dependabot[bot]
0eb034f8ee
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory ( #86 )
...
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.260.0 to 2.261.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.260.0...v2.261.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.261.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 18:20:00 +00:00
dependabot[bot]
5019c2e7b6
Update boto3 requirement in /lambdas/wo/email_processor ( #88 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.38...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 17:59:27 +00:00
dependabot[bot]
e8202a8394
Update boto3 requirement in /lambdas/wo/web_ui ( #90 )
...
Deploy / deploy (push) Waiting to run
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 16:36:58 +00:00
dependabot[bot]
995eb0df6d
Update boto3 requirement in /lambdas/po/email_processor ( #87 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.39...1.43.41 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.41
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 12:29:50 -04:00
Adam Moussa
1e5c73938e
chore(ci): SHA-pin org reusable-workflow caller refs (INFRA-50) ( #85 )
Deploy / deploy (push) Waiting to run
2026-07-06 18:27:18 -04:00
Adam Moussa
3f42078f81
docs: link Confluence AWS Architecture Map (INFRA-53) ( #83 )
Deploy / deploy (push) Waiting to run
2026-07-06 17:43:51 -04:00
dependabot[bot]
329df9a626
Update boto3 requirement in /lambdas/po/email_processor ( #82 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:34:43 -04:00
dependabot[bot]
1dba62e52e
Update boto3 requirement in /lambdas/wo/web_ui ( #80 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.39 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:30:38 -04:00
dependabot[bot]
9a2cb72b9a
Update anthropic requirement in /lambdas/po/email_processor ( #79 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.112.0...v0.116.0 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.113.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 15:26:38 -04:00
dependabot[bot]
3e95cabcd2
Update boto3 requirement in /lambdas/wo/email_processor ( #81 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.36...1.43.38 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.37
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 23:49:58 +00:00
dependabot[bot]
b102dae3c8
Update anthropic requirement in /lambdas/wo/email_processor ( #78 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.112.0...v0.113.0 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.113.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 19:45:49 -04:00
dependabot[bot]
0772f8c535
Update anthropic requirement in /lambdas/wo/email_processor ( #77 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.109.2...v0.112.0 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.111.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 16:16:32 -04:00
dependabot[bot]
f5a4237d82
Update boto3 requirement in /lambdas/po/email_processor ( #76 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 16:12:23 -04:00
dependabot[bot]
e803437f20
Update boto3 requirement in /lambdas/wo/email_processor ( #75 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 16:08:04 -04:00
dependabot[bot]
a215f12095
Update boto3 requirement in /lambdas/wo/web_ui ( #74 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.31...1.43.36 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.36
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 16:03:55 -04:00
dependabot[bot]
8b8bfc227d
Update anthropic requirement in /lambdas/po/email_processor ( #73 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.109.2...v0.112.0 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.111.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:59:14 -04:00
dependabot[bot]
70a438b3c3
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #72 )
...
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.259.0 to 2.260.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.259.0...v2.260.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.260.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-24 15:55:17 -04:00
Adam Moussa
35dc32390c
Add DLQ messages-present alarm for workorder-email-processor ( #68 )
...
Deploy / deploy (push) Has been cancelled
The existing workorder-email-processor-errors alarm fires on any errored
async invocation, but a message only reaches the DLQ after Lambda exhausts
its async retries and gives up — a genuinely dropped work-order email that
the errors alarm alone does not distinguish.
Add an ALARM-only CloudWatch alarm (workorder-email-processor-dlq-messages)
on the EmailProcessorDlq ApproximateNumberOfMessagesVisible metric
(Statistic MAXIMUM, period 5m, evaluationPeriods 1, threshold > 0,
treatMissingData NOT_BREACHING). Routes to the same shared site-alerts SNS
topic via SnsAction, mirroring the errors-alarm construct style.
Refs INFRA-41 / audit H-8.
2026-06-17 17:31:16 -04:00
Adam Moussa
0615aa5b77
Add CloudWatch alarm for po-email-processor DLQ messages ( #69 )
...
Page when any message lands in the EmailProcessorDlq, which means a PO
email was permanently dropped after po-email-processor exhausted its
async Lambda retries. Without this, the errors alarm catches the failing
invocations but nothing surfaces the resulting dead-lettered email.
