dependabot[bot]
d4cf02a5a5
chore(deps): bump boto3 ( #143 )
...
Bumps the minor-and-patch group in /functions/close_form with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.66...1.43.71 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.71
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:52:06 +00:00
dependabot[bot]
d3a0fe5e65
chore(deps): bump boto3 ( #142 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.66...1.43.71 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.71
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:34:42 +00:00
dependabot[bot]
861f959adf
chore(deps): bump boto3 ( #140 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.66...1.43.71 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.71
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 18:33:21 +00:00
dependabot[bot]
4b261246ca
chore(deps): bump boto3 ( #141 )
...
Bumps the minor-and-patch group in /functions/aggregate_orders with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.66...1.43.71 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.71
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-08-17 18:28:47 +00:00
dependabot[bot]
7a830882a8
chore(deps): bump boto3 ( #139 )
...
Bumps the minor-and-patch group in /functions/submit_order with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.66 to 1.43.71
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.66...1.43.71 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.71
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-17 14:26:55 -04:00
Adam Moussa
58b9d4f83b
fix(pdf): fit weekly summaries on one page without a broken title ( #138 )
...
Build Lambda Layer / build (push) Has been cancelled
Helvetica cannot encode an em dash, so the header rendered a question mark. Tighter single-column spacing keeps a 12-person week on page 1 while still paginating large weeks.
2026-08-15 00:17:27 +00:00
Adam Moussa
10c86f2de6
fix(apigateway): drop orphaned authorizer invoke role from state ( #137 )
...
Apply destroyed the inline policy then failed deleting the role on
iam:ListInstanceProfilesForRole; the role was removed out of band.
2026-08-10 17:48:05 -04:00
Adam Moussa
60abc9fb50
fix(apigateway): grant admin authorizer invoke via resource policy ( #136 )
...
Drop the broken AuthorizerCredentialsArn invoke role path that returned
500 without calling the authorizer, and adopt the live Lambda permission.
2026-08-10 17:17:51 -04:00
Adam Moussa
24b2aaa70f
Merge pull request #135 from Sea-Haven-Industries/fix/weekly-menu-oidc-arn-literal
...
fix(iam): literal GitHub OIDC ARN for weekly-menu role (PLAT-100)
2026-08-10 16:15:08 -04:00
1519264da1
fix(iam): use literal GitHub OIDC provider ARN for weekly-menu role
2026-08-10 16:12:40 -04:00
Adam Moussa
8fb1f51969
Merge pull request #134 from Sea-Haven-Industries/feature/weekly-menu-oidc-role
...
feat(iam): prod weekly-menu GitHub OIDC role (PLAT-100)
2026-08-10 16:10:29 -04:00
3b9b9fb936
feat(iam): add prod weekly-menu GitHub OIDC role
2026-08-10 15:42:12 -04:00
Adam Moussa
9f047bf259
Merge pull request #133 from Sea-Haven-Industries/fix/cloudfront-aliases-pre-dns
...
fix(cloudfront): defer custom domain alias until DNS cutover (PLAT-98)
2026-08-10 14:05:39 -04:00
5a00cc33fa
fix(cloudfront): defer custom domain alias until DNS cutover
2026-08-10 13:46:04 -04:00
dependabot[bot]
145b0cbac6
chore(deps): bump actions/setup-python from 6.0.0 to 7.0.0 ( #132 )
...
Build Lambda Layer / build (push) Has been cancelled
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/v6...5fda3b95a4ea91299a34e894583c3862153e4b97 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 17:23:37 +00:00
dependabot[bot]
1fc3a07e0e
chore(deps): bump the minor-and-patch group with 3 updates ( #131 )
...
Bumps the minor-and-patch group with 3 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.3 to 1.0.6
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750https://github.com/sea-haven-industries/.github/releases )
- [Commits](3f74677422...7ac3528750
2026-08-10 17:20:31 +00:00
dependabot[bot]
c1213646f0
chore(deps): bump boto3 ( #129 )
...
Bumps the minor-and-patch group in /functions/submit_order with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 17:19:06 +00:00
dependabot[bot]
9869bca561
chore(deps): bump boto3 in /src/shared in the minor-and-patch group ( #130 )
...
