Adam Moussa
e4982b87ad
feat(terraform): migrate forgejo to HCP Terraform (PLAT-80) ( #100 )
...
* feat(terraform): migrate forgejo to HCP Terraform
Move the prod host onto workspace forgejo-prod in the After Hours VPC and freeze CDK push deploys so cutover can happen without applying into seahaven-prod.
* fix(terraform): restore forgejo.db from the dump tarball
Boot restore was copying data/ and repos/ and leaving the sqlite file at the archive root, so a volume restore started Forgejo with no database.
2026-09-29 22:49:21 +00:00
dependabot[bot]
95dfc6cb94
chore(deps): callable-dependency-review.yaml ( #79 )
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7f )
---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
dependency-version: 1.0.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-13 16:29:36 +00:00
dependabot[bot]
bb6902ef8e
chore(deps): bump callable-dependency-review.yaml ( #73 )
...
Deploy / deploy (push) Waiting to run
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.4 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](81cf168170...7ac3528750 )
---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
dependency-version: 1.0.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 11:44:09 -04:00
dependabot[bot]
7baf8f3061
chore(deps): bump dependency-review.yaml to 1.0.4 ( #65 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 10:54:08 -04:00
dependabot[bot]
7fb9cb7818
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
...
Bumps [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422 )
---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
dependency-version: 1.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-30 02:13:25 +00:00
Adam Moussa
ed5985672b
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:07:48 -04:00
Adam Moussa
09443bf179
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:58:00 -04:00
Adam Moussa
848682cc94
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #42 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:25 -04:00
Adam Moussa
6754ceaa42
Add dependency-review caller workflow ( #20 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:38 -04:00