eb08e814fa
fix(iam): attach per-workload lambda permissions boundary (PLAT-52)
2026-08-20 14:31:27 -04:00
dependabot[bot]
48d613f104
chore(deps): bump the minor-and-patch group in /terraform with 2 updates ( #48 )
...
Bumps the minor-and-patch group in /terraform with 2 updates: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws ) and [hashicorp/external](https://github.com/hashicorp/terraform-provider-external ).
Updates `hashicorp/aws` from 6.58.0 to 6.60.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-aws/compare/v6.58.0...v6.60.0 )
Updates `hashicorp/external` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/hashicorp/terraform-provider-external/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-external/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-external/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: hashicorp/aws
dependency-version: 6.60.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: hashicorp/external
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:35:14 -04:00
dependabot[bot]
99ed4ff35f
chore(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #47 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.72
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-08-18 17:33:32 +00:00
dependabot[bot]
8db63f3378
chore(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #46 )
...
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.72
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 17:32:52 +00:00
dependabot[bot]
77818f6d25
chore(deps): bump the minor-and-patch group with 4 updates ( #45 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7f
2026-08-18 13:32:17 -04:00
dependabot[bot]
b01577f8cd
chore(deps): bump the minor-and-patch group ( #43 )
...
Bumps the minor-and-patch group in /src/user_sync with 2 updates: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
Updates `google-auth` from 2.56.2 to 2.56.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.2...google-auth-v2.56.3 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 16:22:30 +00:00
dependabot[bot]
8ee91fcd90
chore(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #42 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 12:21:17 -04:00
dependabot[bot]
871b4462b5
chore(deps): bump the minor-and-patch group with 4 updates ( #44 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...7ac3528750
2026-08-11 12:18:28 -04:00
Adam Moussa
7bbdbabe3a
feat(terraform): migrate front-integrations to HCP Terraform (PLAT-72) ( #41 )
...
* feat(terraform): migrate front-integrations to HCP Terraform
Freeze SAM CD and add Terraform for seahaven-prod (Lambdas, DynamoDB,
EventBridge, alarms) so HCP becomes the sole deploy path. Include prod
secret ARNs in the tfvars example for workspace wiring.
* fix(terraform): reject symlink sources in Lambda package build
2026-08-05 18:48:16 -04:00
Adam Moussa
b30ed47321
ci: add org PR policy caller (PLAT-62) ( #40 )
...
Deploy / deploy (push) Has been cancelled
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:57:14 +00:00
dependabot[bot]
7b47d45dfc
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #38 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.57 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.57...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:17:11 -04:00
dependabot[bot]
1f73602f2e
build(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #37 )
...
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.57 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.57...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:17:11 -04:00
dependabot[bot]
d09b703e7e
build(deps): bump the minor-and-patch group with 4 updates ( #36 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 11:17:10 -04:00
Adam Moussa
57aac44fb7
Merge pull request #35 from Sea-Haven-Industries/chore/add-codeowners
...
Deploy / deploy (push) Has been cancelled
chore: add CODEOWNERS
2026-07-29 12:59:25 -04:00
bbc3fb0a52
chore: add CODEOWNERS
2026-07-29 12:56:48 -04:00
Adam Moussa
6fb59a30cd
Merge pull request #34 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
...
Deploy / deploy (push) Waiting to run
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:18 -04:00
Adam Moussa
f1092a7859
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:06:38 -04:00
Adam Moussa
5cd382583e
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:56:38 -04:00
dependabot[bot]
61ddf67ceb
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #32 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.53 to 1.43.57
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.57 )
Updates `google-auth` from 2.56.1 to 2.56.2
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.1...google-auth-v2.56.2 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 13:06:22 -04:00
dependabot[bot]
61c358e3d9
build(deps): bump boto3 ( #31 )
...
Bumps the minor-and-patch group with 1 update in the /src/sla_monitor directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.53 to 1.43.57
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.57 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 12:57:01 -04:00
Adam Moussa
71c63b7434
fix(lint): resolve ruff 0.16 DTZ007/BLE001 failures blocking CI ( #33 )
...
CI installs unpinned latest ruff; 0.16.0 flags two pre-existing lines,
failing ci / ci on every PR (including safe Dependabot bumps #31/#32).
