Commit graph

219 commits

Author SHA1 Message Date
e72873409e
feat(iam): import hcptf roles into app Terraform (PLAT-146)
Move the existing hcptf pair into this repo so app Terraform owns prod IAM after the substrate handoff.
2026-09-02 14:49:07 -04:00
renovate[bot]
decfdea723
chore(deps): update sea-haven-industries/.github action to v1.0.10 (#205)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-31 22:37:37 +00:00
renovate[bot]
528da9ade5
chore(deps): update dependency boto3 to v1.43.83 (#204)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-31 22:36:53 +00:00
Adam Moussa
f5c09757f3
feat(lambda): report unhandled Lambda errors to Sentry (PLAT-138) (#203)
* feat(lambda): report unhandled Lambda errors to Sentry

* fix(lambda): strip Sentry stack-frame locals

* style(tests): wrap long lines in sentry_init tests
2026-08-29 20:02:54 +00:00
Adam Moussa
141535a64d
chore(deps): remove dependabot version updates (#202)
Renovate is the version-update bot on this Interactive repo. GitHub Dependabot alerts stay.
2026-08-25 11:51:03 -04:00
renovate[bot]
8fc125a1ac
chore(deps): update dependency boto3 to v1.43.78 (#198) 2026-08-24 23:19:43 +00:00
renovate[bot]
53750fda29
chore(deps): update terraform minor and patch (#200) 2026-08-24 23:17:00 +00:00
renovate[bot]
3b051628ee
chore(deps): update dependency @redocly/cli to ^2.47.0 (#201) 2026-08-24 23:05:51 +00:00
renovate[bot]
6f5d9af589
chore(deps): update sea-haven-industries/.github action to v1.0.8 (#199) 2026-08-24 22:49:08 +00:00
Adam Moussa
9e465532fe
chore(ci): remove pr policy workflow caller (#197) 2026-08-24 15:12:23 -04:00
Adam Moussa
7c2e32f591
chore(ci): switch auto-merge from seahaven-bot to Mergify (#196) 2026-08-24 13:53:29 -04:00
Adam Moussa
8d6384d08a
ci: enable squash auto-merge on ready PRs (PLAT-108) (#194)
* ci: enable squash auto-merge on ready PRs

* fix(ci): serialize auto-merge enable and ignore already-enabled
2026-08-21 23:34:33 +00:00
Adam Moussa
62f004f730
ci: add merge_group trigger for required ci / ci (#193) 2026-08-21 17:41:49 -04:00
Adam Moussa
b7bb135d7c
fix(iam): attach per-workload lambda permissions boundary (PLAT-52) (#192) 2026-08-20 16:03:04 -04:00
Adam Moussa
675eabce9c
Merge pull request #191 from Sea-Haven-Industries/dependabot/terraform/terraform/minor-and-patch-2cb1abf2ac
chore(deps): bump the minor-and-patch group in /terraform with 2 updates
2026-08-18 13:25:24 -04:00
Adam Moussa
85bddb6c64
Merge branch 'main' into dependabot/terraform/terraform/minor-and-patch-2cb1abf2ac 2026-08-18 13:24:37 -04:00
Adam Moussa
fe4a25124a
Merge pull request #190 from Sea-Haven-Industries/dependabot/pip/lambdas/po/site_extractor/minor-and-patch-09ffb2e39e
chore(deps): bump boto3 from 1.43.67 to 1.43.72 in /lambdas/po/site_extractor in the minor-and-patch group
2026-08-18 13:24:18 -04:00
Adam Moussa
062dee9ac1
Merge branch 'main' into dependabot/pip/lambdas/po/site_extractor/minor-and-patch-09ffb2e39e 2026-08-18 13:23:28 -04:00
Adam Moussa
5b2f9f05c3
Merge pull request #189 from Sea-Haven-Industries/dependabot/pip/lambdas/po/web_ui/minor-and-patch-09ffb2e39e
chore(deps): bump boto3 from 1.43.67 to 1.43.72 in /lambdas/po/web_ui in the minor-and-patch group
2026-08-18 13:23:15 -04:00
Adam Moussa
4aa8e7076a
Merge branch 'main' into dependabot/pip/lambdas/po/web_ui/minor-and-patch-09ffb2e39e 2026-08-18 13:22:29 -04:00
Adam Moussa
22591079f8
Merge pull request #188 from Sea-Haven-Industries/dependabot/npm_and_yarn/minor-and-patch-d138be5a7c
chore(deps): bump @redocly/cli from 2.46.0 to 2.46.1 in the minor-and-patch group
2026-08-18 13:22:04 -04:00
Adam Moussa
6393734cb4
Merge branch 'main' into dependabot/npm_and_yarn/minor-and-patch-d138be5a7c 2026-08-18 13:21:14 -04:00
Adam Moussa
c1992c8da5
Merge pull request #187 from Sea-Haven-Industries/dependabot/pip/lambdas/wo/web_ui/boto3-gte-1.43.72
chore(deps): update boto3 requirement from >=1.43.67 to >=1.43.72 in /lambdas/wo/web_ui
2026-08-18 13:20:24 -04:00
Adam Moussa
16246c6bfe
Merge branch 'main' into dependabot/pip/lambdas/wo/web_ui/boto3-gte-1.43.72 2026-08-18 13:19:33 -04:00
Adam Moussa
1390576b6d
Merge pull request #186 from Sea-Haven-Industries/dependabot/github_actions/minor-and-patch-4d8ad4fa20
chore(deps): bump the minor-and-patch group with 4 updates
2026-08-18 13:18:15 -04:00
dependabot[bot]
c80b0a1a6e
chore(deps): bump the minor-and-patch group in /terraform with 2 updates
Bumps the minor-and-patch group in /terraform with 2 updates: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [hashicorp/external](https://github.com/hashicorp/terraform-provider-external).


