Add image-versions-live shortcode for live version-status data

[catplat]

Summary

Adds a new Hugo shortcode, image-versions-live, that fetches an image's version data live from meta.upsun.com at build time and lists versions matching a given Upsun internal_status (active, sunset, or decommissioned).

Unlike the existing image-versions shortcode, this reads no local data file (shared/data/registry.json) — it queries https://meta.upsun.com/images/<image> directly, so it can serve the Active/Sunset/Decommissioned classification for images the docs registry pipeline doesn't yet track.

No content in this repo calls the shortcode yet. It's added standalone here so it can be reviewed on its own merits, independent of any page that adopts it. See #5710 for the first (and currently only) consumer.

Why a live fetch, not the existing data pipeline

shared/data/registry.json only tracks supported/deprecated per image — it has no equivalent to Upsun's internal_status (active/sunset/decommissioned) field. Getting that data into the static registry would require changes to an external tool (meta-version-updater) that we don't own. The public meta.upsun.com/images/:id endpoint already returns internal_status today, unauthenticated, for every image — so this shortcode reads it directly instead.

Manual verification

This repo has no existing pattern for testing a shortcode in isolation (no exampleSite, no fixture pages), so this was verified manually against real data:

• curl https://meta.upsun.com/images/redis confirmed the endpoint is public and returns upsun.status/upsun.internal_status per version.

• A local Hugo build against a scratch test page rendered:

  • Active: 8.8, 8.0, 7.2, 6.2
  • Sunset: 7.0, 6.0, 5.0
  • Decommissioned: 4.0, 3.2, 3.0, 2.8

  — matching the real API data exactly, correctly sorted descending.

• Cold-cache build adds ~730ms (one live HTTP round trip, deduped across repeated calls to the same URL within a build); warm-cache (Hugo's local resource cache) is ~25ms.

Trade-offs worth knowing about (for reviewers)

• Build-time network dependency: every build of a page using this shortcode needs network access to meta.upsun.com. If that endpoint is down or slow during CI, the build could fail or hang, depending on timeout config.
• No PR-review checkpoint for content changes: every other version-status list on this site is git-committed and reviewed via a PR (shared/data/registry.json, refreshed by a daily bot). A page using this shortcode can change its rendered content on every rebuild with no corresponding diff to review.
• Grid-only: the public API has no per-environment (Grid vs. Dedicated Gen 2/3) breakdown — confirmed by testing ?platform= and ?environment= query params, which are silently ignored. This shortcode can only ever answer for the flat/Grid-equivalent classification.

Merge order

This is the first of three related PRs. Merge this one first — the content PR depends on it.

1. This PR (infra) — merge first
2. Serve Redis Grid version statuses live, split out Dedicated Gen 2 #5710 — stacked on this branch, adds the shortcode's first real usage in redis.md
3. Add runtime/service upgrade guide, de-emphasize Redis as one-off #5711 — independent, no dependency on the other two, can merge any time

Test plan

• Confirm security.http config in sites/platform/config/_default/config.yaml permits the GET request to meta.upsun.com in CI (not just locally)
• Local hugo build succeeds with no template errors

[github-actions]

Your Upsun Fixed environment has successfully deployed. 🚀

See the site:

• Upsun Fixed docs
• Upsun docs

[Copilot]

Pull request overview

This PR introduces a new Hugo shortcode, image-versions-live, intended to render Upsun image versions by fetching live version metadata from https://meta.upsun.com/images/<image> at build time, filtering by upsun.internal_status (active/sunset/decommissioned).

Changes:

• Added image-versions-live shortcode that uses resources.GetRemote + transform.Unmarshal to fetch and parse remote image version data.
• Implemented filtering by upsun.internal_status and rendering as an HTML list (or “None available” when empty).

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.