bd3bc4e58d
chore(ci): switch auto-merge from seahaven-bot to Mergify
2026-08-24 13:10:10 -04:00
Adam Moussa
bb711ab1d7
ci: enable squash auto-merge on ready PRs (PLAT-108) ( #95 )
...
Deploy / deploy (push) Has been cancelled
* ci: enable squash auto-merge on ready PRs
* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:29 +00:00
Adam Moussa
7cb73846b9
ci: add merge_group trigger for required ci / ci ( #94 )
Deploy / deploy (push) Waiting to run
2026-08-21 17:42:52 -04:00
dependabot[bot]
71e8d8694a
chore(deps): bump the minor-and-patch group with 5 updates ( #92 )
2026-08-18 18:18:28 -04:00
dependabot[bot]
b7b4b9c9f4
chore(deps): bump the minor-and-patch group with 5 updates ( #90 )
Deploy / deploy (push) Waiting to run
2026-08-11 18:22:39 -04:00
dependabot[bot]
8a891c30f4
chore(deps): bump the minor-and-patch group with 3 updates ( #88 )
...
Deploy / deploy (push) Has been cancelled
Bumps the minor-and-patch group with 3 updates: [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422https://github.com/sea-haven-industries/.github/releases )
- [Commits](0170a57c0d...3f74677422
2026-08-04 19:06:43 -04:00
Adam Moussa
8dfb39914a
ci: add org PR policy caller ( #87 )
...
Deploy / deploy (push) Waiting to run
Refs: PLAT-62
2026-08-04 11:56:17 -04:00
Adam Moussa
6b27713d3c
ci: run the test suite in CI ( #85 )
...
Deploy / deploy (push) Waiting to run
* ci: run the test suite in CI
* ci(deps): pin ci-typescript-cdk to v1.0.3 so run-tests uses npm test
2026-07-28 18:54:41 -04:00
dependabot[bot]
a5b2c27a0f
Bump the minor-and-patch group with 4 updates ( #83 )
...
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github ), [Sea-Haven-Industries/.github/.github/workflows/cd-sam.yaml](https://github.com/sea-haven-industries/.github ) and [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github ).
Updates `Sea-Haven-Industries/.github/.github/workflows/ci-typescript-cdk.yaml` from 1.0.0 to 1.0.2
- [Release notes](https://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0dhttps://github.com/sea-haven-industries/.github/releases )
- [Commits](2fbfb2e7cf...0170a57c0d
2026-07-28 17:42:45 -04:00
Adam Moussa
761367b457
chore(ci): pin central workflow refs to v1.0.0 ( #82 )
...
The four refs pointed at fd60e4c9 with a '# main' comment. That comment
names a branch, so Dependabot rendered its bump PR titles as two full
40-character SHAs. Sea-Haven-Industries/.github now publishes tags.
Repoints all four at 2fbfb2e (v1.0.0) and replaces the comment with the
version. Deliberately v1.0.0 rather than the current v1.0.2, so a
Dependabot run has a newer version to find.
2026-07-28 17:39:44 -04:00
Adam Moussa
849f33a0bc
chore: resolve open code-scanning alerts (workflow permissions + Gusto URL sanitization) ( #81 )
...
Deploy / deploy (push) Has been cancelled
* ci: add least-privilege permissions blocks to workflow callers
Resolves code scanning alerts #4 and #5 (actions/missing-workflow-permissions). Both callable workflows only need contents: read; the dependency-review callable already declares it internally, this caps the caller token to match.
* enhance(email): improve detection of allowed Gusto URLs in email classification
Resolves code scanning alert #2
2026-07-23 20:38:07 +00:00
Adam Moussa
fc4b090bd5
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #58 )
Deploy / deploy (push) Has been cancelled
2026-07-06 18:27:02 -04:00
Adam Moussa
fd9a63371d
Repo hygiene: PR labeler + README badges (INFRA-56/57) ( #45 )
...
Deploy / deploy (push) Has been cancelled
- Add callable PR labeler workflow (.github/workflows/labeler.yml)
- Add README status badges (JavaScript, AWS SAM, Slack, CI)
Part of INFRA-47 (INFRA-56, INFRA-57).
2026-06-11 14:13:31 -04:00
Adam Moussa
ef2dcdccbf
Add dependency-review caller workflow ( #39 )
...
Deploy / deploy (push) Has been cancelled
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:45 -04:00
Adam Moussa
208e90a23f
Add GitHub Actions deploy workflow ( #26 )
...
* Add GitHub Actions deploy workflow (OIDC)
* Add permissions block for OIDC token exchange
* Add concurrency control to prevent parallel deploys
2026-05-08 17:08:06 -04:00
Adam Moussa
d813e76a78
Add CI workflow ( #24 )
2026-05-08 15:49:44 -04:00
Adam Moussa
0c951840b9
Remove wrapper workflow — using required workflow via org ruleset ( #19 )
2026-05-06 19:59:15 -04:00
Adam Moussa
f70acc1ee6
Add Claude Code review workflow ( #18 )
2026-05-06 18:12:04 -04:00
