Skip to content

Commit 35b2ffb

Browse files
Merge branch 'develop' into 8133-extract-async-middleware-utils
2 parents b1887fb + 6f5d990 commit 35b2ffb

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

57 files changed

+988
-542
lines changed

.github/workflows/bootstrap_region.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
uses: aws-powertools/actions/.github/actions/cached-node-modules@828e78a26eee3554dc2e1d96048004548fbb169f
5656
- id: credentials
5757
name: AWS Credentials
58-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
58+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37
5959
with:
6060
aws-region: ${{ inputs.region }}
6161
role-to-assume: ${{ secrets.REGION_IAM_ROLE }}
@@ -96,7 +96,7 @@ jobs:
9696
steps:
9797
- id: credentials
9898
name: AWS Credentials
99-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
99+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
100100
with:
101101
aws-region: us-east-1
102102
role-to-assume: ${{ secrets.REGION_IAM_ROLE }}

.github/workflows/layer_govcloud.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ jobs:
6060
environment: Prod (Readonly)
6161
steps:
6262
- name: Configure AWS Credentials
63-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
63+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
6464
with:
6565
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
6666
aws-region: us-east-1
@@ -70,14 +70,14 @@ jobs:
7070
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} --query 'Content.Location' | xargs curl -L -o ${{ matrix.layer }}_${{ matrix.arch }}.zip
7171
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} > ${{ matrix.layer }}_${{ matrix.arch }}.json
7272
- name: Store Zip
73-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
73+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7474
with:
7575
name: ${{ matrix.layer }}_${{ matrix.arch }}.zip
7676
path: ${{ matrix.layer }}_${{ matrix.arch }}.zip
7777
retention-days: 1
7878
if-no-files-found: error
7979
- name: Store Metadata
80-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
80+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8181
with:
8282
name: ${{ matrix.layer }}_${{ matrix.arch }}.json
8383
path: ${{ matrix.layer }}_${{ matrix.arch }}.json
@@ -118,7 +118,7 @@ jobs:
118118
SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json')
119119
test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1
120120
- name: Configure AWS Credentials
121-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
121+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
122122
with:
123123
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
124124
aws-region: us-gov-east-1
@@ -188,7 +188,7 @@ jobs:
188188
SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json')
189189
test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1
190190
- name: Configure AWS Credentials
191-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
191+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
192192
with:
193193
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
194194
aws-region: us-gov-west-1

.github/workflows/layer_govcloud_python313.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
environment: Prod (Readonly)
5656
steps:
5757
- name: Configure AWS Credentials
58-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
58+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
5959
with:
6060
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
6161
aws-region: us-east-1
@@ -65,14 +65,14 @@ jobs:
6565
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} --query 'Content.Location' | xargs curl -L -o ${{ matrix.layer }}_${{ matrix.arch }}.zip
6666
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} > ${{ matrix.layer }}_${{ matrix.arch }}.json
6767
- name: Store Zip
68-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
68+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6969
with:
7070
name: ${{ matrix.layer }}_${{ matrix.arch }}.zip
7171
path: ${{ matrix.layer }}_${{ matrix.arch }}.zip
7272
retention-days: 1
7373
if-no-files-found: error
7474
- name: Store Metadata
75-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
75+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7676
with:
7777
name: ${{ matrix.layer }}_${{ matrix.arch }}.json
7878
path: ${{ matrix.layer }}_${{ matrix.arch }}.json
@@ -108,7 +108,7 @@ jobs:
108108
SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json')
109109
test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1
110110
- name: Configure AWS Credentials
111-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
111+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
112112
with:
113113
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
114114
aws-region: us-gov-east-1
@@ -173,7 +173,7 @@ jobs:
173173
SHA=$(jq -r '.Content.CodeSha256' '${{ matrix.layer }}_${{ matrix.arch }}.json')
174174
test "$(openssl dgst -sha256 -binary ${{ matrix.layer }}_${{ matrix.arch }}.zip | openssl enc -base64)" == "$SHA" && echo "SHA OK: ${SHA}" || exit 1
175175
- name: Configure AWS Credentials
176-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
176+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
177177
with:
178178
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
179179
aws-region: us-gov-west-1

.github/workflows/layer_govcloud_verify.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
environment: Prod (Readonly)
4141
steps:
4242
- name: Configure AWS Credentials
43-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
43+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
4444
with:
4545
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
4646
aws-region: us-east-1
@@ -71,7 +71,7 @@ jobs:
7171
environment: GovCloud Prod (East)
7272
steps:
7373
- name: Configure AWS Credentials
74-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
74+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
7575
with:
7676
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
7777
aws-region: us-gov-east-1
@@ -103,7 +103,7 @@ jobs:
103103
environment: GovCloud Prod (West)
104104
steps:
105105
- name: Configure AWS Credentials
106-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
106+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
107107
with:
108108
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
109109
aws-region: us-gov-east-1

.github/workflows/layers_partition_verify.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ jobs:
8888
- x86_64
8989
steps:
9090
- name: Configure AWS Credentials
91-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
91+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
9292
with:
9393
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
9494
aws-region: us-east-1
@@ -98,7 +98,7 @@ jobs:
9898
run: |
9999
aws --region us-east-1 lambda get-layer-version-by-arn --arn 'arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }}' > '${{ matrix.layer }}-${{ matrix.arch }}.json'
100100
- name: Store Metadata
101-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
101+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
102102
with:
103103
name: ${{ matrix.layer }}-${{ matrix.arch }}.json
104104
path: ${{ matrix.layer }}-${{ matrix.arch }}.json
@@ -107,7 +107,7 @@ jobs:
107107

