Adam Moussa
26e9716df4
fix(ci): drop leftover changelog-guard and release-notifier (PLAT-219) ( #266 )
...
Deploy API / Resolve target (push) Waiting to run
Deploy API / Deploy API to (push) Blocked by required conditions
Prod is already a human GitHub Release. Remove the SAM tagging path so CHANGELOG.md stays App Home copy and leftover notifier IAM is destroyed on the next apply.
2026-09-21 23:24:05 +00:00
Adam Moussa
26adb8e6c0
feat(api): collapse Slack, portal, and jobs onto Fargate (PLAT-216) ( #259 )
...
* feat(api): collapse Slack, portal, and jobs onto Fargate (PLAT-216)
Move HTTP and scheduled work onto one always-on Flask task so after-hours
loses Lambda cold start without changing the Cognito or roster contracts.
* fix(portal-api): keep CORS headers on unexpected 500s
Portal SPA error handling needs Access-Control-Allow-Origin even when
DynamoDB or other internals fail, otherwise the browser hides the 500.
* fix(api): retarget holidays per account and ship App Home changelog (PLAT-216)
* fix(iam): list ECS tasks and fail closed on non-prod Paychex (PLAT-216)
* fix(portal-api): serve portal JSON with an explicit JSON content type
2026-09-21 19:13:30 +00:00
Adam Moussa
969ebf90de
feat(portal-api): add Cognito shift API for the employee portal (DEV-287) ( #255 )
...
Deploy / Deploy to prod (push) Waiting to run
* feat(portal-api): add Cognito shift API for the employee portal (DEV-287)
Employees and admins can pick, drop, swap, and manage coverage through
GET/POST/DELETE /api/shifts. Roster PUT accepts optional email for portal
identity. Slack slash commands and App Home admin modals stay in place.
Co-authored-by: adam <adam@seahavenind.com>
* fix(portal-api): preserve shift and deployment invariants (DEV-287)
Co-authored-by: adam <adam@seahavenind.com>
---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
2026-09-21 17:50:57 +00:00
renovate[bot]
f1695cadfa
chore(deps): update pip minor and patch ( #256 )
...
Deploy / Deploy to prod (push) Waiting to run
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-21 15:42:56 +00:00
renovate[bot]
b53d856a75
chore(deps): update pip minor and patch ( #251 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-16 16:38:24 +00:00
Adam Moussa
9544dd696a
fix(slack-bot): return 400 on malformed request bodies ( #254 )
...
Bolt parse_body raises JSONDecodeError for empty or non-JSON form
payload fields, which turned probe POSTs into unhandled Lambda 500s.
Fixes AFTERHOURS-SHIFT-MANAGER-2
2026-09-16 16:37:54 +00:00
Adam Moussa
13350b72d0
feat(infra): migrate afterhours to HCP Terraform (PLAT-74) ( #252 )
...
Deploy / Deploy to prod (push) Waiting to run
* fix(cutover): write Slack secrets into empty Terraform shells
DescribeSecret succeeds on HCP-created shells with no version, so skip-if-exists left roster and Slack tokens unset.
* feat(infra): migrate afterhours to HCP Terraform (PLAT-74)
Replace the mgmt SAM stack with a prod-only HCP workspace, in-repo hcptf IAM, stub Lambdas, and zip CD on push to main.
* fix(cutover): retry DDB unprocessed items and skip past at() holidays
Unprocessed BatchWriteItem rows and leftover past at() schedules would drop roster data or abort holiday recreation during prod cutover.
2026-09-15 23:31:59 +00:00
Adam Moussa
dbef3bda52
chore(pay): remove weekly-post payroll email code, env, and failure alarm ( #249 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
PR #248 disabled the SES send by blanking PAYROLL_RECIPIENTS and dropping the
ses:SendEmail grant. This removes the now-dead path: _send_pay_email and
_build_pay_email_html, the SES_SENDER and PAYROLL_RECIPIENTS env, and the
PayrollEmailFailure metric filter and alarm that only fired on that path.
Slack schedule post, pay-summary DM, and checkcomponents enqueue unchanged.