Bumps the minor-and-patch group in /src/shared with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 17:17:26 +00:00
dependabot[bot]
1d085dfe30
chore(deps): bump boto3 in the minor-and-patch group ( #128 )
...
Bumps the minor-and-patch group with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:57:07 +00:00
dependabot[bot]
174053707d
chore(deps): bump boto3 ( #127 )
...
Bumps the minor-and-patch group in /functions/aggregate_orders with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:48:57 +00:00
dependabot[bot]
f0196ac349
chore(deps): bump boto3 ( #125 )
...
Bumps the minor-and-patch group in /functions/close_form with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:47:24 +00:00
dependabot[bot]
bd21fa74aa
chore(deps): bump boto3 ( #124 )
...
Build Lambda Layer / build (push) Waiting to run
Bumps the minor-and-patch group in /functions/slack_notifier with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:46:03 +00:00
dependabot[bot]
b7f7de3997
chore(deps): bump boto3 ( #123 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 16:44:36 +00:00
dependabot[bot]
710927d836
chore(deps): bump boto3 ( #126 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.62 to 1.43.66
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.66 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.66
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-10 12:43:00 -04:00
Adam Moussa
27d6bbeaca
Merge pull request #122 from Sea-Haven-Industries/feature/hcp-terraform-migration
...
Build Lambda Layer / build (push) Has been cancelled
feat(infra): migrate meal-order-manager to HCP Terraform (PLAT-70)
2026-08-07 20:00:52 -04:00
1f67543f16
fix(ci): satisfy PR policy and authorizer trust constraints
...
Move weekly-menu step expressions into env blocks, terraform-fmt SES
alignment, and pin API Gateway authorizer invoke role assume conditions.
2026-08-07 19:33:49 -04:00
3906ad1885
fix(infra): assert google-client-id SSM exists at plan time
...
Wire the google_client_id data source into a check so apply fails closed when the OOB parameter is missing.
2026-08-07 19:28:25 -04:00
1728f6e408
fix(iam): scope SES SendRawEmail to verified identities
...
Constrain the email-report role to the sender and domain identity ARNs so the policy is not unconstrained write.
2026-08-07 19:21:45 -04:00
40ea4ed898
feat(infra): migrate meal-order-manager to HCP Terraform
...
Freeze SAM CD and add greenfield Terraform for seahaven-prod so HCP is the sole stack deploy path.
2026-08-07 19:19:51 -04:00
Adam Moussa
b595744882
fix(form): refine meal description More/Less formatting (DEV-24) ( #121 )
...
Deploy / deploy (push) Has been cancelled
* fix(form): align More/Less spacing with meal card rhythm
* fix(form): lighten More/Less typography underline treatment
* fix(form): add More/Less focus-visible and coarse-pointer hit target
* fix(form): stop meal cards stretching on description expand
2026-08-07 22:04:45 +00:00
dependabot[bot]
357318ef28
chore(deps): bump boto3 ( #117 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group in /functions/close_form with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:29 -04:00
dependabot[bot]
883f03eb5b
chore(deps): bump actions/setup-node from 6.5.0 to 7.0.0 ( #116 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.5.0 to 7.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](249970729c...8207627860
2026-08-04 17:47:28 -04:00
dependabot[bot]
68382e60e7
chore(deps): bump boto3 ( #115 )
...
Bumps the minor-and-patch group in /functions/admin_authorizer with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:28 -04:00
dependabot[bot]
509c56e8d5
chore(deps): bump the minor-and-patch group with 2 updates ( #114 )
...
Bumps the minor-and-patch group with 2 updates: [playwright](https://github.com/microsoft/playwright-python ) and [boto3](https://github.com/boto/boto3 ).
Updates `playwright` from 1.61.0 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright-python/releases )
- [Commits](https://github.com/microsoft/playwright-python/compare/v1.61.0...v1.62.0 )
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: playwright
dependency-version: 1.62.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:28 -04:00
dependabot[bot]
a3c83f9d29
chore(deps): bump boto3 in /src/shared in the minor-and-patch group ( #113 )
...
Bumps the minor-and-patch group in /src/shared with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
24ca21feb0
chore(deps): bump boto3 ( #112 )
...
Bumps the minor-and-patch group in /functions/aggregate_orders with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
e9a93cf3e0
chore(deps): bump boto3 ( #111 )
...
