Adam Moussa
eaf7a9a939
chore(ci): remove pr policy workflow caller ( #54 )
Deploy / deploy (push) Waiting to run
2026-08-24 15:11:57 -04:00
Adam Moussa
f44196a52c
chore(ci): switch auto-merge from seahaven-bot to Mergify ( #53 )
Deploy / deploy (push) Waiting to run
2026-08-24 13:53:44 -04:00
Adam Moussa
7f586e606e
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #51 )
...
Deploy / deploy (push) Has been cancelled
* ci: enable squash auto-merge on ready PRs
* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:20 +00:00
Adam Moussa
b7e76a0bb8
ci: add merge_group trigger for required ci / ci ( #50 )
Deploy / deploy (push) Waiting to run
2026-08-21 17:42:02 -04:00
dependabot[bot]
a9ea3a4dcd
chore(deps): bump the minor-and-patch group with 5 updates
...
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.3` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.5` | `1.0.7` |
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...e5691d8a7f
2026-08-13 18:54:41 +00:00
dependabot[bot]
6a31a4549c
chore(deps): bump the minor-and-patch group with 4 updates ( #41 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 18:25:30 -04:00
Adam Moussa
a0dbc92f59
ci: add org PR policy caller (PLAT-62) ( #40 )
...
Deploy / deploy (push) Waiting to run
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:58:00 +00:00
071ab9bb77
chore: add CODEOWNERS
2026-07-29 12:57:59 -04:00
Adam Moussa
72ba94c892
style(ci): normalize workflow block spacing
2026-07-28 18:07:41 -04:00
Adam Moussa
300fdab3bb
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:57:51 -04:00
Adam Moussa
eaf214a733
ci: bump reusable workflow pin to f71002a (ruff 0.15.22 pin) ( #37 )
...
Picks up Sea-Haven-Industries/.github#88 , which pins ruff in ci-python-sam so unpinned installs no longer float to new releases with changed default rule sets. Ruff 0.16.0's default-rule expansion broke this repo's CI with 21 pre-existing findings (89 in meal-order-manager, the first repo hit). Refs Sea-Haven-Industries/.github#87 .
2026-07-24 16:32:37 +00:00
Adam Moussa
299ead89b3
chore: resolve open code scanning alerts (URL host matching + workflow permissions) ( #36 )
...
Deploy / deploy (push) Waiting to run
* fix: Refactor `comment_intent` to use `_contains_url_with_host` for URL host matching.
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
2026-07-23 19:10:45 +00:00
Adam Moussa
27dd15c541
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #30 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:14 -04:00
Adam Moussa
07cd5ae72a
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #24 )
Deploy / deploy (push) Has been cancelled
2026-06-11 14:14:09 -04:00
Adam Moussa
6c392a7362
fix(deps): bump aws-cdk-lib pin to 2.257.0 ( #20 )
...
Deploy / deploy (push) Waiting to run
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
2026-06-05 13:18:47 -04:00
Adam Moussa
47b6a9404f
chore(deps): ignore aws-cdk-lib in Dependabot (org pins ==2.253.1) ( #19 )
2026-06-05 12:40:47 -04:00
Adam Moussa
e8f375b03b
Add dependency-review caller workflow ( #18 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:32 -04:00
Adam Moussa
ac610d1626
Re-enable CD deploy (remove leftover stack-merge gate)
Deploy / deploy (push) Has been cancelled
2026-05-29 15:25:24 -04:00
Adam Moussa
1a126c8179
Enable test execution in CI
2026-05-29 14:30:44 -04:00
Adam Moussa
0e96cb59d7
Merge pull request #8 from Sea-Haven-Industries/feature/phase-2-classifier
...
Phase 2: two-axis classifier Lambda
2026-05-29 13:43:59 -04:00
Adam Moussa
d33b82bd92
Enable QEMU for arm64 Lambda bundling in CI/CD
2026-05-29 13:36:56 -04:00
Adam Moussa
611979e44e
Temporarily disable CD deploy during stack merges
...
Gate the deploy job with if:${{ false }} so merging the Phase 0-5 stack into
main does not fire cdk deploy --all on every merge. Both stacks are already
deployed manually and validated in prod. Re-enable at the start of Phase 6 by
reverting this commit.
2026-05-29 11:43:48 -04:00
Adam Moussa
58b91bda70
Scaffold apm-wo-analysis repository
...
Stand up the Phase 0 CDK scaffold for the daily APM work-order
analysis pipeline: two-stack CDK app (pipeline + grafana), classifier
and slack-post Lambda packages, dashboards-as-code, the local
drop-folder uploader, and a classifier smoke-test placeholder.
Wire CI/CD to the org reusable workflows: ci.yaml -> ci-python-sam
(ruff + cdk synth) and deploy.yaml -> cd-cdk (OIDC, cdk deploy --all).
Pin aws-cdk-lib==2.253.1; Lambdas target Python 3.12 / arm64.
Rewrite .gitignore to the org Python-CDK standard so the source-of-
truth files (CLAUDE.md, docs/, .claude/agents) are tracked while build
artifacts (.venv, cdk.out, caches) stay ignored.
Domain logic, stack resources, and dashboards are stubbed and filled
in across Phases 1-5 (docs/BUILD.md). cdk synth is green for both
stacks; ruff check/format pass.
2026-05-28 16:13:13 -04:00