2026-09-10 19:58:59 +00:00
Adam Moussa
23bad9bee6
feat(roster): add HTTP PUT/DELETE roster API (PLAT-180) ( #247 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
* feat(roster): add Bearer PUT/DELETE roster API
Identity hire needs to write Slack IDs onto roster rows without a stale
daily 3CX sync clearing them, using the existing HTTP client contract.
* fix(roster): strip Secrets Manager token whitespace
A file:// secret commonly includes a trailing newline, so compare_digest
must strip the cached value the same way it strips the Bearer header.
2026-09-09 21:13:27 +00:00
renovate[bot]
37f12421fd
chore(deps): update pip minor and patch ( #246 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-09 18:40:59 +00:00
Adam Moussa
4ffa09bd3e
feat(pay): send after-hours lines to paychex checkcomponents (PLAT-154) ( #244 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
* feat(pay): send after-hours lines to paychex checkcomponents (PLAT-154)
* style(pay): drop trailing blank line in weekly post tests
* fix(pay): skip duplicate checkcomponents send on weekly-post retry
2026-09-03 22:12:55 +00:00
renovate[bot]
42921aa2ba
chore(deps): update pip minor and patch ( #243 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-31 16:06:56 +00:00
Adam Moussa
6eb2e52a74
feat(observability): add Sentry error reporting to Lambdas ( #241 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
Unhandled errors and timeout warnings go to Sentry when SENTRY_DSN is set; Slack and 3CX secrets are stripped before send.
2026-08-29 20:52:28 +00:00
renovate[bot]
b30828b701
chore(deps): update dependency boto3 to >=1.43.78 ( #238 )
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
2026-08-24 21:54:44 +00:00
dependabot[bot]
dc96388fa6
chore(deps): update boto3 requirement in /src/slack-bot ( #231 )
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
2026-08-19 03:56:51 +00:00
dependabot[bot]
84964aa983
chore(deps): update boto3 requirement in /src/shared ( #230 )
2026-08-19 03:54:30 +00:00
dependabot[bot]
b35730faa0
chore(deps): update boto3 requirement in /src/roster-sync ( #229 )
2026-08-19 03:51:45 +00:00
dependabot[bot]
1590aca846
chore(deps): update boto3 requirement in /src/ring-scheduler ( #228 )
2026-08-19 03:48:47 +00:00
dependabot[bot]
f599294e75
chore(deps): update boto3 requirement in /src/release-notifier ( #227 )
2026-08-19 03:46:07 +00:00
dependabot[bot]
f6369e71fd
chore(deps): update boto3 requirement in /src/holiday-router ( #226 )
2026-08-19 03:43:24 +00:00
dependabot[bot]
58795d90a9
chore(deps): update boto3 requirement in /src/weekly-post ( #232 )
2026-08-19 03:41:01 +00:00
dependabot[bot]
f3cd27aa18
chore(deps): update boto3 requirement in /src/holiday-router ( #218 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-12 00:09:56 +00:00
dependabot[bot]
6141cd38be
chore(deps): update boto3 requirement in /src/release-notifier ( #219 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-12 00:06:43 +00:00
dependabot[bot]
2b79148ded
chore(deps): update boto3 requirement in /src/ring-scheduler ( #220 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-12 00:03:59 +00:00
dependabot[bot]
813c134ae9
chore(deps): update boto3 requirement in /src/roster-sync ( #221 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-12 00:01:37 +00:00
dependabot[bot]
c1df33dbdc
chore(deps): update boto3 requirement in /src/shared ( #222 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 23:59:11 +00:00
dependabot[bot]
7f5b85c774
chore(deps): update boto3 requirement in /src/slack-bot ( #223 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 23:56:50 +00:00
dependabot[bot]
71c3dc1093
chore(deps): update boto3 requirement in /src/weekly-post ( #224 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 19:54:19 -04:00
Adam Moussa
c28c63f06e
chore(deps): batch bumps for slack-bolt and test deps (DEV-27) ( #216 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
* chore(deps): update slack-bolt requirement in /src/slack-bot
Updates the requirements on [slack-bolt](https://github.com/slackapi/bolt-python ) to permit the latest version.