AWS/SQS ApproximateNumberOfMessagesVisible, Maximum over a single 5-min
period > 0, notBreaching on missing data. Reuses the shared site-alerts
SNS topic, ALARM-only, matching the existing po-email-processor-errors
alarm. The metric helper derives the QueueName dimension from the queue
construct (Fn::GetAtt QueueName), so the alarm tracks the CDK-generated
queue name without hardcoding it.
2026-06-17 17:28:42 -04:00
Adam Moussa
86f2ebb42d
Codify S3 Block Public Access on ingest buckets ( #71 )
...
Add block_public_access=BlockPublicAccess.BLOCK_ALL to the po-ingest and
workorder-ingest EmailBucket constructs. The buckets are already private
at runtime via account-level and AWS-default BPA, so this is a no-op for
behavior; it closes the codification gap that left CKV_AWS_53-56 firing
on the synthesized templates and blocking the security pre-push gate
(and the DLQ-alarm PRs that ride on it).
2026-06-17 17:23:06 -04:00
Adam Moussa
0fdf407e1d
Add CloudWatch alarm coverage for po-ingest and workorder-ingest ( #70 )
...
Deploy / deploy (push) Waiting to run
* Add CloudWatch alarm coverage for po-ingest and workorder-ingest
Expands alarm coverage across both CDK stacks. All alarms are ALARM-only
(no OK action) to the shared site-alerts SNS topic, with TreatMissingData
NOT_BREACHING. The site-alerts topic is now imported once near the top of
each stack so every alarm reuses one Topic instance.
po-ingest (cdk/po_stack.py):
- Errors: po-ingest-site-extractor
- Throttles: po-email-processor, po-ingest-site-extractor, po-web-ui
- Duration (p99, >=45000ms, eval3/dp2): po-email-processor (orphan adoption),
po-ingest-site-extractor, po-web-ui
- DynamoDB throttle + system-error: purchase-orders, verified-sites,
pending-site-review
workorder-ingest (cdk/wo_stack.py):
- Throttles: workorder-email-processor
- Duration (p95, >=45000ms, eval3/dp2): workorder-email-processor (orphan adoption)
- DynamoDB throttle + system-error: WorkOrders, WorkOrderComments
DynamoDB ThrottledRequests/SystemErrors emit only at the TableName+Operation
dimension set, so each table alarm is a Sum math expression across operations
via the non-deprecated metric_*_for_operations helpers (metric_throttled_requests
is deprecated/invalid in aws-cdk-lib 2.259.0).
Refs INFRA-41 / audit H-8.
* Drop NEEDS ADAM SIGN-OFF wording from alarm comments
Duration alarm thresholds are owner-approved; remove the sign-off flag
from po_stack.py and wo_stack.py comments. Threshold values, eval config,
and orphan-delete notes are unchanged.
2026-06-17 14:46:03 -04:00
dependabot[bot]
cab4a035ed
Update boto3 requirement in /lambdas/wo/email_processor ( #67 )
...
Deploy / deploy (push) Waiting to run
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.28...1.43.31 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 21:16:19 +00:00
dependabot[bot]
a8d076aae6
Update anthropic requirement in /lambdas/po/email_processor ( #66 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.109.1...v0.109.2 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.109.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 17:12:23 -04:00
dependabot[bot]
b9b7e727b4
Update boto3 requirement in /lambdas/po/email_processor ( #64 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.28...1.43.31 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 21:07:23 +00:00
dependabot[bot]
0f699595b5
Bump aws-cdk-lib in /cdk in the minor-and-patch group across 1 directory ( #65 )
...
Bumps the minor-and-patch group with 1 update in the /cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.258.1 to 2.259.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.1...v2.259.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.259.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 20:57:49 +00:00
dependabot[bot]
3a4f4889ab
Update boto3 requirement in /lambdas/wo/web_ui ( #63 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.28...1.43.31 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.30
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 20:50:39 +00:00
dependabot[bot]
14794946ba
Update anthropic requirement in /lambdas/wo/email_processor ( #62 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.109.1...v0.109.2 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.109.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 16:46:29 -04:00
dependabot[bot]
edb022a72b
Update boto3 requirement in /lambdas/po/email_processor ( #61 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.28 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.27
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 19:23:09 +00:00
dependabot[bot]
109f9336e0
Update boto3 requirement in /lambdas/wo/web_ui ( #60 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.28 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.27
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 15:19:41 -04:00
dependabot[bot]
01dc4f6368
Update boto3 requirement in /lambdas/wo/email_processor ( #59 )
...
