ecc0e17ea5
feat(iam): import hcptf roles into app Terraform (PLAT-146)
...
Move the existing hcptf pair into this repo so app Terraform owns prod IAM after the substrate handoff.
2026-09-02 14:49:06 -04:00
dependabot[bot]
b558c12a88
chore(deps): bump the minor-and-patch group with 3 updates ( #56 )
2026-08-25 18:16:03 +00:00
dependabot[bot]
e7675f3210
chore(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #57 )
2026-08-25 18:11:53 +00:00
dependabot[bot]
76a4138c87
chore(deps): bump the minor-and-patch group ( #58 )
2026-08-25 18:11:11 +00:00
dependabot[bot]
3c7bc7e8b1
chore(deps): bump hashicorp/aws ( #60 )
2026-08-25 18:01:47 +00:00
Adam Moussa
23e2f3187e
chore(deps): remove dependabot version updates ( #61 )
...
Renovate is the version-update bot. GitHub Dependabot alerts stay.
2026-08-25 11:51:24 -04:00
Adam Moussa
6ae688a30a
chore(ci): remove pr policy workflow caller ( #55 )
2026-08-24 15:12:12 -04:00
Adam Moussa
3449c79494
chore(ci): switch auto-merge from seahaven-bot to Mergify ( #54 )
2026-08-24 13:52:31 -04:00
Adam Moussa
642bf16b27
fix(ci): enqueue merge queue as seahaven-bot (PLAT-108) ( #52 )
...
* fix(ci): enqueue merge queue as seahaven-bot
* fix(ci): limit seahaven-bot enqueue to PRs targeting main
2026-08-24 15:20:34 +00:00
Adam Moussa
a042994ea9
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #51 )
...
* ci: enable squash auto-merge on ready PRs
* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:25 +00:00
Adam Moussa
3f31b37890
ci: add merge_group trigger for required ci / ci ( #50 )
2026-08-21 17:41:55 -04:00
Adam Moussa
f231730c24
fix(iam): attach per-workload lambda permissions boundary (PLAT-52) ( #49 )
2026-08-20 16:02:33 -04:00
dependabot[bot]
48d613f104
chore(deps): bump the minor-and-patch group in /terraform with 2 updates ( #48 )
...
Bumps the minor-and-patch group in /terraform with 2 updates: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws ) and [hashicorp/external](https://github.com/hashicorp/terraform-provider-external ).
Updates `hashicorp/aws` from 6.58.0 to 6.60.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-aws/compare/v6.58.0...v6.60.0 )
Updates `hashicorp/external` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/hashicorp/terraform-provider-external/releases )
- [Changelog](https://github.com/hashicorp/terraform-provider-external/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/terraform-provider-external/compare/v2.4.0...v2.4.1 )
---
updated-dependencies:
- dependency-name: hashicorp/aws
dependency-version: 6.60.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: hashicorp/external
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 13:35:14 -04:00
dependabot[bot]
99ed4ff35f
chore(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #47 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.72
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-08-18 17:33:32 +00:00
dependabot[bot]
8db63f3378
chore(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #46 )
...
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.72
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-18 17:32:52 +00:00
dependabot[bot]
77818f6d25
chore(deps): bump the minor-and-patch group with 4 updates ( #45 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7fhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](7ac3528750...e5691d8a7f
2026-08-18 13:32:17 -04:00
dependabot[bot]
b01577f8cd
chore(deps): bump the minor-and-patch group ( #43 )
...
Bumps the minor-and-patch group in /src/user_sync with 2 updates: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
Updates `google-auth` from 2.56.2 to 2.56.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.2...google-auth-v2.56.3 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 16:22:30 +00:00
dependabot[bot]
8ee91fcd90
chore(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #42 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.67 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.67
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 12:21:17 -04:00
dependabot[bot]
871b4462b5
chore(deps): bump the minor-and-patch group with 4 updates ( #44 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](9c1ecf9428...7ac3528750
2026-08-11 12:18:28 -04:00
Adam Moussa
7bbdbabe3a
feat(terraform): migrate front-integrations to HCP Terraform (PLAT-72) ( #41 )
...
