6f32f3bfcd
feat(infra): migrate payments-dashboard to HCP Terraform (PLAT-79)
...
Replace the mgmt SAM stack with a prod-only HCP workspace using the afterhours stub-plus-zip-CD seam so GitHub Actions owns function code and Terraform owns infrastructure.
2026-09-16 13:41:47 -04:00
renovate[bot]
219ea1001a
chore(deps): update sea-haven-industries/.github action to v1.0.11 ( #107 )
...
Deploy / deploy (push) Waiting to run
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-09-16 16:45:54 +00:00
renovate[bot]
a56d83c9a0
chore(deps): update sea-haven-industries/.github action to v1.0.10 ( #103 )
...
Deploy / deploy (push) Waiting to run
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-31 22:38:27 +00:00
Adam Moussa
9ed77e7ac5
chore(deps): remove dependabot version updates ( #102 )
Deploy / deploy (push) Has been cancelled
2026-08-25 15:45:01 +00:00
renovate[bot]
891c4d7157
chore(deps): update sea-haven-industries/.github action to v1.0.8 ( #100 )
Deploy / deploy (push) Waiting to run
2026-08-24 21:42:22 +00:00
Adam Moussa
2404c9b731
chore(ci): remove pr policy workflow caller ( #98 )
Deploy / deploy (push) Waiting to run
2026-08-24 15:13:12 -04:00
Adam Moussa
addf216c10
chore(ci): switch auto-merge from seahaven-bot to Mergify ( #97 )
Deploy / deploy (push) Waiting to run
2026-08-24 13:53:36 -04:00
Adam Moussa
bb711ab1d7
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #95 )
...
Deploy / deploy (push) Has been cancelled
* ci: enable squash auto-merge on ready PRs
* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:29 +00:00
Adam Moussa
7cb73846b9
ci: add merge_group trigger for required ci / ci ( #94 )
Deploy / deploy (push) Waiting to run
2026-08-21 17:42:52 -04:00
dependabot[bot]
71e8d8694a
chore(deps): bump the minor-and-patch group with 5 updates ( #92 )
2026-08-18 18:18:28 -04:00
dependabot[bot]
b7b4b9c9f4
chore(deps): bump the minor-and-patch group with 5 updates ( #90 )
Deploy / deploy (push) Waiting to run
2026-08-11 18:22:39 -04:00
dependabot[bot]
8a891c30f4
chore(deps): bump the minor-and-patch group with 3 updates ( #88 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates: [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 19:06:43 -04:00
Adam Moussa
8dfb39914a
ci: add org PR policy caller ( #87 )
...
Deploy / deploy (push) Waiting to run
Refs: PLAT-62
2026-08-04 11:56:17 -04:00
Adam Moussa
68093bf3be
chore: add CODEOWNERS ( #86 )
Deploy / deploy (push) Has been cancelled
2026-07-29 12:57:44 -04:00
Adam Moussa
6b27713d3c
ci: run the test suite in CI ( #85 )
...
Deploy / deploy (push) Waiting to run
* ci: run the test suite in CI
* ci(deps): pin ci-typescript-cdk to v1.0.3 so run-tests uses npm test
2026-07-28 18:54:41 -04:00
dependabot[bot]
a5b2c27a0f
Bump the minor-and-patch group with 4 updates ( #83 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0d
2026-07-28 17:42:45 -04:00
Adam Moussa
761367b457
chore(ci): pin central workflow refs to v1.0.0 ( #82 )
...
The four refs pointed at fd60e4c9 with a '# main' comment. That comment
names a branch, so Dependabot rendered its bump PR titles as two full
40-character SHAs. Sea-Haven-Industries/.github now publishes tags.
Repoints all four at 2fbfb2e (v1.0.0) and replaces the comment with the
version. Deliberately v1.0.0 rather than the current v1.0.2, so a
Dependabot run has a newer version to find.
2026-07-28 17:39:44 -04:00
Adam Moussa
849f33a0bc
chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) ( #81 )
...
Deploy / deploy (push) Has been cancelled
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
* enhance(email): improve detection of allowed Gusto URLs in email classification
Resolves code scanning alert #2
2026-07-23 20:38:07 +00:00
Adam Moussa
4e2045711c
ci: add github-actions to dependabot coverage (INFRA-130) ( #61 )
2026-07-08 16:53:37 -04:00
Adam Moussa
fc4b090bd5
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #58 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:02 -04:00
Adam Moussa
fd9a63371d
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #45 )
...
Deploy / deploy (push) Has been cancelled
- Add callable PR labeler workflow (.github/workflows/labeler.yml)
- Add README status badges (JavaScript, AWS SAM, Slack, CI)
Part of INFRA-47 (INFRA-56, INFRA-57).
2026-06-11 14:13:31 -04:00
Adam Moussa
ef2dcdccbf
Add dependency-review caller workflow ( #39 )
...
Deploy / deploy (push) Has been cancelled
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:45 -04:00
Adam Moussa
208e90a23f
Add GitHub Actions deploy workflow ( #26 )
...
* Add GitHub Actions deploy workflow (OIDC)
* Add permissions block for OIDC token exchange
* Add concurrency control to prevent parallel deploys
2026-05-08 17:08:06 -04:00
Adam Moussa
d813e76a78
Add CI workflow ( #24 )
2026-05-08 15:49:44 -04:00
Adam Moussa
36c9ad7d52
Update Dependabot: remove assignees, group minor/patch updates ( #20 )
2026-05-08 14:24:17 -04:00
Adam Moussa
0c951840b9
Remove wrapper workflow — using required workflow via org ruleset ( #19 )
2026-05-06 19:59:15 -04:00
Adam Moussa
f70acc1ee6
Add Claude Code review workflow ( #18 )
2026-05-06 18:12:04 -04:00
Adam Moussa
740d7e490e
Auto-assign Dependabot PRs to amoussa1229
2026-05-02 17:26:21 -04:00
Adam Moussa
d9cc89c7e9
Add Dependabot version update configuration
2026-05-02 17:14:26 -04:00