Deploy / deploy (push) Waiting to run
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.25...1.43.28 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.27
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 15:15:51 -04:00
dependabot[bot]
98a9ae1979
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #58 )
...
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.258.0 to 2.258.1
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.258.0...v2.258.1 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.258.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-12 15:08:34 -04:00
Adam Moussa
4cc049e958
Repo hygiene: PR labeler + README badges + dependabot (INFRA-56/57/66) ( #57 )
Deploy / deploy (push) Waiting to run
2026-06-11 14:44:27 -04:00
Adam Moussa
47fa35688d
fix(po): grant KMS on seahaven-dynamodb CMK to purchase-orders consumers (INFRA-104) ( #56 )
...
Deploy / deploy (push) Waiting to run
The purchase-orders table was migrated to SSE-KMS (alias/seahaven-dynamodb,
INFRA-95/M-3) out-of-band, but po_stack never declared the key, so
grant_read_write_data did not propagate kms perms. po-email-processor failed
~99.6% of invocations with kms:Decrypt AccessDeniedException, a data-loss
outage on the PO ingestion write path.
- po_stack: declare encryption_key on purchase-orders (reconciles SSE drift;
no-op against the already-encrypted live table) so the existing grants add
kms:Decrypt/GenerateDataKey/DescribeKey to EmailProcessor, WebUI, SiteExtractor.
- wo_stack: pre-emptive grant_encrypt_decrypt on the WO processor role ahead of
the WorkOrders CMK migration (INFRA-6); tables left unencrypted, no table change.
GPT-4.1 cross-review: no blockers.
2026-06-10 19:31:55 -04:00
dependabot[bot]
d217caac13
Update anthropic requirement in /lambdas/wo/email_processor ( #53 )
...
Deploy / deploy (push) Waiting to run
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.109.1 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.107.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-06-10 22:21:45 +00:00
dependabot[bot]
910959be7a
Update anthropic requirement in /lambdas/po/email_processor ( #55 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.105.2...v0.109.1 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.107.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:17:53 -04:00
dependabot[bot]
6af5312409
Update boto3 requirement in /lambdas/wo/web_ui ( #54 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:14:13 -04:00
dependabot[bot]
8da6fd07cd
Update boto3 requirement in /lambdas/po/email_processor ( #52 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:14:06 -04:00
dependabot[bot]
d0dcfb51fc
Update boto3 requirement in /lambdas/wo/email_processor ( #51 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.23...1.43.25 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.25
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-10 18:14:01 -04:00
dependabot[bot]
dedbbda7a1
Update boto3 requirement in /lambdas/wo/web_ui ( #46 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.22...1.43.23 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-06-08 22:37:44 +00:00
dependabot[bot]
d26714c6e5
Update boto3 requirement in /lambdas/po/email_processor ( #45 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.22...1.43.23 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-06-08 22:35:51 +00:00
dependabot[bot]
7b3b01ec05
Update boto3 requirement in /lambdas/wo/email_processor ( #44 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.10...1.43.23 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.23
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Adam Moussa <166072409+amoussa1229@users.noreply.github.com>
2026-06-08 22:33:01 +00:00
Adam Moussa
109c565cbf
Reconcile IaC with out-of-band DLQ + Function URL changes (INFRA-74, INFRA-41) ( #50 )
...
Deploy / deploy (push) Waiting to run
Make CDK the source of truth for two sets of changes applied out-of-band
via CLI to the po-ingest and WorkorderIngestStack stacks.
INFRA-74 (audit C-5): remove the public FunctionUrlAuthType.NONE Function
URL construct (and its auto-generated Principal:* invoke permission +
output) from both po-web-ui and workorder-web-ui. The URLs were already
deleted live via CLI; CFN's delete is idempotent.
