Commit graph

63 commits

Author SHA1 Message Date
dependabot[bot]
947861769b
chore(deps): bump boto3 (#58)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 20:12:13 +00:00
dependabot[bot]
9a1d14fdd2
chore(deps): bump the minor-and-patch group with 4 updates (#57)
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github).


Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 20:11:24 +00:00
dependabot[bot]
473ed3cb61
chore(deps): bump boto3 (#56)
Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 16:10:45 -04:00
dependabot[bot]
dcce084576
chore(deps): bump the minor-and-patch group with 3 updates (#55)
Bumps the minor-and-patch group with 3 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github).


Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](3f74677422...7ac3528750)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](3f74677422...7ac3528750)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](3f74677422...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 15:12:56 -04:00
dependabot[bot]
d54e8c977b
chore(deps): bump boto3 (#53)
Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 19:10:13 +00:00
dependabot[bot]
42d675cc7b
chore(deps): bump boto3 (#54)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 15:09:26 -04:00
dependabot[bot]
fc1422f03f
chore(deps): bump hashicorp/aws from 5.100.0 to 6.57.1 in /terraform (#51)
Bumps [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) from 5.100.0 to 6.57.1.
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-provider-aws/compare/v5.100.0...v6.57.1)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-version: 6.57.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 16:19:02 -04:00
dependabot[bot]
e8a91c68ec
chore(deps): bump hashicorp/setup-terraform from 3.0.0 to 4.0.1 (#50)
Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) from 3.0.0 to 4.0.1.
- [Release notes](https://github.com/hashicorp/setup-terraform/releases)
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md)
- [Commits](a1502cd9e7...dfe3c3f878)

---
updated-dependencies:
- dependency-name: hashicorp/setup-terraform
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 16:19:02 -04:00
dependabot[bot]
ae5e2e4f37
chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#49)
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.4.0 to 7.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](11d5960a32...3d3c42e5aa)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-05 16:19:02 -04:00
Adam Moussa
435b7e3464
chore(afi): post-cutover hygiene after hcp migration (#48)
Remove stale SAM template and cutover docs, disable SAM validate, add
terraform Dependabot, and complete multi-platform provider lock hashes.
2026-08-05 15:54:51 -04:00
Adam Moussa
c35896e970
Merge pull request #47 from Sea-Haven-Industries/feature/hcp-terraform-migration
feat(iac): add hcp terraform config for prod migration (PLAT-56)
2026-08-05 12:51:07 -04:00
ef3b2d000d
chore(ci): pin checkout and setup-terraform actions to release SHA
Signed-off-by: Adam Moussa <adam@seahavenind.com>
2026-08-05 12:20:46 -04:00
d853ae8eaf
fix(iac): ship lambda zips via s3 for hcp plan/apply split
HCP plan and apply workers do not share disk; carry archive bytes in the
plan with content_base64 and add IAM depends_on before function create.
2026-08-05 12:18:30 -04:00
8f745ce898
feat(iac): add hcp terraform config for prod migration
Migrate afi-backup-monitor deploy path from SAM CD to HCP Terraform
parity config; freeze mgmt by removing push-to-main SAM deploy.
2026-08-05 12:01:05 -04:00
dependabot[bot]
53fac0a224
Merge pull request #42 from Sea-Haven-Industries/dependabot/github_actions/minor-and-patch-033c67f902
Some checks failed
Deploy / deploy (push) Has been cancelled
chore(deps): bump the minor-and-patch group with 4 updates
2026-08-04 18:03:21 -04:00
dependabot[bot]
06ad63f370
chore(deps): bump boto3 (#44)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.58 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:03:20 -04:00
dependabot[bot]
f639833809
chore(deps): bump boto3 (#43)
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.58 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.62
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:03:20 -04:00
Adam Moussa
8bc32bd185
Merge pull request #45 from Sea-Haven-Industries/chore/update-pr-policy
Some checks are pending
Deploy / deploy (push) Waiting to run
ci(policy): bump callable-pr-policy pin to v1.0.6 (PLAT-64)
2026-08-04 15:49:22 -04:00
80c0a8a47a
chore: update policy workflow to use callable-pr-policy v1.0.6 2026-08-04 15:42:31 -04:00
Adam Moussa
cd7ac2c86d
ci: add org PR policy caller (PLAT-62) (#41)
Some checks are pending
Deploy / deploy (push) Waiting to run
* ci: add org PR policy caller

Refs: PLAT-62

* fix(ci): name PR policy workflow

Refs: PLAT-62
2026-08-04 15:56:20 +00:00
Adam Moussa
c1c26579ab
Merge pull request #40 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
Some checks failed
Deploy / deploy (push) Has been cancelled
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:14 -04:00
Adam Moussa
f7c26703d4 ci: declare workflow permissions and normalize block spacing 2026-07-28 18:06:23 -04:00
Adam Moussa
555e899d04 ci(deps): pin org reusable workflows to v1.0.2 2026-07-28 17:56:23 -04:00
dependabot[bot]
d0f51f4c01
chore(deps): bump boto3 (#38)
Some checks are pending
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.52 to 1.43.58
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.58)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 19:44:14 +00:00
dependabot[bot]
0beb31ab2c
chore(deps): bump boto3 (#37)
Bumps the minor-and-patch group with 1 update in the /src/health_digest directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.52 to 1.43.58
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.58)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.57
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 19:41:12 +00:00
Adam Moussa
c0c591bac2
ci: bump ci-python-sam SHA pin to pick up the ruff 0.15.22 pin (#39)
The old pin (fd60e4c9) installs unpinned latest ruff; 0.16.0 flags
pre-existing code (BLE001 etc.), failing ci / ci on every PR — currently
blocking Dependabot #37. The org workflow pinned ruff to 0.15.22 on
2026-07-23 (f71002a9); this picks that up along with setup-action bumps,
contents:read scoping, and SHA-pinned third-party actions.
2026-07-28 15:38:22 -04:00
dependabot[bot]
3c80276c5b
chore(deps): bump boto3 from 1.43.47 to 1.43.52 in /src/health_digest and /src/auto_protect in the minor-and-patch group (#35)
Some checks failed
Deploy / deploy (push) Has been cancelled
* chore(deps): bump boto3

Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump boto3 (#36)

Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 19:23:02 +00:00
dependabot[bot]
832cc63728
chore(deps): bump boto3 (#33)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 22:05:14 +00:00
dependabot[bot]
bf6f009d0b
chore(deps): bump boto3 (#34)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 18:04:00 -04:00
Adam Moussa
d2c6421064
docs: document template.yaml and repo structure in README (#32)
Some checks failed
Deploy / deploy (push) Has been cancelled
Daily security sweep flagged that the README omitted template.yaml (the
SAM stack) as an existing component. Add a Repository Structure section
naming template.yaml and the src layout.

Also fix a related setup gap: the Slack webhook Secrets Manager secret
(SlackWebhookSecretArn, required by slack.py via SLACK_WEBHOOK_SECRET_ARN)
was not covered by the setup instructions.
2026-07-10 19:51:50 +00:00
dependabot[bot]
c898a18226
Bump boto3 (#31)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.42 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.42...1.43.43)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:06:01 +00:00
dependabot[bot]
a56a75a2b0
Bump boto3 in /src/health_digest in the minor-and-patch group (#30)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 17:02:50 -04:00
Adam Moussa
93296c80b0
ci: add github-actions to dependabot coverage (INFRA-130) (#29) 2026-07-08 16:35:10 -04:00
dependabot[bot]
e966a56e4e
Bump boto3 in /src/auto_protect in the minor-and-patch group (#28)
Some checks are pending
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.39 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 15:51:14 -04:00
dependabot[bot]
54fe1e68b6
Bump boto3 in /src/health_digest in the minor-and-patch group (#27)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.37 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.37...1.43.41)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 15:48:30 -04:00
Adam Moussa
162d6463db
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#26)
Some checks are pending
Deploy / deploy (push) Waiting to run
2026-07-06 18:26:55 -04:00
Adam Moussa
55ca4de46b
docs: link Confluence AWS Architecture Map (INFRA-53) (#25)
Some checks are pending
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:15 -04:00
dependabot[bot]
84d4caf825
Bump boto3 (#24)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.36 to 1.43.39
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:27:49 -04:00
dependabot[bot]
0f7c8b98cc
Bump boto3 in /src/health_digest in the minor-and-patch group (#23)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.36 to 1.43.37
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.37)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.37
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:45:59 -04:00
dependabot[bot]
1d85f5f5a3
Bump boto3 (#22)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.31 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:58:12 -04:00
dependabot[bot]
fa61d5c003
Bump boto3 in /src/health_digest in the minor-and-patch group (#21)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.30 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.36)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:54:49 -04:00
dependabot[bot]
3f99db3095
Bump boto3 (#20)
Some checks failed
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/auto_protect directory: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.25 to 1.43.31
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.31)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:22:58 -04:00
dependabot[bot]
02b2f9815d
Bump boto3 in /src/health_digest in the minor-and-patch group (#19)
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.25 to 1.43.30
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.30)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:19:42 -04:00
Adam Moussa
7fb5758194
Add PR labeler caller + README badges (INFRA-56, INFRA-57) (#18)
Some checks failed
Deploy / deploy (push) Has been cancelled
Add the org reusable labeler caller (callable-labeler.yaml@main) and a
static badge block (CI status, Python, AWS SAM, Slack) under the README
H1. Part of the INFRA-47 GitHub-hygiene rollout.
2026-06-11 14:13:08 -04:00
dependabot[bot]
14906708ae
Bump boto3 in /src/health_digest in the minor-and-patch group (#16)
Some checks are pending
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/health_digest with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:45 -04:00
dependabot[bot]
8d8facda1b
Bump boto3 in /src/auto_protect in the minor-and-patch group (#15)
Bumps the minor-and-patch group in /src/auto_protect with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.25
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:41 -04:00
Adam Moussa
b8353e20aa
Attach permissions boundary to all Lambda roles (#17)
Some checks are pending
Deploy / deploy (push) Waiting to run
Scopes IAM role creation to the seahaven-lambda-execution-boundary
policy so the github-cfn-execution-role scope-down (INFRA-97) can
safely constrain CreateRole to boundary-attached roles only.

Refs: INFRA-103
2026-06-10 14:15:02 -04:00
Adam Moussa
471785d64a
fix(deps): pin Python requirements (#12)
Some checks failed
Deploy / deploy (push) Has been cancelled
Pin previously unpinned boto3 dependency to an exact version across the
auto_protect and health_digest functions for reproducible builds.
2026-06-05 14:14:02 -04:00
Adam Moussa
1b1db14bc6
Add dependency-review caller workflow (#13)
Some checks are pending
Deploy / deploy (push) Waiting to run
* Add dependency-review caller workflow

Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.

* chore: retrigger checks

* chore: retrigger dep review (post-fix)
2026-06-05 12:27:15 -04:00
Adam Moussa
4e23d6318b
Move parameter-overrides to secrets block (#10) 2026-05-08 17:22:45 -04:00