Adam Moussa
b7e76a0bb8
ci: add merge_group trigger for required ci / ci ( #50 )
Deploy / deploy (push) Waiting to run
2026-08-21 17:42:02 -04:00
dependabot[bot]
7c3eb270c2
chore(deps): bump aws-cdk-lib in /cdk in the minor-and-patch group ( #49 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.264.0 to 2.265.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.264.0...v2.265.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.265.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-20 14:59:41 -04:00
Adam Moussa
e4fc32599f
fix(pipeline): page when classifier has no daily invocation
Deploy / deploy (push) Has been cancelled
2026-08-13 17:39:11 -04:00
Adam Moussa
1b3259e875
Merge pull request #47 from Sea-Haven-Industries/dependabot/pip/cdk/constructs-gte-10.8.1
...
Deploy / deploy (push) Waiting to run
chore(deps): update constructs requirement from >=10.8.0 to >=10.8.1 in /cdk
2026-08-13 15:22:30 -04:00
dependabot[bot]
6f63345854
chore(deps): update constructs requirement in /cdk
...
Updates the requirements on [constructs](https://github.com/aws/constructs ) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.8.0...v10.8.1 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.8.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-08-13 19:19:58 +00:00
Adam Moussa
86d1ee052b
Merge pull request #46 from Sea-Haven-Industries/dependabot/pip/cdk/minor-and-patch-904666df45
...
chore(deps): bump aws-cdk-lib from 2.263.0 to 2.264.0 in /cdk in the minor-and-patch group
2026-08-13 15:17:27 -04:00
dependabot[bot]
e1e707b7c8
chore(deps): bump aws-cdk-lib in /cdk
...
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.263.0 to 2.264.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.263.0...v2.264.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.264.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-08-13 15:14:28 -04:00
Adam Moussa
18dbccae27
Merge pull request #45 from Sea-Haven-Industries/dependabot/github_actions/minor-and-patch-5c6f0eccff
...
Deploy / deploy (push) Waiting to run
chore(deps): bump the minor-and-patch group with 5 updates
2026-08-13 15:10:21 -04:00
dependabot[bot]
a9ea3a4dcd
chore(deps): bump the minor-and-patch group with 5 updates
...
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.5` | `1.0.7` |
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...e5691d8a7f
2026-08-13 18:54:41 +00:00
dependabot[bot]
484d3015b9
chore(deps): update constructs requirement in /cdk ( #43 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [constructs](https://github.com/aws/constructs ) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.7.1...v10.8.0 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.8.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:25:31 -04:00
dependabot[bot]
401be5003e
chore(deps): bump aws-cdk-lib in /cdk in the minor-and-patch group ( #42 )
...
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.262.1 to 2.263.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.262.1...v2.263.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.263.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 18:25:30 -04:00
dependabot[bot]
6a31a4549c
chore(deps): bump the minor-and-patch group with 4 updates ( #41 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 18:25:30 -04:00
Adam Moussa
a0dbc92f59
ci: add org PR policy caller (PLAT-62) ( #40 )
...
Deploy / deploy (push) Waiting to run
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:58:00 +00:00
Adam Moussa
5464a081bd
Merge pull request #39 from Sea-Haven-Industries/chore/add-codeowners
...
Deploy / deploy (push) Has been cancelled
chore: add CODEOWNERS
2026-07-29 13:01:59 -04:00
071ab9bb77
chore: add CODEOWNERS
2026-07-29 12:57:59 -04:00
Adam Moussa
1362e4aa38
Merge pull request #38 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
...
Deploy / deploy (push) Waiting to run
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:26 -04:00
Adam Moussa
72ba94c892
style(ci): normalize workflow block spacing
2026-07-28 18:07:41 -04:00
Adam Moussa
300fdab3bb
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:57:51 -04:00
dependabot[bot]
a8266a7e6e
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory ( #34 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.261.0 to 2.262.1
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.261.0...v2.262.1 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.262.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 13:03:20 -04:00
dependabot[bot]
3e1e0154db
Update constructs requirement from >=10.7.0 to >=10.7.1 in /cdk ( #35 )
...
Updates the requirements on [constructs](https://github.com/aws/constructs ) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.7.0...v10.7.1 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.7.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-24 16:51:08 +00:00
Adam Moussa
eaf214a733
ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) ( #37 )
...
Picks up Sea-Haven-Industries/.github#88 , which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets. Ruff 0.16.0's default-rule expansion broke this repo's CI with 21 pre-existing findings (89 in meal-order-manager, the first repo hit). Refs Sea-Haven-Industries/.github#87 .
2026-07-24 16:32:37 +00:00
Adam Moussa
299ead89b3
chore: resolve open code scanning alerts (URL host matching + workflow permissions) ( #36 )
...
