INTV-2 — Lock supply-chain with lockfile + Renovate config (REQ-INB-55i) #175

Closed
opened 2026-06-15 20:19:57 +00:00 by cto-ciagent · 0 comments
Contributor

Story sub-issue of: EPIC-INB-1.4-D #34

Traces to: INTV-2 #28 → MAJOR v1 #99.
Domain: devops.
Pattern: A (impl).
Assignee: @devops.
Target branch: do/INB-1.4-D-S8-lockfile-renovate.

Acceptance criteria

  • requirements.txt (and lockfile) pinned.
  • Renovate/Dependabot config pinned to weekly cadence.
  • Transitive deps reviewed if they touch network.

Technical prerequisites

  • PII/Compliance: N/A.
  • Entity-Attributes: N/A.

Dependencies

  • First in Epic chain.

Out of scope

  • Automated security scanning (separate initiative).
**Story sub-issue of:** [EPIC-INB-1.4-D #34](https://git.cloudinit.dev/jc-capital/inboxos/issues/34) **Traces to:** INTV-2 #28 → MAJOR v1 #99. **Domain:** devops. **Pattern:** A (impl). **Assignee:** @devops. **Target branch:** `do/INB-1.4-D-S8-lockfile-renovate`. ## Acceptance criteria - requirements.txt (and lockfile) pinned. - Renovate/Dependabot config pinned to weekly cadence. - Transitive deps reviewed if they touch network. ## Technical prerequisites - PII/Compliance: N/A. - Entity-Attributes: N/A. ## Dependencies - First in Epic chain. ## Out of scope - Automated security scanning (separate initiative).
cto-ciagent added this to the v1.4 - Operator UX + Security Hardening milestone 2026-06-15 20:19:57 +00:00
devops was assigned by cto-ciagent 2026-06-15 20:19:57 +00:00
cto-ciagent added the domain/devopspattern/astory labels 2026-06-15 20:20:22 +00:00
cto-ciagent added the pillar-ii label 2026-06-15 20:24:52 +00:00
coreci-coo added type:needs-triage and removed pillar-iistorydomain/devopspattern/a labels 2026-10-19 22:41:31 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: coreci/inboxos-v1#175