Bumps the minor-and-patch group in /functions/slack_notifier with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:27 -04:00
dependabot[bot]
60de78aa9d
chore(deps): bump boto3 ( #110 )
...
Bumps the minor-and-patch group in /functions/submit_order with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:26 -04:00
dependabot[bot]
9958553df1
chore(deps): bump boto3 ( #109 )
...
Bumps the minor-and-patch group in /functions/email_report with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.60 to 1.43.62
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.60...1.43.62 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.62
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-04 17:47:26 -04:00
Adam Moussa
fa51fa85e7
ci(policy): pin callable-pr-policy to v1.0.6 ( #119 )
...
Deploy / deploy (push) Waiting to run
Refs: PLAT-65
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Adam Moussa <amoussa1229@users.noreply.github.com>
2026-08-04 17:39:01 -04:00
Adam Moussa
164e903c94
ci: add org PR policy caller (PLAT-62) ( #108 )
...
Deploy / deploy (push) Waiting to run
* ci: add org PR policy caller
Refs: PLAT-62
* fix(ci): name PR policy workflow
Refs: PLAT-62
2026-08-04 15:57:37 +00:00
Adam Moussa
a69e6d0a7c
fix(form): restore description toggles after sign-in ( #107 )
...
Deploy / deploy (push) Waiting to run
* fix(form): restore description toggles after sign-in
* fix(form): reset expanded descriptions on re-auth
2026-08-03 16:19:46 -04:00
Adam Moussa
139ea3b1d3
fix(deploy): allow recovery after update rollback ( #106 )
Deploy / deploy (push) Waiting to run
2026-08-03 18:43:16 +00:00
Adam Moussa
88399fe153
refactor(weekly-menu): isolate menu writes behind API ( #94 )
...
* feat(api): add IAM-authenticated menu publication
Keep weekly menu writes behind Lambda so the GitHub runtime role cannot access the shared DynamoDB table directly.
* refactor(workflow): publish weekly menus through API
Use SigV4 requests for settings and menu publication so the scheduled workflow no longer needs direct DynamoDB access.
* fix: address review comments
* style(python): apply Ruff formatting
2026-08-03 14:27:59 -04:00
Adam Moussa
7e73bd2bfe
test(form): stabilize mobile admin assertions ( #93 )
Deploy / deploy (push) Waiting to run
2026-08-03 14:21:10 -04:00
Adam Moussa
bcf255b17f
chore(form): add template JavaScript checks ( #92 )
...
* fix(auth): require Google authentication in cloud mode
Remove the public shared-key mechanism and fail closed on Google auth while adding submit-route throttling.
* chore(form): lint template JavaScript in CI
* docs(form): record frontend delivery decisions
* fix: resolve remaining merge conflicts
2026-08-03 14:15:25 -04:00
Adam Moussa
311eab35c0
fix(auth): require Google authentication in cloud mode ( #90 )
...
* fix(auth): require Google authentication in cloud mode
Remove the public shared-key mechanism and fail closed on Google auth while adding submit-route throttling.
* fix(auth): address review follow-ups
Fail closed on whitespace-only Google configuration and centralize shared authentication behavior.
* test(auth): use non-secret Google client fixture
Make the public test identifier explicit so secret scanning does not misclassify it as an API key.
* test(auth): avoid OAuth-shaped fixture
Use a format-neutral audience value so secret scanning can distinguish the fixture from a real client identifier.
* chore(security): suppress public OAuth fixture
Document the scanner false positive without suppressing any runtime credential flow.
2026-08-03 13:51:12 -04:00
dependabot[bot]
6968a0299b
chore(deps): bump the minor-and-patch group with 4 updates ( #96 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-03 13:39:41 -04:00
dependabot[bot]
a55c56f0ab
chore(deps): bump boto3 in /src/shared in the minor-and-patch group ( #104 )
...
Bumps the minor-and-patch group in /src/shared with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.56 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.56...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:40 -04:00
dependabot[bot]
182f612a18
chore(deps): bump boto3 in the minor-and-patch group ( #103 )
...
Bumps the minor-and-patch group with 1 update: [boto3](https://github.com/boto/boto3 ).
Updates `boto3` from 1.43.58 to 1.43.60
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.58...1.43.60 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.60
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-03 13:39:40 -04:00