* feat(terraform): migrate front-integrations to HCP Terraform
Freeze SAM CD and add Terraform for seahaven-prod (Lambdas, DynamoDB,
EventBridge, alarms) so HCP becomes the sole deploy path. Include prod
secret ARNs in the tfvars example for workspace wiring.
* fix(terraform): reject symlink sources in Lambda package build
2026-08-05 18:48:16 -04:00
Adam Moussa
b30ed47321
ci: add org PR policy caller (PLAT-62) ( #40 )
...
Deploy / deploy (push) Has been cancelled
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:57:14 +00:00
dependabot[bot]
7b47d45dfc
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #38 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.57 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.57...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:17:11 -04:00
dependabot[bot]
1f73602f2e
build(deps): bump boto3 in /src/user_sync in the minor-and-patch group ( #37 )
...
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.57 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.57...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 11:17:11 -04:00
dependabot[bot]
d09b703e7e
build(deps): bump the minor-and-patch group with 4 updates ( #36 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 11:17:10 -04:00
Adam Moussa
57aac44fb7
Merge pull request #35 from Sea-Haven-Industries/chore/add-codeowners
...
Deploy / deploy (push) Has been cancelled
chore: add CODEOWNERS
2026-07-29 12:59:25 -04:00
bbc3fb0a52
chore: add CODEOWNERS
2026-07-29 12:56:48 -04:00
Adam Moussa
6fb59a30cd
Merge pull request #34 from Sea-Haven-Industries/ci/pin-reusables-v1.0.2
...
Deploy / deploy (push) Waiting to run
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 18:14:18 -04:00
Adam Moussa
f1092a7859
ci: declare workflow permissions and normalize block spacing
2026-07-28 18:06:38 -04:00
Adam Moussa
5cd382583e
ci(deps): pin org reusable workflows to v1.0.2
2026-07-28 17:56:38 -04:00
dependabot[bot]
61ddf67ceb
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #32 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.53 to 1.43.57
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.57 )
Updates `google-auth` from 2.56.1 to 2.56.2
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.1...google-auth-v2.56.2 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 13:06:22 -04:00
dependabot[bot]
61c358e3d9
build(deps): bump boto3 ( #31 )
...
Bumps the minor-and-patch group with 1 update in the /src/sla_monitor directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.53 to 1.43.57
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.53...1.43.57 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.57
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-28 12:57:01 -04:00
Adam Moussa
71c63b7434
fix(lint): resolve ruff 0.16 DTZ007/BLE001 failures blocking CI ( #33 )
...
CI installs unpinned latest ruff; 0.16.0 flags two pre-existing lines,
failing ci / ci on every PR (including safe Dependabot bumps #31/#32).
- sla_monitor: parse START_DATE with date.fromisoformat() instead of a
naive strptime().date() round-trip (identical result, no naive datetime)
- user_sync: keep the deliberate per-user blanket catch (one failed update
must not abort the sync) with a justified noqa: BLE001
2026-07-28 12:42:06 -04:00
dependabot[bot]
b5bd1093e5
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #30 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.52 to 1.43.53
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.53 )
Updates `google-auth` from 2.56.0 to 2.56.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.56.0...google-auth-v2.56.1 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.53
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 16:06:18 -04:00
dependabot[bot]
276fac5754
build(deps): bump boto3 ( #27 )
...
Bumps the minor-and-patch group with 1 update in the /src/sla_monitor directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.52 to 1.43.53
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.52...1.43.53 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 16:06:15 -04:00
Adam Moussa
c7a0b6ac6e
build(deps): batch Dependabot updates ( #27 , #28 ) ( #29 )
...
* build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* build(deps): bump boto3 in /src/user_sync in the minor-and-patch group
Bumps the minor-and-patch group in /src/user_sync with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.47 to 1.43.52
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.47...1.43.52 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.52
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 19:47:13 +00:00
dependabot[bot]
289675bfc3
build(deps): bump the minor-and-patch group ( #26 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/user_sync with 2 updates: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47 )
Updates `google-auth` from 2.55.2 to 2.56.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.2...google-auth-v2.56.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.56.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-07-14 15:20:55 +00:00
dependabot[bot]
a99729b8fb
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #25 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.43 to 1.43.47
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.43...1.43.47 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.47
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 11:19:30 -04:00
Adam Moussa
4b9c80b2bd
fix(sla-monitor): count only business hours in SLA elapsed-time calc ( #24 )
...
