Discussion topics for Feb 7, 2022 Engineering Sync

[cwinters-usds]

• How to identify security-related Dependabot (or other) PRs? Balancing open-source visibility and potentially exposing vulnerabilities.
  • Example: Bump azure-core-http-netty from 1.11.4 to 1.11.6 in /prime-router #4012
  • Example: re-apply cron-utils 9.1.6 #3679
  • What's our typical turnaround time for these once identified?

[carlosfelix2]

1. @jimduff-usds @carlosfelix2 Report endpoint response proposed changes to match history API and how to handle the migration