Updates `hashicorp/aws` from 6.58.0 to 6.60.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-provider-aws/compare/v6.58.0...v6.60.0)

Updates `hashicorp/external` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/hashicorp/terraform-provider-external/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-external/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/terraform-provider-external/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-version: 6.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: hashicorp/external
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:47:17 +00:00
dependabot[bot]
e9686aff07
chore(deps): bump boto3
Bumps the minor-and-patch group in /lambdas/po/site_extractor with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:45:27 +00:00
dependabot[bot]
8580c5935b
chore(deps): bump boto3
Bumps the minor-and-patch group in /lambdas/po/web_ui with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.67 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:45:21 +00:00
dependabot[bot]
d387854a7f
chore(deps): bump @redocly/cli in the minor-and-patch group
Bumps the minor-and-patch group with 1 update: [@redocly/cli](https://github.com/Redocly/redocly-cli).


Updates `@redocly/cli` from 2.46.0 to 2.46.1
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.46.0...@redocly/cli@2.46.1)

---
updated-dependencies:
- dependency-name: "@redocly/cli"
  dependency-version: 2.46.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:45:16 +00:00
dependabot[bot]
c7776e463c
chore(deps): update boto3 requirement in /lambdas/wo/web_ui
Updates the requirements on [boto3](https://github.com/boto/boto3) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.67...1.43.72)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:45:04 +00:00
dependabot[bot]
b0678edc2e
chore(deps): bump the minor-and-patch group with 4 updates
Bumps the minor-and-patch group with 4 updates: [Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml](https://github.com/sea-haven-industries/.github), [Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml](https://github.com/sea-haven-industries/.github) and [Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml](https://github.com/sea-haven-industries/.github).


Updates `Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

Updates `Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/sea-haven-industries/.github/releases)
- [Commits](7ac3528750...e5691d8a7f)

---
updated-dependencies:
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/ci-python-sam.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-dependency-review.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-labeler.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: Sea-Haven-Industries/.github/.github/workflows/callable-pr-policy.yaml
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-08-18 06:45:03 +00:00
Adam Moussa
1ad088fed2
Merge pull request #185 from Sea-Haven-Industries/fix/codify-dynamodb-pitr-deletion-protection
fix(terraform): codify dynamodb pitr and deletion protection (PLAT-49)
2026-08-14 14:08:39 -04:00
cf2ba7be51
fix(terraform): codify dynamodb pitr and deletion protection 2026-08-14 12:49:31 -04:00
Adam Moussa
005c923f83
Merge pull request #184 from Sea-Haven-Industries/feature/wo-pascalcase-destroy
chore(infra): destroy PascalCase WO Dynamo tables (PLAT-11)
2026-08-14 11:51:53 -04:00
03926f56db
docs(infra): record kebab-only WO tables after PascalCase destroy 2026-08-14 11:32:55 -04:00
817c86d58a
chore(infra): remove PascalCase WO Dynamo table resources
Destroy WorkOrders / WorkOrderComments under HCP after the kebab soak.
Kebab work-orders / work-order-comments remain the sole live tables.
2026-08-14 11:28:38 -04:00
Adam Moussa
3f0ff8e82b
fix(wo): add DLQ age alarm before 14-day expiry 2026-08-13 17:39:06 -04:00
dependabot[bot]
a73603e16a
chore(deps): update boto3 requirement in /lambdas/wo/web_ui (#178)
Updates the requirements on [boto3](https://github.com/boto/boto3) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.63...1.43.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.67
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 16:18:48 +00:00
dependabot[bot]
dc8ac20f69
chore(deps): bump boto3 (#179)
Bumps the minor-and-patch group in /lambdas/po/site_extractor with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.63 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.63...1.43.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 16:17:33 +00:00
dependabot[bot]
191166c976
chore(deps): bump boto3 (#180)
Bumps the minor-and-patch group in /lambdas/po/web_ui with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.63 to 1.43.67
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.63...1.43.67)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 16:14:17 +00:00
dependabot[bot]
eb329883dd
chore(deps): bump @redocly/cli in the minor-and-patch group (#181)
Bumps the minor-and-patch group with 1 update: [@redocly/cli](https://github.com/Redocly/redocly-cli).


