398baaf7c2
ci: update callable-pr-policy to v1.0.6
2026-08-06 12:24:28 -04:00
1062bb35d6
ci: add org PR policy caller
...
Refs: PLAT-62
2026-08-04 11:33:34 -04:00
Adam Moussa
0613d8d6b0
Merge pull request #62 from Sea-Haven-Industries/dependabot/npm_and_yarn/aws-cdk-2.1133.0
Deploy / deploy (push) Has been cancelled
2026-07-30 14:08:02 -04:00
dependabot[bot]
b84bbe61f2
chore(deps-dev): bump aws-cdk from 2.1132.1 to 2.1134.0
...
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1132.1 to 2.1134.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1134.0/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-version: 2.1133.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 13:52:10 +00:00
Adam Moussa
92dd62afbe
Merge pull request #61 from Sea-Haven-Industries/dependabot/npm_and_yarn/constructs-10.7.2
Deploy / deploy (push) Waiting to run
2026-07-30 09:50:45 -04:00
dependabot[bot]
698dc14626
chore(deps): bump constructs from 10.7.1 to 10.8.0
...
Bumps [constructs](https://github.com/aws/constructs ) from 10.7.1 to 10.8.0.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.7.1...v10.8.0 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.7.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 13:11:42 +00:00
Adam Moussa
f85d96ce0b
Merge pull request #60 from Sea-Haven-Industries/dependabot/npm_and_yarn/aws-cdk-lib-2.262.2
2026-07-30 09:09:18 -04:00
dependabot[bot]
968faa37c4
chore(deps): bump aws-cdk-lib from 2.262.0 to 2.262.2
...
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib ) from 2.262.0 to 2.262.2.
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/commits/v2.262.2/packages/aws-cdk-lib )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.262.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 13:04:58 +00:00
Adam Moussa
3bbf81c122
Merge pull request #59 from Sea-Haven-Industries/dependabot/github_actions/Sea-Haven-Industries/dot-github/dot-github/workflows/cd-cdk.yaml-1.0.3
Deploy / deploy (push) Waiting to run
2026-07-30 01:53:45 -04:00
dependabot[bot]
fdee41dc82
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/cd-cdk.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-07-30 05:49:42 +00:00
Adam Moussa
cb64441656
Merge pull request #58 from Sea-Haven-Industries/dependabot/github_actions/Sea-Haven-Industries/dot-github/dot-github/workflows/ci-typescript-cdk.yaml-1.0.3
2026-07-30 01:48:04 -04:00
dependabot[bot]
184a289f9c
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-07-30 05:44:02 +00:00
Adam Moussa
4be3238c9f
Merge pull request #57 from Sea-Haven-Industries/dependabot/github_actions/Sea-Haven-Industries/dot-github/dot-github/workflows/callable-labeler.yaml-1.0.3
2026-07-30 01:42:20 -04:00
dependabot[bot]
6066807ad2
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-07-30 05:38:41 +00:00
Adam Moussa
7d3f3f215c
Merge pull request #56 from Sea-Haven-Industries/dependabot/github_actions/Sea-Haven-Industries/dot-github/dot-github/workflows/callable-dependency-review.yaml-1.0.3
2026-07-30 01:36:59 -04:00
dependabot[bot]
7fb9cb7818
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-07-30 02:13:25 +00:00
Adam Moussa
ea158fb549
Merge pull request #55 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
...
Deploy / deploy (push) Has been cancelled
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:30 -04:00
Adam Moussa
ed5985672b
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:07:48 -04:00
Adam Moussa
09443bf179
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:58:00 -04:00
Adam Moussa
b9d4f574d6
Chore/bump aws cdk and constructs ( #54 )
...
Deploy / deploy (push) Has been cancelled
* chore(deps-dev): bump aws-cdk from 2.1131.0 to 2.1132.1
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1131.0 to 2.1132.1.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1132.1/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-version: 2.1132.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): bump constructs from 10.7.0 to 10.7.1
Bumps [constructs](https://github.com/aws/constructs ) from 10.7.0 to 10.7.1.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.7.0...v10.7.1 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.7.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* chore(deps): bump aws-cdk-lib from 2.261.0 to 2.262.0
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib ) from 2.261.0 to 2.262.0.