- [Release notes](https://github.com/slackapi/bolt-python/releases )
- [Commits](https://github.com/slackapi/bolt-python/compare/v1.29.0...v1.30.0 )
---
updated-dependencies:
- dependency-name: slack-bolt
dependency-version: 1.30.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update pytest requirement from >=8.0 to >=9.1.1 in /tests
Updates the requirements on [pytest](https://github.com/pytest-dev/pytest ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest/releases )
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest/compare/8.0.0...9.1.1 )
---
updated-dependencies:
- dependency-name: pytest
dependency-version: 9.1.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update freezegun requirement in /tests
Updates the requirements on [freezegun](https://github.com/spulec/freezegun ) to permit the latest version.
- [Release notes](https://github.com/spulec/freezegun/releases )
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG )
- [Commits](https://github.com/spulec/freezegun/compare/1.5.0...1.5.5 )
---
updated-dependencies:
- dependency-name: freezegun
dependency-version: 1.5.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update responses requirement in /tests
Updates the requirements on [responses](https://github.com/getsentry/responses ) to permit the latest version.
- [Release notes](https://github.com/getsentry/responses/releases )
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES )
- [Commits](https://github.com/getsentry/responses/compare/0.25.0...0.26.2 )
---
updated-dependencies:
- dependency-name: responses
dependency-version: 0.26.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update moto requirement from >=5.0 to >=5.2.2 in /tests
Updates the requirements on [moto](https://github.com/getmoto/moto ) to permit the latest version.
- [Release notes](https://github.com/getmoto/moto/releases )
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getmoto/moto/compare/5.0.0...5.2.2 )
---
updated-dependencies:
- dependency-name: moto
dependency-version: 5.2.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 20:26:37 -04:00
Adam Moussa
4b6c15644f
chore(deps): batch boto3 bumps to >=1.43.62 (DEV-25) ( #210 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
* chore(deps): update boto3 requirement in /src/holiday-router
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/release-notifier
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/ring-scheduler
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/roster-sync
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/shared
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/slack-bot
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): update boto3 requirement in /src/weekly-post
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 14:24:23 -04:00
dependabot[bot]
802fe88f53
chore(deps): update boto3 requirement in /src/holiday-router
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 19:46:51 -04:00
dependabot[bot]
94ab731331
chore(deps): update boto3 requirement in /src/release-notifier
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 19:46:51 -04:00
dependabot[bot]
3542e58f3d
chore(deps): update boto3 requirement in /src/ring-scheduler
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 19:46:51 -04:00
dependabot[bot]
af6c12026a
chore(deps): update boto3 requirement in /src/roster-sync
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 19:46:51 -04:00
dependabot[bot]
b0273e765f
chore(deps): update boto3 requirement in /src/shared
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-28 19:46:51 -04:00
dependabot[bot]
091d667d9c
chore(deps): update boto3 requirement in /src/slack-bot ( #197 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-07-28 23:43:20 +00:00
dependabot[bot]
4fd8c60f52
chore(deps): update boto3 requirement in /src/weekly-post ( #198 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.58 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.58
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-07-28 23:34:14 +00:00
Adam Moussa
f996f9600b
fix: resolve code-scanning alerts 11-15 (workflow permissions + log taint) ( #184 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
* ci(dependency-review): set explicit read-only GITHUB_TOKEN permissions
Resolves code-scanning alert 11 (actions/missing-workflow-permissions).
The callable workflow only needs contents: read.
* fix(logging): remove taint-flagged values from 3CX and roster-sync logs
Resolves code-scanning alerts 12-15 (py/clear-text-logging-sensitive-data).
CodeQL taints the 3CX response dicts via the Secrets Manager-sourced
domain in the request URL, so entity IDs subscripted from those
responses (ivr_id, resource_id, queue_id) and the roster result dict
trip the query. None of the flagged values are secrets, but the log
lines are rewritten so the pattern cannot trip: entity IDs are dropped
in favor of the untainted destination DNs, and the roster summary logs
counts instead of the member-derived dict (which also keeps employee
names out of the logs).