Deploy / deploy (push) Waiting to run
_business_minutes_elapsed clamped each weekday span to midnight instead
of BH_END, and never applied BH_START, so overnight hours (17:00-08:00)
were counted as business time. BH_START/BH_END were defined but unused
in the calculation. A ticket opened Fri 16:00 and evaluated Mon 10:00
scored 1080 min instead of the correct 180 min (6x overcount), flipping
a tier-1 breach into a false tier-2 page.
Clamp each weekday to the [BH_START, BH_END) window and only accrue the
overlap with [since, now); weekends remain excluded. Holidays are still
unhandled (pre-existing, separate gap).
Found by the daily scanner (agentic, CWE-440); proof-or-kill confirmed.
2026-07-13 14:28:18 -04:00
Adam Moussa
4506e3cbf7
Document SAM template as IaC component in README ( #23 )
...
Deploy / deploy (push) Has been cancelled
The README described the deployed AWS resources but never mentioned
template.yaml itself, the SAM project layout, the global function
defaults, the full parameter set, or the stack outputs. Add a
Project Structure section and an Infrastructure section so the
template.yaml infrastructure-as-code component is documented
accurately.
2026-07-10 16:07:12 -04:00
dependabot[bot]
16a8d789d2
build(deps): bump the minor-and-patch group across 1 directory with 2 updates ( #22 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 2 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ) and [google-auth](https://github.com/googleapis/google-cloud-python ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
Updates `google-auth` from 2.55.1 to 2.55.2
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.1...google-auth-v2.55.2 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 21:06:24 +00:00
dependabot[bot]
b5b2ef14c0
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #21 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.41 to 1.43.43
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.41...1.43.43 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.43
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-08 17:02:57 -04:00
Adam Moussa
2097a6bbf0
ci: add github-actions to dependabot coverage (INFRA-130) ( #20 )
Deploy / deploy (push) Waiting to run
2026-07-08 16:53:45 -04:00
dependabot[bot]
d84464f7df
build(deps): bump boto3 ( #19 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.39 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 18:29:27 +00:00
dependabot[bot]
907cfbef7f
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #18 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.37 to 1.43.41
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.37...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 12:34:41 -04:00
Adam Moussa
dcc0e14a2b
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #17 )
Deploy / deploy (push) Waiting to run
2026-07-06 18:26:32 -04:00
Adam Moussa
f6de2b2e6f
docs: link Confluence AWS Architecture Map (INFRA-53) ( #16 )
Deploy / deploy (push) Waiting to run
2026-07-06 17:44:07 -04:00
dependabot[bot]
1c43f9efef
build(deps): bump the minor-and-patch group across 1 directory with 3 updates ( #15 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ), [google-auth](https://github.com/googleapis/google-cloud-python ) and [google-api-python-client](https://github.com/googleapis/google-api-python-client ).
Updates `boto3` from 1.43.36 to 1.43.39
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
Updates `google-auth` from 2.55.0 to 2.55.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases )
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md )
- [Commits](https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.55.0...google-auth-v2.55.1 )
Updates `google-api-python-client` from 2.197.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases )
- [Commits](https://github.com/googleapis/google-api-python-client/compare/v2.197.0...v2.198.0 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
- dependency-name: google-api-python-client
dependency-version: 2.198.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: google-auth
dependency-version: 2.55.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:27:29 -04:00
dependabot[bot]
d26897f4c6
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #14 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.36 to 1.43.37
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.37 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:46:06 -04:00
dependabot[bot]
65dbe4d3c4
build(deps): bump boto3 ( #13 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 1 update in the /src/user_sync directory: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.31 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:58:52 -04:00
dependabot[bot]
366dc05d91
build(deps): bump boto3 in /src/sla_monitor in the minor-and-patch group ( #12 )
...
Bumps the minor-and-patch group in /src/sla_monitor with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.30 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.30...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:55:28 -04:00
