Adam Moussa
7c72159f31
feat(infra): add HCP Terraform for the prod file share (PLAT-77) ( #56 )
...
* feat(infra): add HCP Terraform for the prod file share (PLAT-77)
The prod host will live on a subnet in the syslog VPC. The data volume stays unmanaged and is attached only after a snapshot copy.
* fix(infra): pin FileBrowser version to a release tag (PLAT-77)
The version is interpolated into the boot script. Reject anything that is not a vX.Y.Z tag.
* fix(infra): keep the file share off the public internet (PLAT-77)
The instance has no public IP. Office routes use the syslog VPN gateway and other egress uses a NAT gateway. DLM targets the tagged data volume, and replacement detaches stop the instance first.
2026-09-29 22:32:39 +00:00
Adam Moussa
ee3b28b5b5
ci(deploy): freeze CDK pushes to main (PLAT-77) ( #55 )
...
* ci(deploy): freeze CDK pushes to main (PLAT-77)
HCP Terraform is the deploy path for the prod move. A push to main must not replace the management-account instance.
* ci(deploy): keep the v1.0.19 CDK workflow pin (PLAT-77)
The freeze should drop the push trigger only. The reusable workflow SHA stays on the version already on main.
2026-09-29 22:31:37 +00:00
renovate[bot]
46cf87faa2
chore(deps): update sea-haven-industries/.github action to v1.0.19 ( #54 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-28 16:05:11 +00:00
renovate[bot]
9224931559
chore(deps): update sea-haven-industries/.github action to v1.0.11 ( #48 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-16 16:45:52 +00:00
Adam Moussa
d8ef1e7e99
chore(ci): remove pr policy workflow caller ( #44 )
Deploy / deploy (push) Waiting to run
2026-08-24 15:11:45 -04:00
Adam Moussa
0ee318eb33
chore(ci): switch auto-merge from seahaven-bot to Mergify ( #43 )
Deploy / deploy (push) Waiting to run
2026-08-24 13:52:47 -04:00
Adam Moussa
4de854843e
fix(ci): restore auto-merge token permissions (PLAT-108) ( #41 )
...
Deploy / deploy (push) Waiting to run
* fix(ci): restore contents write and re-run auto-merge on push
* fix(ci): serialize auto-merge enable and ignore already-enabled
* fix(ci): emit ci / ci on the merge-queue branch
* fix(ci): enqueue merge queue as seahaven-bot
* fix(ci): re-arm auto-merge as seahaven-bot after failed enqueue
* fix(ci): drop queue-branch push trigger that cancelled merge_group ci
2026-08-24 14:41:33 +00:00
Adam Moussa
e46ccf6d73
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #40 )
...
Deploy / deploy (push) Has been cancelled
* ci: enable squash auto-merge on ready PRs
* fix(ci): skip bot PR authors and drop merge-token write
2026-08-21 22:40:07 +00:00
Adam Moussa
149304b4a2
ci: add merge_group trigger for required ci / ci ( #39 )
Deploy / deploy (push) Waiting to run
2026-08-21 17:41:42 -04:00
dependabot[bot]
7e194b864f
build(deps): bump the minor-and-patch group with 5 updates ( #35 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.4` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.4` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.4` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.4` | `1.0.7` |
| [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ) | `1.0.6` | `1.0.7` |
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.4 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](81cf168170...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](81cf168170...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](81cf168170...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](81cf168170...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7f
2026-08-14 15:53:51 +00:00
dependabot[bot]
03814edc92
Merge pull request #34 from Sea-Haven-Industries/dependabot/npm_and_yarn/minor-and-patch-de6c8d5989
...
Deploy / deploy (push) Has been cancelled
build(deps): bump the minor-and-patch group across 1 directory with 5 updates
2026-08-07 13:18:04 -04:00
809bc0c84a
chore(ci): add pr policy org-required workflow
2026-08-07 12:19:12 -04:00
b92624994e
fix(ci): enable Jest CDK stack tests
...
Wire run-tests into CI and add assertions for SG, IAM, instance, DLM, and the imported volume attachment. Use @swc/jest because ts-jest cannot consume TypeScript 7's compiler API.
2026-08-07 12:19:12 -04:00
dependabot[bot]
9e09fe1568
build(deps): bump the minor-and-patch group with 4 updates
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.2 to 1.0.4
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...81cf168170
2026-08-06 22:53:50 +00:00
Adam Moussa
6d5e947d91
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:06:07 -04:00
Adam Moussa
528ec1fd26
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:56:03 -04:00
Adam Moussa
d84c9ed9d7
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #21 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:22 -04:00
Adam Moussa
49bc8747b9
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) ( #8 )
2026-06-11 14:14:13 -04:00
Adam Moussa
56be4eea0b
Add dependency-review caller workflow ( #3 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:27:07 -04:00
Adam Moussa
939ff7122c
Set node-version to 24 in CI/CD workflows
...
Lock file generated with npm 11 (Node 24) is incompatible with npm 10
(Node 22) in CI — npm ci fails on missing transitive dependencies.
2026-05-14 15:41:54 -04:00
Adam Moussa
427242499d
Initial file-share stack
...
CDK stack deploying a t4g.small EC2 instance with Samba and FileBrowser
for personal file storage over the site-to-site VPN. Includes 500 GiB
gp3 data volume with daily DLM snapshots.
2026-05-14 15:23:38 -04:00
