a150448fa1
ci: add github-actions to dependabot coverage (INFRA-130)
2026-07-08 16:30:38 -04:00
dependabot[bot]
d84464f7df
build(deps): bump boto3 ( #19 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.39 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 18:29:27 +00:00
dependabot[bot]
907cfbef7f
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #18 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.37 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.37...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 12:34:41 -04:00
Adam Moussa
dcc0e14a2b
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #17 )
Deploy / deploy (push) Waiting to run
2026-07-06 18:26:32 -04:00
Adam Moussa
f6de2b2e6f
docs: link Confluence AWS Architecture Map (INFRA-53) ( #16 )
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:07 -04:00
dependabot[bot]
1c43f9efef
build(deps): bump the minor-and-patch group across 1 directory with 3 updates ( #15 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ), [google-auth](https://github.com/googleapis/google-cloud-python ) and [google-api-python-client](https://github.com/googleapis/google-api-python-client ).
Updates `boto3` from 1.43.36 to 1.43.39
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.0...google-auth-v2.55.1 )
Updates `google-api-python-client` from 2.197.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases )
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.197.0...v2.198.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-api-python-client
dependency-version: 2.198.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:27:29 -04:00
dependabot[bot]
d26897f4c6
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #14 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.36 to 1.43.37
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.37 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:46:06 -04:00
dependabot[bot]
65dbe4d3c4
build(deps): bump boto3 ( #13 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.31 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:58:52 -04:00
dependabot[bot]
366dc05d91
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #12 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.30 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:55:28 -04:00
Adam Moussa
7dcd2d7ccc
Add CloudWatch alarm coverage for front-integrations ( #11 )
...
Deploy / deploy (push) Has been cancelled
* Add CloudWatch alarm coverage for front-integrations
Both Lambdas and the front-sla-alerts table previously had zero alarm
coverage, so failures or runaway runs went unnoticed until someone
checked logs. Wire a standard alarm set to the shared site-alerts SNS
topic (ALARM-only, TreatMissingData notBreaching) per Wave 1 conventions.
- Lambda Errors + Throttles alarms for front-sla-monitor and
front-user-sync (Sum, threshold 0).
- Lambda Duration alarms (Max, threshold 270000 = 90% of the shared
300s timeout) for both functions.
- DynamoDB ThrottledRequests + SystemErrors alarms on front-sla-alerts.
Document the alarm set in the README.
* Fix DynamoDB throttle alarm metric: use Read/WriteThrottleEvents
ThrottledRequests and SystemErrors are not emitted at the TableName-only
dimension (only TableName+Operation), so these table-level alarms would sit
permanently in INSUFFICIENT_DATA and never fire. Replace with
ReadThrottleEvents and WriteThrottleEvents, which AWS/DynamoDB emits at the
TableName dimension.
* Fix README DynamoDB alarm rows to match shipped alarms
Replace stale front-sla-alerts-throttled-requests / -system-errors rows
with the alarms actually shipped: front-sla-alerts-read-throttle
(ReadThrottleEvents) and front-sla-alerts-write-throttle
(WriteThrottleEvents).
2026-06-17 14:45:58 -04:00
dependabot[bot]
98b30ba1ec
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #10 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.25 to 1.43.31
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.31 )
Updates `google-auth` from 2.53.0 to 2.55.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.53.0...google-auth-v2.55.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:22:28 -04:00
dependabot[bot]
a6b4f0b56d
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #9 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.25 to 1.43.30
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.30 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:18:57 -04:00
Adam Moussa
2bd78abd9b
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #8 )
Deploy / deploy (push) Has been cancelled
2026-06-11 14:13:40 -04:00
dependabot[bot]
c18e64e396
build(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #6 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:31 -04:00
dependabot[bot]
27700580c8
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #5 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:26 -04:00
Adam Moussa
e50c8f0876
Attach permissions boundary to all Lambda roles ( #7 )
...
Deploy / deploy (push) Waiting to run
Adds the seahaven-lambda-execution-boundary policy as a
PermissionsBoundary on all auto-generated Lambda execution
roles via Globals.Function, enabling the cfn-execution-role
scope-down from INFRA-97 to safely allow iam:CreateRole.
No explicit AWS::IAM::Role resources exist in this stack;
the Globals entry covers both SlaMonitorFunction and
UserSyncFunction.
Refs: INFRA-103
2026-06-10 14:14:58 -04:00
Adam Moussa
6b689851d2
fix(deps): pin Python requirements ( #2 )
...
Deploy / deploy (push) Has been cancelled
Pin previously unpinned dependencies to exact versions across the
sla_monitor and user_sync functions for reproducible builds.
2026-06-05 14:13:56 -04:00
Adam Moussa
b7c65cedfb
Add dependency-review caller workflow ( #3 )
...
Deploy / deploy (push) Waiting to run
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
* style: ruff format src
2026-06-05 12:34:16 -04:00
Adam Moussa
899f07d09c
Add unified Front integrations SAM stack
...
Consolidates front-sla-monitor (Python SAM) and google-user-sync
(JavaScript CDK) into a single Python SAM repo with two Lambdas:
front-sla-monitor and front-user-sync.
2026-05-12 11:24:41 -04:00
