- Import vol-04d951cccacc435b5 (the real 500GiB data volume, orphaned by
the 2026-06-05 redeploy) via Volume.fromVolumeAttributes — unmanaged,
so CloudFormation can attach but never create/replace/delete it.
- Remove the inline /dev/xvdf blockDevice (this is what created the
empty volume that shadowed the data).
- cachedInContext: true + committed cdk.context.json so AMI updates are
deliberate (uncached lookup replaced the instance on every new AL2023
release).
- Includes the previously-deployed-but-uncommitted 2026-05-27 work:
standalone volume pattern, volume-wait userdata, SFTP access.
Deploy replaces the instance once; userdata's blkid guard mounts the
existing filesystem without formatting.
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
aws-cdk-lib 2.254.0 has a bundled dependency bug where npm ci reports
jsonschema@1.4.1 as missing from the lock file. Pinning to 2.253.1
which is proven working in CI (same version as forgejo).
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.
