Roll back to a previous production deploy and lock/unlock publishing on Netlify (UI, restoreSiteDeploy API, lock/unlock deploy API)

Documented steps

1. Auth: Netlify UI session (site collaborator) for the UI method; Personal access token via Authorization: Bearer <token> for the API method
2. UI rollback: open the site's Deploys tab, click into the previous successful deploy you want live, and click Publish deploy — this is instantaneous and does not trigger a new build, it just republishes that existing atomic deploy
3. API rollback: curl -X POST -H "Authorization: Bearer YOUR_TOKEN" https://api.netlify.com/api/v1/sites/{site_id}/deploys/{deploy_id}/restore (operation restoreSiteDeploy) — or via CLI: netlify api restoreSiteDeploy --data '{"site_id": "SITE_ID", "deploy_id": "DEPLOY_ID"}'
4. To stop a Git-connected site from automatically overwriting your rollback on the next push, lock publishing: in the Deploys tab select Lock to stop auto publishing (new builds still run but won't auto-publish to production)
5. Equivalent via API/CLI: netlify api lockDeploy --data '{"deploy_id": "DEPLOY_ID"}' (POST /api/v1/deploys/{deploy_id}/lock) to pin production to that specific deploy
6. To resume normal auto-publishing later, in the Deploys tab select Unlock to start auto publishing, or call netlify api unlockDeploy --data '{"deploy_id": "DEPLOY_ID"}' (POST /api/v1/deploys/{deploy_id}/unlock)
7. To discover the generic CLI wrapper's available method names (including restoreSiteDeploy/lockDeploy/unlockDeploy) run netlify api --list, and invoke any of them with netlify api <apiMethod> --data '<json>'
8. Official docs: https://docs.netlify.com/deploy/manage-deploys/manage-deploys-overview/ ; https://open-api.netlify.com/ ; https://cli.netlify.com/commands/api