Updates `@redocly/cli` from 2.44.1 to 2.46.0
- [Release notes](https://github.com/Redocly/redocly-cli/releases)
- [Commits](https://github.com/Redocly/redocly-cli/compare/@redocly/cli@2.44.1...@redocly/cli@2.46.0)

---
updated-dependencies:
- dependency-name: "@redocly/cli"
  dependency-version: 2.46.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-11 12:12:55 -04:00
Adam Moussa
5464d66d19
chore(infra): tag legacy WO tables pending PLAT-11 destroy (#177)
Force an in-place DynamoDB update so HCP state records
prevent_destroy=false before the post-soak resource removal.
2026-08-07 14:44:16 -04:00
Adam Moussa
7d0f272901
chore(infra): lift prevent_destroy on legacy WO tables for PLAT-11 (#176)
Writers already use kebab tables. Allow HCP to destroy PascalCase
WorkOrders / WorkOrderComments after the ≥24h kebab soak. Docs scrub
to kebab as the live physical names; GitHub #24 noted superseded.
2026-08-07 14:26:44 -04:00
Adam Moussa
ebd5c40a34
fix(infra): import kebab-stream SHOC emitter ESMs after cutover recovery (#175)
Cutover apply updated Lambda env/IAM but ESM recreate failed until the
lambda execution boundary included kebab table ARNs. Import the
out-of-band Enabled mappings so HCP state matches live.
2026-08-07 14:20:01 -04:00
Adam Moussa
419293b8ed
feat(infra): retarget WO writers and ESMs to kebab tables (PLAT-11) (#174)
* feat(infra): retarget WO writers and ESMs to kebab Dynamo tables

Point Lambda env, IAM, emitter streams, and DDB alarms at work-orders /
work-order-comments for the PLAT-11 freeze cutover. Legacy PascalCase
tables remain in state until the decommission soak.

* style(infra): terraform fmt wo_ddb alarm map alignment
2026-08-07 14:07:57 -04:00
Adam Moussa
2e7cdc64e6
fix(infra): import PLAT-11 kebab WO Dynamo tables into HCP state (#173)
Tables were created in seahaven-prod after hcptf-procurement-ingest lacked
CreateTable on kebab ARNs; import blocks bring work-orders and
work-order-comments under Terraform ownership.
2026-08-07 13:49:27 -04:00
Adam Moussa
13efee9682
feat(infra): add kebab WO tables and PLAT-11 cutover tooling (PLAT-11) (#172)
* feat(infra): add kebab WO tables and PLAT-11 cutover tooling

Create empty work-orders/work-order-comments under Terraform while writers
stay on PascalCase; make emitter table classification env-driven and add
same-account migrate/verify plus cutover runbook.

* style(test): ruff-format shoc emitter envelope tests
2026-08-07 13:42:35 -04:00
dependabot[bot]
41241eea86
chore(deps): bump boto3 (#169)
Bumps the minor-and-patch group in /lambdas/po/web_ui with 1 update: [boto3](https://github.com/boto/boto3).


Updates `boto3` from 1.43.62 to 1.43.63
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.63)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 12:47:01 -04:00
Adam Moussa
19046711b4
chore(iam): remove parked githubdeploy-procurement-ingest artifacts (#170) 2026-08-07 12:43:43 -04:00
dependabot[bot]
752de7f6dd
chore(deps): update boto3 requirement in /lambdas/wo/web_ui (#168)
Updates the requirements on [boto3](https://github.com/boto/boto3) to permit the latest version.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](https://github.com/boto/boto3/compare/1.43.62...1.43.63)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.63
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 16:36:16 +00:00