- sla_monitor: parse START_DATE with date.fromisoformat() instead of a
naive strptime().date() round-trip (identical result, no naive datetime)
- user_sync: keep the deliberate per-user blanket catch (one failed update
must not abort the sync) with a justified noqa: BLE001
2026-07-28 12:42:06 -04:00
dependabot[bot]
b5bd1093e5
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #30 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.52 to 1.43.53
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.53 )
Updates `google-auth` from 2.56.0 to 2.56.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.0...google-auth-v2.56.1 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 16:06:18 -04:00
dependabot[bot]
276fac5754
build(deps): bump boto3 ( #27 )
...
Bumps the minor-and-patch group with 1 update in the /src/sla_monitor directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.52 to 1.43.53
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 16:06:15 -04:00
Adam Moussa
c7a0b6ac6e
build(deps): batch Dependabot updates ( #27 , #28 ) ( #29 )
...
* build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump boto3 in /src/user_sync in the minor-and-patch group
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 19:47:13 +00:00
dependabot[bot]
289675bfc3
build(deps): bump the minor-and-patch group ( #26 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/user_sync with 2 updates: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47 )
Updates `google-auth` from 2.55.2 to 2.56.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.2...google-auth-v2.56.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-07-14 15:20:55 +00:00
dependabot[bot]
a99729b8fb
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #25 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 11:19:30 -04:00
Adam Moussa
4b9c80b2bd
fix(sla-monitor): count only business hours in SLA elapsed-time calc ( #24 )
...
Deploy / deploy (push) Waiting to run
_business_minutes_elapsed clamped each weekday span to midnight instead
of BH_END, and never applied BH_START, so overnight hours (17:00-08:00)
were counted as business time. BH_START/BH_END were defined but unused
in the calculation. A ticket opened Fri 16:00 and evaluated Mon 10:00
scored 1080 min instead of the correct 180 min (6x overcount), flipping
a tier-1 breach into a false tier-2 page.
Clamp each weekday to the [BH_START, BH_END) window and only accrue the
overlap with [since, now); weekends remain excluded. Holidays are still
unhandled (pre-existing, separate gap).
Found by the daily scanner (agentic, CWE-440); proof-or-kill confirmed.
2026-07-13 14:28:18 -04:00
Adam Moussa
4506e3cbf7
Document SAM template as IaC component in README ( #23 )
...
Deploy / deploy (push) Has been cancelled
The README described the deployed AWS resources but never mentioned
template.yaml itself, the SAM project layout, the global function
defaults, the full parameter set, or the stack outputs. Add a
Project Structure section and an Infrastructure section so the
template.yaml infrastructure-as-code component is documented
accurately.
2026-07-10 16:07:12 -04:00
dependabot[bot]
16a8d789d2
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #22 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
Updates `google-auth` from 2.55.1 to 2.55.2
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.1...google-auth-v2.55.2 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:06:24 +00:00
dependabot[bot]
b5b2ef14c0
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #21 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 17:02:57 -04:00
Adam Moussa
2097a6bbf0
ci: add github-actions to dependabot coverage (INFRA-130) ( #20 )
Deploy / deploy (push) Waiting to run
2026-07-08 16:53:45 -04:00
dependabot[bot]
d84464f7df
build(deps): bump boto3 ( #19 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.39 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 18:29:27 +00:00
dependabot[bot]
907cfbef7f
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #18 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.37 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.37...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 12:34:41 -04:00
Adam Moussa
dcc0e14a2b
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #17 )
Deploy / deploy (push) Waiting to run
2026-07-06 18:26:32 -04:00
Adam Moussa
f6de2b2e6f
docs: link Confluence AWS Architecture Map (INFRA-53) ( #16 )
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:07 -04:00
dependabot[bot]
1c43f9efef
build(deps): bump the minor-and-patch group across 1 directory with 3 updates ( #15 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ), [google-auth](https://github.com/googleapis/google-cloud-python ) and [google-api-python-client](https://github.com/googleapis/google-api-python-client ).
