dependabot[bot]
93d9ece52e
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-07-14 06:34:25 +00:00
Adam Moussa
4b9c80b2bd
fix(sla-monitor): count only business hours in SLA elapsed-time calc ( #24 )
...
Deploy / deploy (push) Waiting to run
_business_minutes_elapsed clamped each weekday span to midnight instead
of BH_END, and never applied BH_START, so overnight hours (17:00-08:00)
were counted as business time. BH_START/BH_END were defined but unused
in the calculation. A ticket opened Fri 16:00 and evaluated Mon 10:00
scored 1080 min instead of the correct 180 min (6x overcount), flipping
a tier-1 breach into a false tier-2 page.
Clamp each weekday to the [BH_START, BH_END) window and only accrue the
overlap with [since, now); weekends remain excluded. Holidays are still
unhandled (pre-existing, separate gap).
Found by the daily scanner (agentic, CWE-440); proof-or-kill confirmed.
2026-07-13 14:28:18 -04:00
Adam Moussa
4506e3cbf7
Document SAM template as IaC component in README ( #23 )
...
Deploy / deploy (push) Has been cancelled
The README described the deployed AWS resources but never mentioned
template.yaml itself, the SAM project layout, the global function
defaults, the full parameter set, or the stack outputs. Add a
Project Structure section and an Infrastructure section so the
template.yaml infrastructure-as-code component is documented
accurately.
2026-07-10 16:07:12 -04:00
dependabot[bot]
16a8d789d2
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #22 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
Updates `google-auth` from 2.55.1 to 2.55.2
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.1...google-auth-v2.55.2 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:06:24 +00:00
dependabot[bot]
b5b2ef14c0
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #21 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 17:02:57 -04:00
Adam Moussa
2097a6bbf0
ci: add github-actions to dependabot coverage (INFRA-130) ( #20 )
Deploy / deploy (push) Waiting to run
2026-07-08 16:53:45 -04:00
dependabot[bot]
d84464f7df
build(deps): bump boto3 ( #19 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.39 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 18:29:27 +00:00
dependabot[bot]
907cfbef7f
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #18 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.37 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.37...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 12:34:41 -04:00
Adam Moussa
dcc0e14a2b
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #17 )
Deploy / deploy (push) Waiting to run
2026-07-06 18:26:32 -04:00
Adam Moussa
f6de2b2e6f
docs: link Confluence AWS Architecture Map (INFRA-53) ( #16 )
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:07 -04:00
dependabot[bot]
1c43f9efef
build(deps): bump the minor-and-patch group across 1 directory with 3 updates ( #15 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ), [google-auth](https://github.com/googleapis/google-cloud-python ) and [google-api-python-client](https://github.com/googleapis/google-api-python-client ).
Updates `boto3` from 1.43.36 to 1.43.39
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.0...google-auth-v2.55.1 )
Updates `google-api-python-client` from 2.197.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases )
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.197.0...v2.198.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-api-python-client
dependency-version: 2.198.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:27:29 -04:00
dependabot[bot]
d26897f4c6
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #14 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.36 to 1.43.37
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.37 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:46:06 -04:00
dependabot[bot]
65dbe4d3c4
build(deps): bump boto3 ( #13 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.31 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:58:52 -04:00
dependabot[bot]
366dc05d91
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #12 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.30 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:55:28 -04:00
Adam Moussa
7dcd2d7ccc
Add CloudWatch alarm coverage for front-integrations ( #11 )
...
Deploy / deploy (push) Has been cancelled
* Add CloudWatch alarm coverage for front-integrations
Both Lambdas and the front-sla-alerts table previously had zero alarm
coverage, so failures or runaway runs went unnoticed until someone
checked logs. Wire a standard alarm set to the shared site-alerts SNS
topic (ALARM-only, TreatMissingData notBreaching) per Wave 1 conventions.
- Lambda Errors + Throttles alarms for front-sla-monitor and
front-user-sync (Sum, threshold 0).
- Lambda Duration alarms (Max, threshold 270000 = 90% of the shared
300s timeout) for both functions.
- DynamoDB ThrottledRequests + SystemErrors alarms on front-sla-alerts.
Document the alarm set in the README.
* Fix DynamoDB throttle alarm metric: use Read/WriteThrottleEvents
ThrottledRequests and SystemErrors are not emitted at the TableName-only
dimension (only TableName+Operation), so these table-level alarms would sit
permanently in INSUFFICIENT_DATA and never fire. Replace with
ReadThrottleEvents and WriteThrottleEvents, which AWS/DynamoDB emits at the
TableName dimension.
* Fix README DynamoDB alarm rows to match shipped alarms
Replace stale front-sla-alerts-throttled-requests / -system-errors rows
with the alarms actually shipped: front-sla-alerts-read-throttle
(ReadThrottleEvents) and front-sla-alerts-write-throttle
(WriteThrottleEvents).
2026-06-17 14:45:58 -04:00
dependabot[bot]
98b30ba1ec
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #10 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.25 to 1.43.31
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.31 )
Updates `google-auth` from 2.53.0 to 2.55.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.53.0...google-auth-v2.55.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:22:28 -04:00
dependabot[bot]
a6b4f0b56d
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #9 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.25 to 1.43.30
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.30 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:18:57 -04:00
Adam Moussa
2bd78abd9b
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #8 )
Deploy / deploy (push) Has been cancelled
2026-06-11 14:13:40 -04:00
dependabot[bot]
c18e64e396
build(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #6 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:31 -04:00
dependabot[bot]
27700580c8
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #5 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:26 -04:00
Adam Moussa
e50c8f0876
Attach permissions boundary to all Lambda roles ( #7 )
...
Deploy / deploy (push) Waiting to run
Adds the seahaven-lambda-execution-boundary policy as a
PermissionsBoundary on all auto-generated Lambda execution
roles via Globals.Function, enabling the cfn-execution-role
scope-down from INFRA-97 to safely allow iam:CreateRole.
No explicit AWS::IAM::Role resources exist in this stack;
the Globals entry covers both SlaMonitorFunction and
UserSyncFunction.
Refs: INFRA-103
2026-06-10 14:14:58 -04:00
Adam Moussa
6b689851d2
fix(deps): pin Python requirements ( #2 )
...
Deploy / deploy (push) Has been cancelled
Pin previously unpinned dependencies to exact versions across the
sla_monitor and user_sync functions for reproducible builds.
2026-06-05 14:13:56 -04:00
Adam Moussa
b7c65cedfb
Add dependency-review caller workflow ( #3 )
...
Deploy / deploy (push) Waiting to run
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
* style: ruff format src
2026-06-05 12:34:16 -04:00
Adam Moussa
899f07d09c
Add unified Front integrations SAM stack
...
Consolidates front-sla-monitor (Python SAM) and google-user-sync
(JavaScript CDK) into a single Python SAM repo with two Lambdas:
front-sla-monitor and front-user-sync.
2026-05-12 11:24:41 -04:00
