adam/engineering-handbook

Fork 0

mirror of https://github.com/Sea-Haven-Industries/engineering-handbook.git synced 2026-09-30 06:53:15 +00:00

Commit graph

Author	SHA1	Message	Date
Adam Moussa	1c11824196	docs: replace frozen 'blessed version' with automated pin-currency policy (#11 ) Exact pins remain (reproducibility) but the pinned version is kept current by Dependabot version updates gated by CI + dependency review, not by a number frozen in the handbook. Blanket dependabot ignore entries are banned; version-specific ignores only, commented and temporary. Bundled-dep vulnerabilities are a prompt to advance the pin, never to dismiss the alert.	2026-06-05 12:57:35 -04:00
Adam Moussa	bcb4355c36	docs: move blessed aws-cdk-lib pin to 2.257.0 (#10 ) 2.253.1 bundles fast-uri 3.1.0 (two high-severity GHSAs, unfixable via overrides since it ships in the tarball). 2.257.0 bundles patched fast-uri 3.1.2 and passes npm ci (the 2.254.0 breakage that motivated the old pin was release-specific).	2026-06-05 12:52:50 -04:00
Adam Moussa	e057e8ab84	Add CDK layout and code review rubric to handbook index Both pages existed in working drafts but were not linked from the README table of contents, so they were undiscoverable. Add them to the index alongside the related SAM layout and code review pages.	2026-06-02 19:36:09 -04:00

Author

SHA1

Message

Date

Adam Moussa

1c11824196

docs: replace frozen 'blessed version' with automated pin-currency policy (#11 )

Exact pins remain (reproducibility) but the pinned version is kept
current by Dependabot version updates gated by CI + dependency review,
not by a number frozen in the handbook. Blanket dependabot ignore
entries are banned; version-specific ignores only, commented and
temporary. Bundled-dep vulnerabilities are a prompt to advance the
pin, never to dismiss the alert.

2026-06-05 12:57:35 -04:00

Adam Moussa

bcb4355c36

docs: move blessed aws-cdk-lib pin to 2.257.0 (#10 )

2.253.1 bundles fast-uri 3.1.0 (two high-severity GHSAs, unfixable via
overrides since it ships in the tarball). 2.257.0 bundles patched
fast-uri 3.1.2 and passes npm ci (the 2.254.0 breakage that motivated
the old pin was release-specific).

2026-06-05 12:52:50 -04:00

Adam Moussa

e057e8ab84

Add CDK layout and code review rubric to handbook index

Both pages existed in working drafts but were not linked from the
README table of contents, so they were undiscoverable. Add them to the
index alongside the related SAM layout and code review pages.

2026-06-02 19:36:09 -04:00

3 commits