Commit graph

9 commits

Author SHA1 Message Date
Adam Moussa
e456800d19
ci: add merge_group trigger for required ci / ci (#31) 2026-08-21 17:42:16 -04:00
dependabot[bot]
7ecf79a792
chore(deps): bump ci-python-app.yaml (#25)
Bumps [Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml](https://github.com/sea-haven-industries/.github) from 1.0.6 to 1.0.7.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-19 14:52:00 +00:00
dependabot[bot]
a2ac6bd932
chore(deps): bump ci-python-app.yaml (#23)
Bumps [Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml](https://github.com/sea-haven-industries/.github) from 1.0.3 to 1.0.6.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](3f74677422...7ac3528750)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml
  dependency-version: 1.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-12 11:51:13 -04:00
Adam Moussa
c071c5cc17
ci: declare read-only permissions in ci and dependency-review workflows (#17) 2026-07-29 11:41:20 -04:00
dependabot[bot]
0ca839625f
chore(deps): bump Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml
Bumps [Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml](https://github.com/sea-haven-industries/.github) from 1.0.2 to 1.0.3.
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](0170a57c0d...3f74677422)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-app.yaml
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-07-29 12:15:12 +00:00
1b0b5eb01d
chore(ci): move the central workflow pin to v1.0.2
v1.0.0 and v1.0.1 predate the fix for multi-job reusable concurrency
groups, which cancelled ci / lint through ci-python-app.yaml. v1.0.2
carries it.
2026-07-28 17:26:56 -04:00
f8cc6d9e6c
chore(ci): pin central workflow refs to v1.0.0
The three refs pointed at fd60e4c9 with a trailing '# main' comment. That
comment names a branch, not a version, and Sea-Haven-Industries/.github had
no tags, so Dependabot's github-actions updater had nothing to resolve a
newer SHA against.

That repo now tags releases. Repoints all three at 2fbfb2e (v1.0.0) and
replaces the comment with the version.
2026-07-28 17:16:23 -04:00
Adam Moussa
8b53da8f99
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) (#3) 2026-07-06 18:27:15 -04:00
46cd856fb3
Add pr-reviewer local PR review tool
A single-user local dashboard that pulls open PRs from the
Sea-Haven-Industries org, reviews each with a Fireworks model in the
BLOCK/FIX/NIT/QUESTION format, and posts the review to GitHub as the
token owner. Runs only on localhost; secrets stay in a gitignored .env
and never reach the browser.

Structured as an app/ package plus a static/ frontend so the module
imports and static mount resolve. HTTP uses httpx2 (the runtime lib
starlette's TestClient now prefers), pinned in requirements.txt.

Includes a stdlib-only pytest suite (network mocked, no extra test
deps so CI needs only pytest) with a skip-by-default live Fireworks
test, and CI wired to the org ci-python-app reusable workflow to lint
app and tests and run the mocked suite fully offline. Dependabot covers
pip and github-actions.
2026-07-01 13:48:10 -04:00