From f8d6ec117cb5e1790149a77a41a28846365a673c Mon Sep 17 00:00:00 2001
From: Den Delimarsky <53200638+localden@users.noreply.github.com>
Date: Thu, 19 Mar 2026 04:34:35 -0700
Subject: [PATCH] Enable --refresh on pulumi up to detect drift (#83)

GitHub org invitations expire after 7 days if not accepted. When that
happens, Pulumi state still shows the TeamMembership as healthy and
reports 'unchanged' on every deploy, so the user silently stays out of
the team forever.

Adding --refresh makes pulumi read actual GitHub state before diffing,
so expired memberships are detected and recreated (resending the invite).

Currently affected: liady, antonpk1, keithagroves all have expired
invites and are missing from their configured teams.

:house: Remote-Dev: homespace
---
 Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/Makefile b/Makefile
index 1d2d627..324ab1b 100644
--- a/Makefile
+++ b/Makefile
@@ -15,5 +15,5 @@ preview: login ## Preview infrastructure changes
 refresh: login ## Refresh state to match reality
 	PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi refresh --yes --stack prod
 
-up: login ## Deploy infrastructure
-	PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi up --yes --stack prod
+up: login ## Deploy infrastructure (with refresh to detect drift, e.g. expired org invites)
+	PULUMI_CONFIG_PASSPHRASE_FILE=passphrase.prod.txt pulumi up --refresh --yes --stack prod