Commit graph

3 commits

Author SHA1 Message Date
2010bf7eac fix(deploy): fail closed on unknown-only plan attributes
Include after_unknown keys in the version-only diff so a computed-only allowlist cannot hide an unexamined environment mutation.
2026-09-03 10:03:19 -04:00
79e93defed fix(deploy): inspect HCP plan redirect and nested unknowns
Stop auto-following the json-output 307 so the guard can pin archivist.terraform.io, and fail closed when tags or settings change under nested after_unknown values.
2026-09-03 10:03:19 -04:00
fa9bda7554 feat(deploy): move dev application CD through Terraform
GitHub creates the immutable Elastic Beanstalk version; HCP Terraform is the only UpdateEnvironment caller via a guarded version_label run.
2026-09-03 10:03:19 -04:00