or to compare two builds side by side. Both are returned by `deployment.get` (`url` and `releaseUrl`) and shown on the -console's deployment **Details** page. Both are public and content-addressed — a -release URL can only ever serve its own build's files — so treat them as -shareable-but-unlisted, the same as the default URL. +console's deployment **Details** page. A release URL carries the **same access +posture as the default URL**: for a public site it's public (and +content-addressed — it can only ever serve its own build's files — so treat it +as shareable-but-unlisted); for a site with +[access control](/deployments/access/) ("Require Google login") the release URL +is gated by the same login, so a private site is **never** exposed through its +per-release URLs. {{< callout type="note" >}} **Release URLs are immutable but not eternal.** A release URL stays live only