INFRA-41 (audit H-8): add a CDK-managed SQS dead-letter queue
(dead_letter_queue=, 14d retention, SSL-enforced, CDK-generated name) and
an ALARM-only Errors alarm (Sum, threshold>0, site-alerts topic) for both
po-email-processor and workorder-email-processor, mirroring the
apm-wo-analysis-classifier DLQ and payments-payroll-batch alarm patterns.
Interim CLI resources (per-fn -dlq queues, -errors alarms, dlq-send inline
policies, OnFailure event-invoke-configs) removed post-deploy.
2026-06-08 16:02:29 -04:00
Adam Moussa
bd0682661f
Document purchase-orders table ownership (INFRA-1) ( #49 )
...
Deploy / deploy (push) Has been cancelled
Add a Shared Resources section recording that this stack owns the
purchase-orders DynamoDB table and is the authoritative writer, with
payments-dashboard and seahaven-slack-bot as read-only consumers.
Note the cross-repo schema-coordination rule and the amazon-po-parser
direct-write exception being folded in under INFRA-51.
2026-06-05 17:26:22 -04:00
dependabot[bot]
64ff6f09ca
Bump aws-cdk-lib in /cdk in the minor-and-patch group ( #48 )
...
Deploy / deploy (push) Waiting to run
Bumps the minor-and-patch group in /cdk with 1 update: [aws-cdk-lib](https://github.com/aws/aws-cdk ).
Updates `aws-cdk-lib` from 2.257.0 to 2.258.0
- [Release notes](https://github.com/aws/aws-cdk/releases )
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md )
- [Commits](https://github.com/aws/aws-cdk/compare/v2.257.0...v2.258.0 )
---
updated-dependencies:
- dependency-name: aws-cdk-lib
dependency-version: 2.258.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: minor-and-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-05 14:49:27 -04:00
Adam Moussa
c0b68382c8
chore(deps): remove blanket aws-cdk-lib dependabot ignore ( #47 )
...
Per handbook Pinning Principle: exact pins are kept current by Dependabot version updates gated by CI + dependency review. Blanket ignores let pins rot (see today's fast-uri incident).
2026-06-05 13:57:53 -04:00
Adam Moussa
7732069a73
fix(deps): pin aws-cdk-lib to ==2.257.0 ( #43 )
...
Deploy / deploy (push) Waiting to run
* fix(deps): re-pin aws-cdk-lib to ==2.253.1
* fix(deps): pin aws-cdk-lib to 2.257.0 (exact)
2026-06-05 13:22:45 -04:00
Adam Moussa
fb7a355607
Add dependency-review caller workflow ( #42 )
...
* Add dependency-review caller workflow
Add a pull_request-triggered caller that invokes the org-level
callable-dependency-review workflow to scan dependency changes and
fail on high-severity advisories.
* chore: retrigger checks
* chore: retrigger dep review (post-fix)
2026-06-05 12:26:49 -04:00
dependabot[bot]
e47cd7685e
Update boto3 requirement in /lambdas/po/email_processor ( #39 )
...
Deploy / deploy (push) Has been cancelled
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.10...1.43.22 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.22
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 22:52:38 +00:00
dependabot[bot]
d145178c8d
Update boto3 requirement in /lambdas/wo/web_ui ( #41 )
...
Updates the requirements on [boto3](https://github.com/boto/boto3 ) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases )
- [Commits](https://github.com/boto/boto3/compare/1.43.10...1.43.22 )
---
updated-dependencies:
- dependency-name: boto3
dependency-version: 1.43.22
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 22:51:28 +00:00
dependabot[bot]
53e906bf56
Update anthropic requirement in /lambdas/wo/email_processor ( #38 )
...
Updates the requirements on [anthropic](https://github.com/anthropics/anthropic-sdk-python ) to permit the latest version.
- [Release notes](https://github.com/anthropics/anthropic-sdk-python/releases )
- [Changelog](https://github.com/anthropics/anthropic-sdk-python/blob/main/CHANGELOG.md )
- [Commits](https://github.com/anthropics/anthropic-sdk-python/compare/v0.103.1...v0.105.2 )
---
updated-dependencies:
- dependency-name: anthropic
dependency-version: 0.105.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 22:49:37 +00:00
