Release to val - #2002
Open
github-actions[bot] wants to merge 3 commits into
Open
Conversation
* docs(harness): add OY2-40481 SMART outbound spec and plan packet
Track .cursor/harness so shared specs and PlanPackets appear in the branch changeset instead of staying local-only under the Cursor ignore rule.
* Update
* feat: ingest SMART Kafka events as OneMAC-shaped reservations
Require the SMART base envelope, write new packages with SUBMITTED + getStatus, and always overwrite spaWaiverId and correlationId on collisions so OneMAC cannot reuse SMART IDs. Stop tracking local harness artifacts.
* fix: harden SMART ingest hide, BigMAC retry, and PII redaction
Accept optional JSON nulls, rethrow BigMAC publish failures so Kafka retries, strip submitter fields from error payloads, and 404 SMART-origin IDs on user-facing reads.
* fix: allow SMART deploy before BigMAC queue secrets exist
Make bigmacErrorQueueUrl and bigmacErrorQueueArn optional so feature-stage deploys can synth without updating mako-default. Wire SendMessage and BIGMAC_ERROR_QUEUE_URL only after those keys are loaded.
* fix: keep Lambda names within the AWS 64-character limit
Long branch-derived stages overflow CDK functionName for IDs like
externalAttachmentAuthorizer; truncate with a stable hash instead of failing synth.
* fix: keep S3 and SES names within AWS length limits
Long branch stages overflow the CloudFront logs bucket (63) and SES
configuration set (64); truncate those names the same way as Lambda.
* fix: clear leftover Lambda security groups after rollback
Feature-stage rollbacks retained mako-<stage>-lambda-sg, so the next
create failed with AlreadyExists. Destroy the group on dev stages and
delete unused leftovers before deploy.
* fix: keep Cognito domain prefixes within the 63-character limit
Long branch stages make ${stage}-login-${clientId} invalid, so create
and delete both fail and leave the stack ROLLBACK_FAILED. Truncate the
prefix and delete leftover failed feature stacks before redeploy.
* fix: delete ROLLBACK_FAILED stacks without retain-resources
CloudFormation only accepts --retain-resources in DELETE_FAILED, so
the leftover parent stack cleanup now deletes first and retains only
on a later DELETE_FAILED retry.
* fix: avoid Lambda SG name collisions on feature stages
Leftover ENIs keep mako-<stage>-lambda-sg around after rollback, so
explicit names fail with AlreadyExists. Generate the name on dev
stages and retry leftover SG deletion after ENIs drain.
* feat: upsert every valid SMART event after an existence check
Valid envelopes now persist through one path: reject unknown state prefixes, look up the ID, then create a OneMAC-shaped document or overwrite only identity fields.
* feat: dispatch SMART events by operationType from the payload
Ignore the Kafka key for validation and route valid envelopes through existence checks into type-specific handler placeholders.
Collaborator
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
macpro-snyk-service-account
deployed
to
snyk-up-815e047a
September 2, 2026 05:57 — with
GitHub Actions
Active
macpro-snyk-service-account
had a problem deploying
to
snyk-up-815e047a
September 2, 2026 05:57 — with
GitHub Actions
Failure
macpro-snyk-service-account
deployed
to
snyk-up-815e047a
September 2, 2026 06:21 — with
GitHub Actions
Active
macpro-snyk-service-account
temporarily deployed
to
snyk-up-815e047a-kibana
September 2, 2026 06:21 — with
GitHub Actions
Inactive
macpro-snyk-service-account
deployed
to
snyk-up-815e047a
September 2, 2026 06:21 — with
GitHub Actions
Active
macpro-snyk-service-account
temporarily deployed
to
snyk-up-815e047a-app
September 2, 2026 06:21 — with
GitHub Actions
Inactive
4 tasks
* fix: pin react-hook-form and freeze Bun installs in CI CI was ignoring the committed lockfiles (Outdated lockfile version under Bun 1.1.20) and re-resolving every semver range each run, which floated UI deps and hung form unit tests after react-hook-form 7.87.0. Bump Bun to 1.4.0 so the lockfile is readable, pin react-hook-form to 7.86.0, and pass --frozen-lockfile when CI=true. * fix: bump aws-cdk CLI for frozen lockfile deploys Freezing installs exposed that the lockfile pinned aws-cdk@2.1122.0, which cannot read cloud assembly schema 54 from aws-cdk-lib@2.258.1. Bump aws-cdk/cdk to 2.1139.0 so feature-stage deploys synth again.
benjaminpaige
temporarily deployed
to
main-app
September 2, 2026 18:23 — with
GitHub Actions
Inactive
benjaminpaige
temporarily deployed
to
main-kibana
September 2, 2026 18:23 — with
GitHub Actions
Inactive
* add initial logic based on context * add fail handling with more description * add reccomended security implementations and additional context * add test fixes * adjust tests * cleanup * Update vitest.config.ts * Update vitest.config.ts * cleanup * cleanup * adjust * add logic * Update vitest.config.ts * try again * clean up
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release to val.
Please create a merge commit