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/commits/v2.262.0/packages/aws-cdk-lib )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.262.0
dependency-type: direct:production
update-type: version-update:semver-minor
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-23 16:20:15 +00:00
dependabot[bot]
7cd1a7201f
chore(deps): update google-cloud-storage requirement ( #50 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [google-cloud-storage](https://github.com/googleapis/google-cloud-python ) to permit the latest version.
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-cloud-storage-v3.12.1...google-cloud-storage-v3.13.0 )
---
updated-dependencies:
- dependency-name: google-cloud-storage
dependency-version: 3.13.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 18:45:42 +00:00
dependabot[bot]
8273328b49
chore(deps-dev): bump aws-cdk from 2.1130.0 to 2.1131.0 ( #49 )
...
Deploy / deploy (push) Waiting to run
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1130.0 to 2.1131.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1131.0/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-version: 2.1131.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 16:28:52 +00:00
dependabot[bot]
ee8f59b9b7
chore(deps-dev): bump tsx from 4.23.0 to 4.23.1 ( #48 )
...
Bumps [tsx](https://github.com/privatenumber/tsx ) from 4.23.0 to 4.23.1.
- [Release notes](https://github.com/privatenumber/tsx/releases )
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs )
- [Commits](https://github.com/privatenumber/tsx/compare/v4.23.0...v4.23.1 )
---
updated-dependencies:
- dependency-name: tsx
dependency-version: 4.23.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 16:23:05 +00:00
dependabot[bot]
d85124cff7
chore(deps): bump constructs from 10.6.0 to 10.7.0 ( #47 )
...
Bumps [constructs](https://github.com/aws/constructs ) from 10.6.0 to 10.7.0.
- [Release notes](https://github.com/aws/constructs/releases )
- [Commits](https://github.com/aws/constructs/compare/v10.6.0...v10.7.0 )
---
updated-dependencies:
- dependency-name: constructs
dependency-version: 10.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-16 12:17:18 -04:00
dependabot[bot]
6cf50af1af
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 ( #43 )
...
Deploy / deploy (push) Has been cancelled
* chore(deps-dev): bump typescript from 6.0.3 to 7.0.2
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/commits )
---
updated-dependencies:
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix: regenerate package-lock.json to reflect typescript bump
Update cdk.json to use tsx and regenerate package-lock.json to satisfy CI
* fix: declare and pin tsx runner for CDK app
TypeScript 7's native port is incompatible with ts-node, so cdk.json was
switched to tsx — but it was invoked via `npx`, which fetches an
unpinned copy from the registry at synth/deploy time with no lockfile
entry or integrity check.
Declare tsx as a pinned devDependency (~4.23.0) and invoke the local bin
instead of npx. Update the README's cdk.json section to match. Verified
with `npm run build` (tsc 7.0.2) and `cdk synth` — both green.
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <adam@seahavenind.com>
2026-07-10 17:41:56 -04:00
Adam Moussa
72f0637fee
Document CDK app and cdk.json in README ( #46 )
...
Deploy / deploy (push) Waiting to run
The README covered runtime architecture and operations thoroughly but
never described the infrastructure-as-code layer itself. Readers had no
map of the CDK app: which files define the stacks, what cdk.json is, or
how to synth/diff. Add an Infrastructure as Code section covering the
project layout, the two stacks and their dependency, cdk.json, and the
common CDK commands.