108108
verify:
109109
name: Verify
110-
needs:
110+
needs:
111111
- setup
112112
- commercial
113113
runs-on: ubuntu-latest
@@ -138,7 +138,7 @@ jobs:
138138
run: |
139139
echo 'CONVERTED_REGION=${{ matrix.region }}' | tr 'a-z\-' 'A-Z_' >> "$GITHUB_OUTPUT"
140140
- name: Configure AWS Credentials
141-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
141+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
142142
with:
143143
role-to-assume: ${{ secrets[format('IAM_ROLE_{0}', steps.transform.outputs.CONVERTED_REGION)] }}
144144
aws-region: ${{ matrix.region}}

.github/workflows/layers_partitions.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ jobs:
8585
- x86_64
8686
steps:
8787
- name: Configure AWS Credentials
88-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
88+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
8989
with:
9090
role-to-assume: ${{ secrets.AWS_IAM_ROLE }}
9191
aws-region: us-east-1
@@ -95,14 +95,14 @@ jobs:
9595
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} --query 'Content.Location' | xargs curl -L -o ${{ matrix.layer }}-${{ matrix.arch }}.zip
9696
aws --region us-east-1 lambda get-layer-version-by-arn --arn arn:aws:lambda:us-east-1:017000801446:layer:${{ matrix.layer }}-${{ matrix.arch }}:${{ inputs.version }} > ${{ matrix.layer }}-${{ matrix.arch }}.json
9797
- name: Store Zip
98-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
98+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9999
with:
100100
name: ${{ matrix.layer }}-${{ matrix.arch }}.zip
101101
path: ${{ matrix.layer }}-${{ matrix.arch }}.zip
102102
retention-days: 1
103103
if-no-files-found: error
104104
- name: Store Metadata
105-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
105+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
106106
with:
107107
name: ${{ matrix.layer }}-${{ matrix.arch }}.json
108108
path: ${{ matrix.layer }}-${{ matrix.arch }}.json
@@ -111,7 +111,7 @@ jobs:
111111

112112
copy:
113113
name: Copy
114-
needs:
114+
needs:
115115
- setup
116116
- download
117117
runs-on: ubuntu-latest
@@ -150,7 +150,7 @@ jobs:
150150
run: |
151151
echo 'CONVERTED_REGION=${{ matrix.region }}' | tr 'a-z\-' 'A-Z_' >> "$GITHUB_OUTPUT"
152152
- name: Configure AWS Credentials
153-
uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 # v4.3.0
153+
uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6.1.0
154154
with:
155155
role-to-assume: ${{ secrets[format('IAM_ROLE_{0}', steps.transform.outputs.CONVERTED_REGION)] }}
156156
aws-region: ${{ matrix.region}}
@@ -160,7 +160,7 @@ jobs:
160160
id: create-layer
161161
run: |
162162
cat '${{ matrix.layer }}-${{ matrix.arch }}.json' | jq '{"LayerName": "${{ matrix.layer }}-${{ matrix.arch }}", "Description": .Description, "CompatibleRuntimes": .CompatibleRuntimes, "CompatibleArchitectures": .CompatibleArchitectures, "LicenseInfo": .LicenseInfo}' > input.json
163-
163+
164164
LAYER_VERSION=$(aws --region ${{ matrix.region}} lambda publish-layer-version \
165165
--zip-file 'fileb://./${{ matrix.layer }}-${{ matrix.arch }}.zip' \
166166
--cli-input-json file://./input.json \
@@ -187,7 +187,7 @@ jobs:
187187
jq -s -r '["Layer Arn", "Runtimes", "Version", "Description", "SHA256"], ([.[0], .[1]] | .[] | [.LayerArn, (.CompatibleRuntimes | join("/")), .Version, .Description, .Content.CodeSha256]) |@tsv' '${{ matrix.layer }}-${{ matrix.arch }}.json' $layer_output | column -t -s $'\t'
188188
189189
- name: Store Metadata - ${{ matrix.region }}
190-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
190+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
191191
with:
192192
name: ${{ matrix.layer }}-${{ matrix.arch }}-${{ matrix.region }}.json
193193
path: ${{ matrix.layer }}-${{ matrix.arch }}-${{ matrix.region }}.json

.github/workflows/ossf_scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
repo_token: ${{ secrets.SCORECARD_TOKEN }} # read-only fine-grained token to read branch protection settings
3636

3737
- name: "Upload results"
38-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
38+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
3939
with:
4040
name: SARIF file
4141
path: results.sarif

.github/workflows/pre-release.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -221,7 +221,7 @@ jobs:
221221

222222
- name: Upload to PyPi prod
223223
if: ${{ !inputs.skip_pypi }}
224-
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
224+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
225225

226226
# Creates a PR with the latest version we've just released
227227
# since our trunk is protected against any direct pushes from automation

.github/workflows/publish_v3_layer.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -169,7 +169,7 @@ jobs:
169169
- name: zip output
170170
run: zip -r cdk.py${{ matrix.python-version }}.out.zip cdk.out
171171
- name: Archive CDK artifacts
172-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
172+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
173173
with:
174174
name: cdk-layer-artifact-py${{ matrix.python-version }}
175175
path: layer_v3/cdk.py${{ matrix.python-version }}.out.zip

.github/workflows/release-drafter.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,4 +27,4 @@ jobs:
2727
permissions:
2828
contents: write # create release in draft mode
2929
steps:
30-
- uses: release-drafter/release-drafter@139054aeaa9adc52ab36ddf67437541f039b88e2 # v7.1.1
30+
- uses: release-drafter/release-drafter@5de93583980a40bd78603b6dfdcda5b4df377b32 # v7.2.0

0 commit comments

Comments
 (0)