Deploy / deploy (push) Waiting to run
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
2026-07-23 19:10:45 +00:00
Adam Moussa
3748a29744
chore: update CLAUDE.md to reflect current rules and status ( #33 )
2026-07-23 14:38:08 -04:00
dependabot[bot]
da730d459a
Update constructs requirement from >=10.6.0 to >=10.7.0 in /cdk ( #32 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [constructs](https://github.com/aws/constructs ) to permit the latest version.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.6.0...v10.7.0 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.7.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 17:34:31 -04:00
Adam Moussa
a36e150148
docs: repoint cross-family review to security-review cross_review.py (orchestrator archived) ( #31 )
Deploy / deploy (push) Has been cancelled
2026-07-14 19:24:08 -04:00
Adam Moussa
27dd15c541
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #30 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:14 -04:00
dependabot[bot]
1c2d77141b
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory ( #29 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.260.0 to 2.261.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.260.0...v2.261.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.261.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:28:04 -04:00
dependabot[bot]
bcd7d30390
Update slack-sdk requirement in /lambdas/slack_post ( #28 )
...
Deploy / deploy (push) Waiting to run
Updates the requirements on [slack-sdk](https://github.com/slackapi/python-slack-sdk ) to permit the latest version.
- [Release notes](https://github.com/slackapi/python-slack-sdk/releases )
- [Commits](https://github.com/slackapi/python-slack-sdk/compare/v3.33.0...v3.43.0 )
---
updated-dependencies:
- dependency-name: slack-sdk
dependency-version: 3.43.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:23:37 -04:00
dependabot[bot]
15a9167882
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #27 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.258.1 to 2.260.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.1...v2.260.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.260.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 13:13:34 -04:00
Adam Moussa
44ad13d8cd
Add DLQ messages-present alarm for classifier (INFRA-57) ( #26 )
...
Deploy / deploy (push) Has been cancelled
The classifier DLQ (apm-wo-analysis-classifier-dlq) had no alarm, so a
message landing there after Lambda exhausts async retries — a genuinely
dropped classifier run — surfaced nowhere.
Add a CloudWatch alarm on AWS/SQS ApproximateNumberOfMessagesVisible
(Maximum, threshold >0, 300s period, 1 evaluation period, notBreaching)
that pages the shared site-alerts SNS topic. Mirrors the
workorder-email-processor-dlq-messages alarm in procurement-ingest's
wo_stack and the payments-payroll-batch-dlq-messages alarm convention.
ALARM-only, no OK action, per the CloudWatch-alarm preference.
2026-06-17 15:02:10 -04:00
dependabot[bot]
3456c7a37b
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #25 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.258.0 to 2.258.1
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.0...v2.258.1 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.258.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:26:38 -04:00
Adam Moussa
07cd5ae72a
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #24 )
Deploy / deploy (push) Has been cancelled
2026-06-11 14:14:09 -04:00
Adam Moussa
b92c25faf2
docs: CLAUDE.md cdk pin follows handbook Pinning Principle, not a hardcoded version ( #22 )
Deploy / deploy (push) Has been cancelled
2026-06-05 18:44:12 -04:00
dependabot[bot]
ec363e6adf
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #21 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.257.0 to 2.258.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.257.0...v2.258.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.258.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 14:53:10 -04:00
Adam Moussa
6c392a7362
fix(deps): bump aws-cdk-lib pin to 2.257.0 ( #20 )
...
Deploy / deploy (push) Waiting to run
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
2026-06-05 13:18:47 -04:00
Adam Moussa
47b6a9404f
chore(deps): ignore aws-cdk-lib in Dependabot (org pins ==2.253.1) ( #19 )
2026-06-05 12:40:47 -04:00
Adam Moussa
e8f375b03b
Add dependency-review caller workflow ( #18 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:32 -04:00
Adam Moussa
ac610d1626
Re-enable CD deploy (remove leftover stack-merge gate)
Deploy / deploy (push) Has been cancelled
2026-05-29 15:25:24 -04:00
Adam Moussa
6535b92e85
Merge pull request #16 from Sea-Haven-Industries/test/suite-hardening
...
Harden the test suite and wire it into CI
2026-05-29 15:20:54 -04:00
Adam Moussa
094c212323
Set default AWS region in conftest so boto3 clients construct in CI
2026-05-29 15:16:24 -04:00
Adam Moussa
17ce1b918b
Install boto3/pandas/awswrangler as test deps so handler tests import in CI
2026-05-29 15:11:19 -04:00
Adam Moussa
0678f3f46f
Document CI-run test suite and coverage in README
2026-05-29 15:05:29 -04:00
Adam Moussa
f47757adf0
Add coverage reporting via pytest-cov
2026-05-29 15:02:47 -04:00
Adam Moussa
8e87fe669d
Add tests for slack-post handler and slackio
2026-05-29 15:01:25 -04:00
Adam Moussa
76f60abade
Add per-bucket and precedence tests for comment intent
2026-05-29 14:59:40 -04:00
Adam Moussa
e555a75d97
Add tests for the Haiku fallback
2026-05-29 14:54:47 -04:00
Adam Moussa
48c030ed13
Add tests for the classifier handler transforms
2026-05-29 14:52:53 -04:00
Adam Moussa
63b6f11bf6
Add tests for the Slack interactions endpoint
2026-05-29 14:33:26 -04:00
Adam Moussa
817e1f6a74
Add synthetic export fixture and run classification quality gate in CI
2026-05-29 14:30:44 -04:00
Adam Moussa
1a126c8179
Enable test execution in CI
2026-05-29 14:30:44 -04:00