Updates `boto3` from 1.43.36 to 1.43.39
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.0...google-auth-v2.55.1 )
Updates `google-api-python-client` from 2.197.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases )
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.197.0...v2.198.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-api-python-client
dependency-version: 2.198.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:27:29 -04:00
dependabot[bot]
d26897f4c6
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #14 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.36 to 1.43.37
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.37 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:46:06 -04:00
dependabot[bot]
65dbe4d3c4
build(deps): bump boto3 ( #13 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.31 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:58:52 -04:00
dependabot[bot]
366dc05d91
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #12 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.30 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:55:28 -04:00
Adam Moussa
7dcd2d7ccc
Add CloudWatch alarm coverage for front-integrations ( #11 )
...
Deploy / deploy (push) Has been cancelled
* Add CloudWatch alarm coverage for front-integrations
Both Lambdas and the front-sla-alerts table previously had zero alarm
coverage, so failures or runaway runs went unnoticed until someone
checked logs. Wire a standard alarm set to the shared site-alerts SNS
topic (ALARM-only, TreatMissingData notBreaching) per Wave 1 conventions.
- Lambda Errors + Throttles alarms for front-sla-monitor and
front-user-sync (Sum, threshold 0).
- Lambda Duration alarms (Max, threshold 270000 = 90% of the shared
300s timeout) for both functions.
- DynamoDB ThrottledRequests + SystemErrors alarms on front-sla-alerts.
Document the alarm set in the README.
* Fix DynamoDB throttle alarm metric: use Read/WriteThrottleEvents
ThrottledRequests and SystemErrors are not emitted at the TableName-only
dimension (only TableName+Operation), so these table-level alarms would sit
permanently in INSUFFICIENT_DATA and never fire. Replace with
ReadThrottleEvents and WriteThrottleEvents, which AWS/DynamoDB emits at the
TableName dimension.
* Fix README DynamoDB alarm rows to match shipped alarms
Replace stale front-sla-alerts-throttled-requests / -system-errors rows
with the alarms actually shipped: front-sla-alerts-read-throttle
(ReadThrottleEvents) and front-sla-alerts-write-throttle
(WriteThrottleEvents).
2026-06-17 14:45:58 -04:00
dependabot[bot]
98b30ba1ec
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #10 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.25 to 1.43.31
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.31 )
Updates `google-auth` from 2.53.0 to 2.55.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.53.0...google-auth-v2.55.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:22:28 -04:00
dependabot[bot]
a6b4f0b56d
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #9 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.25 to 1.43.30
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.30 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:18:57 -04:00
Adam Moussa
2bd78abd9b
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #8 )
Deploy / deploy (push) Has been cancelled
2026-06-11 14:13:40 -04:00
dependabot[bot]
c18e64e396
build(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #6 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:31 -04:00
dependabot[bot]
27700580c8
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #5 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.23 to 1.43.25
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:11:26 -04:00
Adam Moussa
e50c8f0876
Attach permissions boundary to all Lambda roles ( #7 )
...
Deploy / deploy (push) Waiting to run
Adds the seahaven-lambda-execution-boundary policy as a
PermissionsBoundary on all auto-generated Lambda execution
roles via Globals.Function, enabling the cfn-execution-role
scope-down from INFRA-97 to safely allow iam:CreateRole.
No explicit AWS::IAM::Role resources exist in this stack;
the Globals entry covers both SlaMonitorFunction and
UserSyncFunction.
Refs: INFRA-103
2026-06-10 14:14:58 -04:00
Adam Moussa
6b689851d2
fix(deps): pin Python requirements ( #2 )
...
Deploy / deploy (push) Has been cancelled
Pin previously unpinned dependencies to exact versions across the
sla_monitor and user_sync functions for reproducible builds.
2026-06-05 14:13:56 -04:00
Adam Moussa
b7c65cedfb
Add dependency-review caller workflow ( #3 )
...
Deploy / deploy (push) Waiting to run
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
* style: ruff format src
2026-06-05 12:34:16 -04:00
Adam Moussa
899f07d09c
Add unified Front integrations SAM stack
...
Consolidates front-sla-monitor (Python SAM) and google-user-sync
(JavaScript CDK) into a single Python SAM repo with two Lambdas:
front-sla-monitor and front-user-sync.
2026-05-12 11:24:41 -04:00