2026-07-10 16:07:40 -04:00
dependabot[bot]
1fb12a965b
chore(deps): update google-cloud-storage requirement ( #45 )
Deploy / deploy (push) Has been cancelled
2026-07-09 13:33:02 +00:00
dependabot[bot]
32fa1018ea
chore(deps-dev): bump @types/node from 24.13.2 to 24.13.3 ( #44 )
2026-07-09 09:26:01 -04:00
Adam Moussa
848682cc94
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #42 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:25 -04:00
dependabot[bot]
1e35876db7
Bump aws-cdk-lib from 2.260.0 to 2.261.0 ( #41 )
Deploy / deploy (push) Has been cancelled
2026-07-04 05:54:33 +00:00
seahaven-openswe[bot]
0eff9ff829
fix: pin @types/node to CI runtime major and block Dependabot major bumps ( #40 )
2026-07-04 01:48:51 -04:00
dependabot[bot]
4c7b29e1ed
Bump aws-cdk from 2.1128.1 to 2.1129.0 ( #37 )
...
Deploy / deploy (push) Has been cancelled
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1128.1 to 2.1129.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1129.0/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-version: 2.1129.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:24:10 -04:00
Copilot
36c5e17ab8
fix: extend S3 lifecycle rule to cover root-level backup objects across all stacks ( #36 )
...
Deploy / deploy (push) Has been cancelled
* Initial plan
* fix: remove archive/ prefix from S3 lifecycle rule to cover root-level objects
The archive-to-glacier rule had prefix: "archive/" which caused pre-migration
backup files written to the bucket root to be excluded from any transition
policy. Removing the prefix makes the rule apply to all objects in the bucket,
ensuring root-level dump files also transition to Glacier after 30 days.
Closes #4
* fix: remove archive/ prefix from lifecycle rule in forgejo-replica-stack.ts
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
2026-06-25 11:22:12 -04:00
dependabot[bot]
bd90e90d7c
Bump aws-cdk from 2.1128.0 to 2.1128.1 ( #35 )
Deploy / deploy (push) Waiting to run
2026-06-24 22:21:44 -04:00
dependabot[bot]
8fa63891ab
Update google-cloud-storage requirement in /lambda/backup-verification ( #33 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [google-cloud-storage](https://github.com/googleapis/google-cloud-python ) to permit the latest version.
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-cloud-storage-v3.11.0...google-cloud-storage-v3.12.0 )
---
updated-dependencies:
- dependency-name: google-cloud-storage
dependency-version: 3.12.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 12:09:21 -04:00
dependabot[bot]
cc55dc50f4
Bump aws-cdk-lib from 2.258.1 to 2.260.0 ( #32 )
...
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib ) from 2.258.1 to 2.260.0.
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/commits/v2.260.0/packages/aws-cdk-lib )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.260.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 12:02:02 -04:00
dependabot[bot]
48375d5441
Bump aws-cdk from 2.1126.0 to 2.1128.0 ( #31 )
...
Bumps [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk ) from 2.1126.0 to 2.1128.0.
- [Release notes](https://github.com/aws/aws-cdk-cli/releases )
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1128.0/packages/aws-cdk )
---
updated-dependencies:
- dependency-name: aws-cdk
dependency-version: 2.1128.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-18 11:55:11 -04:00
dependabot[bot]
211ef970f6
Update google-cloud-storage requirement in /lambda/backup-verification ( #30 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [google-cloud-storage](https://github.com/googleapis/google-cloud-python ) to permit the latest version.
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-cloud-iam-v2.18.0...google-cloud-storage-v3.11.0 )
---
updated-dependencies:
- dependency-name: google-cloud-storage
dependency-version: 3.11.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 14:37:46 -04:00
Adam Moussa
e32401e554
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) ( #29 )
Deploy / deploy (push) Waiting to run
2026-06-11 14:13:26 -04:00
dependabot[bot]
36efdb4472
Bump @types/node from 25.9.1 to 25.9.3 ( #28 )
...
Deploy / deploy (push) Waiting to run
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.9.1 to 25.9.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 12:00:14 -04:00
dependabot[bot]
ba99103978
Bump aws-cdk-lib from 2.258.0 to 2.258.1 ( #27 )
...
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib ) from 2.258.0 to 2.258.1.
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/commits/v2.258.1/packages/aws-cdk-lib )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.258.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-11 11:54:27 -04:00
Adam Moussa
891dc0831b
docs: document persistent data volume, restore-on-boot, cached AMI, alarms ( #25 )
...