* fix: update ci workflow SHA to latest version
* fix(logging): drop employee-derived DNs from forwarding log
Resolves new code-scanning alerts 16/17. The closed/holiday DNs added
in the previous commit derive from roster employee lookups in the
Slack bot, so CodeQL classifies them as private data. Log only the
resource type; ring_scheduler already logs the queue number.
2026-07-27 13:48:14 -04:00
Adam Moussa
e769260598
chore: batch Dependabot boto3 bumps ( #176 , #177 , #178 , #179 , #180 , #181 , #182 ) ( #183 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
* Update boto3 requirement in /src/holiday-router
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement in /src/release-notifier
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement in /src/ring-scheduler
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement from >=1.43.48 to >=1.43.53 in /src/roster-sync
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement from >=1.43.48 to >=1.43.53 in /src/shared
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement from >=1.43.48 to >=1.43.53 in /src/slack-bot
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* Update boto3 requirement from >=1.43.48 to >=1.43.53 in /src/weekly-post
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.48...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore: gitignore .idea/
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-22 13:08:01 -04:00
dependabot[bot]
e3031c879b
Update boto3 requirement from >=1.43.43 to >=1.43.48 in /src/shared ( #172 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 17:02:10 +00:00
dependabot[bot]
526c421455
Update boto3 requirement from >=1.43.43 to >=1.43.48 in /src/roster-sync ( #171 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:57:25 +00:00
dependabot[bot]
2eefd46410
Update boto3 requirement in /src/release-notifier ( #169 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:52:52 +00:00
dependabot[bot]
690d5fd73c
Update boto3 requirement from >=1.43.43 to >=1.43.48 in /src/slack-bot ( #173 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:48:45 +00:00
dependabot[bot]
47930e6b74
Update boto3 requirement in /src/ring-scheduler ( #170 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-15 16:43:58 +00:00
dependabot[bot]
08cf28933f
Update boto3 requirement from >=1.43.43 to >=1.43.48 in /src/weekly-post ( #174 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 23:51:45 +00:00
dependabot[bot]
fce0fb2bf7
Update boto3 requirement in /src/holiday-router ( #168 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.48 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.48
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 19:47:51 -04:00
seahaven-openswe[bot]
2202cde9ed
fix: delete+repost schedule on weekly rollover for bottom placement ( #167 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
* fix: delete+repost schedule on weekly rollover for bottom placement
The Monday rollover was chat_update-ing in place, which only refreshes
content without moving the message to the bottom. Now it chat_deletes
the old post and chat_postMessages a fresh one so the schedule lands
at the bottom every Monday, independent of in-week activity.
Also added info-level logging to the bump handler silent return paths
so skipped bumps are observable at runtime.
* fix: roll back weekly repost when its ts can't be persisted
The Monday rollover deletes the old post then reposts a fresh one, but only
saved the new ts as its last step. If the save failed (or the Lambda died)
after the post landed, the async retry would read the stale, already-deleted
ts, no-op its delete, and post a second schedule — orphaning the first at the
bottom of the channel.
Wrap the save so a failure after a successful repost best-effort deletes the
fresh message before re-raising, letting the retry start clean. Mirrors the
orphan-avoidance the activity bump already has.
---------
Co-authored-by: seahaven-openswe[bot] <296972425+seahaven-openswe[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <adam@seahavenind.com>
2026-07-10 16:36:47 -04:00
seahaven-openswe[bot]
7a8133fea3
fix: prepend "Boo, " to shift-drop Slack channel notification ( #166 )
...
Deploy / deploy (push) Waiting to run
Deploy / release (push) Blocked by required conditions
Co-authored-by: seahaven-openswe[bot] <296972425+seahaven-openswe[bot]@users.noreply.github.com>
2026-07-10 18:09:56 +00:00
dependabot[bot]
97c9cf1173
Update boto3 requirement from >=1.43.42 to >=1.43.43 in /src/shared ( #165 )
...
Deploy / deploy (push) Has been cancelled
Deploy / release (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.42...1.43.43 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:55:36 +00:00
dependabot[bot]
51eb2ae0a8
Update boto3 requirement from >=1.43.42 to >=1.43.43 in /src/roster-sync ( #164 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.42...1.43.43 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:53:05 +00:00
