1923b7d35c
fix(ci): allow GHSA-rgw5 for bundled brace-expansion
...
aws-cdk-lib 2.263.0 still ships brace-expansion 5.0.8 inBundle;
npm cannot override it. Document accepted synth-time risk until
upstream rebundles >=5.0.9.
2026-08-07 12:39:57 -04:00
809bc0c84a
chore(ci): add pr policy org-required workflow
2026-08-07 12:19:12 -04:00
b92624994e
fix(ci): enable Jest CDK stack tests
...
Wire run-tests into CI and add assertions for SG, IAM, instance, DLM, and the imported volume attachment. Use @swc/jest because ts-jest cannot consume TypeScript 7's compiler API.
2026-08-07 12:19:12 -04:00
dependabot[bot]
9e09fe1568
build(deps): bump the minor-and-patch group with 4 updates
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.2 to 1.0.4
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170
2026-08-06 22:53:50 +00:00
Adam Moussa
6d5e947d91
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:06:07 -04:00
Adam Moussa
528ec1fd26
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:56:03 -04:00
Adam Moussa
d84c9ed9d7
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #21 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:22 -04:00
Adam Moussa
49bc8747b9
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) ( #8 )
2026-06-11 14:14:13 -04:00
Adam Moussa
56be4eea0b
Add dependency-review caller workflow ( #3 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:27:07 -04:00
Adam Moussa
939ff7122c
Set node-version to 24 in CI/CD workflows
...
Lock file generated with npm 11 (Node 24) is incompatible with npm 10
(Node 22) in CI — npm ci fails on missing transitive dependencies.
2026-05-14 15:41:54 -04:00
Adam Moussa
427242499d
Initial file-share stack
...
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.
2026-05-14 15:23:38 -04:00