Deploy / deploy (push) Has been cancelled
Storage architecture changed 2026-06-05: state moved off the root
volume onto a standalone RETAIN data volume with automatic S3 restore
on empty boot.
2026-06-05 15:54:26 -04:00
dependabot[bot]
b75b4cc130
Bump aws-cdk-lib from 2.257.0 to 2.258.0 ( #16 )
...
Deploy / deploy (push) Waiting to run
Bumps [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib ) from 2.257.0 to 2.258.0.
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/commits/v2.258.0/packages/aws-cdk-lib )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.257.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 15:06:04 -04:00
Adam Moussa
149178e1e2
fix(monitoring): wire backup-verification alarms to site-alerts topic ( #24 )
...
Both alarms changed state but notified nobody (no AlarmActions). Wire
each to the org operational alarm topic (site-alerts, CMK-encrypted)
with an ALARM action only — no OK action per org convention.
2026-06-05 14:47:09 -04:00
Adam Moussa
a7536f0bd7
Fix daily flapping of backup-verification errors alarm ( #23 )
...
The forgejo-backup-verification Lambda runs once per day, so its Errors
metric has data for only one hour and is missing for the other ~23h.
The errors alarm used TreatMissingData=BREACHING, which treated those
23h of missing data as a breach and flipped the alarm OK->ALARM every
day around 11:01 UTC despite zero actual errors.
Changes (alarm-only, no instance changes):
- ErrorAlarm: TreatMissingData BREACHING -> NOT_BREACHING. No data now
means "no errors = healthy" instead of a false breach.
- Add forgejo-backup-verification-not-running: Invocations Sum over a
24h period, alarms when < 1 invocation. This is the real "the daily
verification never ran" guard that the BREACHING setting was trying
(incorrectly) to provide.
Both alarms keep the existing action wiring (no SNS/OK actions), per the
org convention of never notifying on recovery.
2026-06-05 14:34:45 -04:00
Adam Moussa
f6b105a9fd
fix(infra): persistent data volume + restore-on-boot + cached AMI ( #22 )
...
Deploy / deploy (push) Waiting to run
Today's instance replacement (uncached AMI lookup resolved a new AL2023
release) destroyed the root volume holding all Forgejo state; restored
manually from the 05:00 S3 dump. This makes replacement harmless:
- New 50 GiB standalone volume (RemovalPolicy.RETAIN) mounted at
/var/lib/forgejo — sqlite db, repositories, and logs all survive
instance replacement and stack deletion. No app.ini path changes.
- Restore-on-boot: if the data volume has no database (first boot or
total volume loss), userdata restores the latest S3 dump
automatically before starting the service. Volume loss self-heals
to <=24h-old state.
- blkid guard: an existing filesystem is mounted, never formatted.
- cachedInContext: true + committed cdk.context.json — AMI changes
(and the instance replacement they force) become deliberate.
- Root volume 50 -> 20 GiB; state no longer lives there.
- forgejo-backup tag on the data volume brings it under the existing
DLM snapshot policy.
Deploy replaces the instance once; restore-on-boot pulls the fresh
17:43 UTC dump.
2026-06-05 13:47:51 -04:00
Adam Moussa
8d520f844b
fix(deps): bump aws-cdk-lib pin to 2.257.0 ( #21 )
2026-06-05 12:58:26 -04:00
Adam Moussa
6754ceaa42
Add dependency-review caller workflow ( #20 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:38 -04:00
dependabot[bot]
0ff128a0a6
Bump aws-cdk from 2.1121.0 to 2.1122.0 ( #11 )
...
Deploy / deploy (push) Has been cancelled
aws-cdk CLI 2.1122.0 — patch bump, CI passes. Claude Code Review check didn't register on Dependabot rebase.
2026-05-18 17:36:30 -04:00
dependabot[bot]
425bc86cc7
Bump @types/node from 22.19.18 to 25.9.0 ( #9 )
...
Deploy / deploy (push) Waiting to run
@types/node 25.9.0 — validated locally: tsc --noEmit passes.
2026-05-18 17:27:53 -04:00
