Skip to content

Release to val - #2002

Open
github-actions[bot] wants to merge 3 commits into
valfrom
main
Open

Release to val#2002
github-actions[bot] wants to merge 3 commits into
valfrom
main

Conversation

@github-actions

Copy link
Copy Markdown
Contributor

Release to val.

Please create a merge commit

* docs(harness): add OY2-40481 SMART outbound spec and plan packet

Track .cursor/harness so shared specs and PlanPackets appear in the branch changeset instead of staying local-only under the Cursor ignore rule.

* Update

* feat: ingest SMART Kafka events as OneMAC-shaped reservations

Require the SMART base envelope, write new packages with SUBMITTED + getStatus, and always overwrite spaWaiverId and correlationId on collisions so OneMAC cannot reuse SMART IDs. Stop tracking local harness artifacts.

* fix: harden SMART ingest hide, BigMAC retry, and PII redaction

Accept optional JSON nulls, rethrow BigMAC publish failures so Kafka retries, strip submitter fields from error payloads, and 404 SMART-origin IDs on user-facing reads.

* fix: allow SMART deploy before BigMAC queue secrets exist

Make bigmacErrorQueueUrl and bigmacErrorQueueArn optional so feature-stage deploys can synth without updating mako-default. Wire SendMessage and BIGMAC_ERROR_QUEUE_URL only after those keys are loaded.

* fix: keep Lambda names within the AWS 64-character limit

Long branch-derived stages overflow CDK functionName for IDs like
externalAttachmentAuthorizer; truncate with a stable hash instead of failing synth.

* fix: keep S3 and SES names within AWS length limits

Long branch stages overflow the CloudFront logs bucket (63) and SES
configuration set (64); truncate those names the same way as Lambda.

* fix: clear leftover Lambda security groups after rollback

Feature-stage rollbacks retained mako-<stage>-lambda-sg, so the next
create failed with AlreadyExists. Destroy the group on dev stages and
delete unused leftovers before deploy.

* fix: keep Cognito domain prefixes within the 63-character limit

Long branch stages make ${stage}-login-${clientId} invalid, so create
and delete both fail and leave the stack ROLLBACK_FAILED. Truncate the
prefix and delete leftover failed feature stacks before redeploy.

* fix: delete ROLLBACK_FAILED stacks without retain-resources

CloudFormation only accepts --retain-resources in DELETE_FAILED, so
the leftover parent stack cleanup now deletes first and retains only
on a later DELETE_FAILED retry.

* fix: avoid Lambda SG name collisions on feature stages

Leftover ENIs keep mako-<stage>-lambda-sg around after rollback, so
explicit names fail with AlreadyExists. Generate the name on dev
stages and retry leftover SG deletion after ENIs drain.

* feat: upsert every valid SMART event after an existence check

Valid envelopes now persist through one path: reject unknown state prefixes, look up the ID, then create a OneMAC-shaped document or overwrite only identity fields.

* feat: dispatch SMART events by operationType from the payload

Ignore the Kafka key for validation and route valid envelopes through existence checks into type-specific handler placeholders.
@macpro-snyk-service-account

macpro-snyk-service-account commented Aug 31, 2026

Copy link
Copy Markdown
Collaborator

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

* fix: pin react-hook-form and freeze Bun installs in CI

CI was ignoring the committed lockfiles (Outdated lockfile version under
Bun 1.1.20) and re-resolving every semver range each run, which floated
UI deps and hung form unit tests after react-hook-form 7.87.0. Bump Bun
to 1.4.0 so the lockfile is readable, pin react-hook-form to 7.86.0, and
pass --frozen-lockfile when CI=true.

* fix: bump aws-cdk CLI for frozen lockfile deploys

Freezing installs exposed that the lockfile pinned aws-cdk@2.1122.0,
which cannot read cloud assembly schema 54 from aws-cdk-lib@2.258.1.
Bump aws-cdk/cdk to 2.1139.0 so feature-stage deploys synth again.
* add initial logic based on context

* add fail handling with more description

* add reccomended security implementations and additional context

* add test fixes

* adjust tests

* cleanup

* Update vitest.config.ts

* Update vitest.config.ts

* cleanup

* cleanup

* adjust

* add logic

* Update vitest.config.ts

* try again

* clean up
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants