Skip to content

Commit 099c7d5

Browse files
heitorlessaheitorlessa
authored
Merge branch 'develop' into feature/fix-etag-type
2 parents bfbdcaa + 2cc71d1 commit 099c7d5

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

44 files changed

+572
-321
lines changed

‎.github/actions/download-artifact/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ runs:
3838
using: composite
3939
steps:
4040
- name: Download artifacts
41-
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
41+
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
4242
with:
4343
name: ${{ inputs.name }}
4444
path: ${{ inputs.path }}

‎.github/actions/seal-restore/action.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ runs:
4343
shell: bash
4444

4545
- name: Download artifacts
46-
uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
46+
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
4747
with:
4848
name: ${{ inputs.artifact_name }}
4949
path: .

‎.github/workflows/codeql-analysis.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828

2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
31+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
3232

3333
# Initializes the CodeQL tools for scanning.
3434
- name: Initialize CodeQL

‎.github/workflows/dependency-review.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,6 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: 'Checkout Repository'
20-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
20+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
2121
- name: 'Dependency Review'
22-
uses: actions/dependency-review-action@5bbc3ba658137598168acb2ab73b21c432dd411b # v4.2.5
22+
uses: actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70 # v4.3.2

‎.github/workflows/label_pr_on_title.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
pull-requests: write # label respective PR
5151
steps:
5252
- name: Checkout repository
53-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
53+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5454
- name: "Label PR based on title"
5555
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
5656
env:

‎.github/workflows/on_label_added.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
permissions:
4848
pull-requests: write # comment on PR
4949
steps:
50-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
50+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5151
# Maintenance: Persist state per PR as an artifact to avoid spam on label add
5252
- name: "Suggest split large Pull Request"
5353
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1

‎.github/workflows/on_merged_pr.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
issues: write # label issue with pending-release
5050
if: needs.get_pr_details.outputs.prIsMerged == 'true'
5151
steps:
52-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
52+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5353
- name: "Label PR related issue for release"
5454
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
5555
env:

‎.github/workflows/on_opened_pr.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
needs: get_pr_details
4848
runs-on: ubuntu-latest
4949
steps:
50-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
50+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5151
- name: "Ensure related issue is present"
5252
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
5353
env:
@@ -66,7 +66,7 @@ jobs:
6666
permissions:
6767
pull-requests: write # label and comment on PR if missing acknowledge section (requirement)
6868
steps:
69-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
69+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
7070
- name: "Ensure acknowledgement section is present"
7171
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
7272
env:

‎.github/workflows/on_schedule_monthly_roadmap_reminder.yml

+11-7
Original file line numberDiff line numberDiff line change
@@ -2,17 +2,21 @@ name: Monthly roadmap reminder
22

33
on:
44
workflow_dispatch: {}
5-
# schedule:
6-
# - cron: '0 0 1 * *'
5+
schedule:
6+
- cron: '0 0 1 * *' # runs first day of the month
77

88
permissions:
99
contents: read
10-
pull-requests: read
11-
issues: read
1210

1311

1412
jobs:
1513
call-workflow-passing-data:
16-
uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@fd4575466e5c2ac10703ac16f5aa9fb8890f532a
17-
with:
18-
token: ${{ github.token }}
14+
permissions:
15+
contents: read
16+
pull-requests: read
17+
issues: write # create monthly roadmap report
18+
19+
# setting to `@main` until we have releases and governance installed
20+
uses: aws-powertools/actions/.github/workflows/monthly_roadmap_reminder.yml@main
21+
secrets:
22+
token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/ossf_scorecard.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: "Checkout code"
25-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
25+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
2626
with:
2727
persist-credentials: false
2828

‎.github/workflows/publish_v2_layer.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -88,7 +88,7 @@ jobs:
8888
working-directory: ./layer
8989
steps:
9090
- name: checkout
91-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
91+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
9292
with:
9393
ref: ${{ env.RELEASE_COMMIT }}
9494

@@ -247,7 +247,7 @@ jobs:
247247
pages: none
248248
steps:
249249
- name: Checkout repository # reusable workflows start clean, so we need to checkout again
250-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
250+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
251251
with:
252252
ref: ${{ env.RELEASE_COMMIT }}
253253

@@ -258,7 +258,7 @@ jobs:
258258
artifact_name: ${{ inputs.source_code_artifact_name }}
259259

260260
- name: Download CDK layer artifacts
261-
uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
261+
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
262262
with:
263263
path: cdk-layer-stack
264264
pattern: cdk-layer-stack-* # merge all Layer artifacts created per region earlier (reusable_deploy_v2_layer_stack.yml; step "Save Layer ARN artifact")

‎.github/workflows/quality_check.yml

+4-2
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ on:
2525
- "mypy.ini"
2626
branches:
2727
- develop
28+
- v3
2829
push:
2930
paths:
3031
- "aws_lambda_powertools/**"
@@ -34,6 +35,7 @@ on:
3435
- "mypy.ini"
3536
branches:
3637
- develop
38+
- v3
3739

3840
permissions:
3941
contents: read
@@ -50,7 +52,7 @@ jobs:
5052
permissions:
5153
contents: read # checkout code only
5254
steps:
53-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
55+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5456
- name: Install poetry
5557
run: pipx install poetry
5658
- name: Set up Python ${{ matrix.python-version }}
@@ -71,7 +73,7 @@ jobs:
7173
- name: Complexity baseline
7274
run: make complexity-baseline
7375
- name: Upload coverage to Codecov
74-
uses: codecov/codecov-action@84508663e988701840491b86de86b666e8a86bed # 4.3.0
76+
uses: codecov/codecov-action@5ecb98a3c6b747ed38dc09f787459979aebb39be # 4.3.1
7577
with:
7678
file: ./coverage.xml
7779
env_vars: PYTHON

‎.github/workflows/quality_check_pydanticv2.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
permissions:
5050
contents: read # checkout code only
5151
steps:
52-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
52+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5353
- name: Install poetry
5454
run: pipx install poetry
5555
- name: Set up Python ${{ matrix.python-version }}

‎.github/workflows/record_pr.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
permissions:
4747
contents: read # NOTE: treat as untrusted location
4848
steps:
49-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
49+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5050
- name: "Extract PR details"
5151
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
5252
with:

‎.github/workflows/release.yml

+8-8
Original file line numberDiff line numberDiff line change
@@ -80,7 +80,7 @@ jobs:
8080
RELEASE_VERSION="${RELEASE_TAG_VERSION:1}"
8181
echo "RELEASE_VERSION=${RELEASE_VERSION}" >> "$GITHUB_OUTPUT"
8282
83-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
83+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
8484
with:
8585
ref: ${{ env.RELEASE_COMMIT }}
8686

@@ -115,7 +115,7 @@ jobs:
115115
contents: read
116116
steps:
117117
# NOTE: we need actions/checkout to configure git first (pre-commit hooks in make dev)
118-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
118+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
119119
with:
120120
ref: ${{ env.RELEASE_COMMIT }}
121121

@@ -156,7 +156,7 @@ jobs:
156156
attestation_hashes: ${{ steps.encoded_hash.outputs.attestation_hashes }}
157157
steps:
158158
# NOTE: we need actions/checkout to configure git first (pre-commit hooks in make dev)
159-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
159+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
160160
with:
161161
ref: ${{ env.RELEASE_COMMIT }}
162162

@@ -206,7 +206,7 @@ jobs:
206206
# NOTE: provenance fails if we use action pinning... it's a Github limitation
207207
# because SLSA needs to trace & attest it came from a given branch; pinning doesn't expose that information
208208
# https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#referencing-the-slsa-generator
209-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.10.0
209+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.0.0
210210
with:
211211
base64-subjects: ${{ needs.build.outputs.attestation_hashes }}
212212
upload-assets: false # we upload its attestation in create_tag job, otherwise it creates a new release
@@ -225,7 +225,7 @@ jobs:
225225
RELEASE_VERSION: ${{ needs.seal.outputs.RELEASE_VERSION }}
226226
steps:
227227
# NOTE: we need actions/checkout in order to use our local actions (e.g., ./.github/actions)
228-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
228+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
229229
with:
230230
ref: ${{ env.RELEASE_COMMIT }}
231231

@@ -259,7 +259,7 @@ jobs:
259259
contents: write
260260
steps:
261261
# NOTE: we need actions/checkout to authenticate and configure git first
262-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
262+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
263263
with:
264264
ref: ${{ env.RELEASE_COMMIT }}
265265

@@ -303,7 +303,7 @@ jobs:
303303
runs-on: ubuntu-latest
304304
steps:
305305
# NOTE: we need actions/checkout to authenticate and configure git first
306-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
306+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
307307
with:
308308
ref: ${{ env.RELEASE_COMMIT }}
309309

@@ -357,7 +357,7 @@ jobs:
357357
env:
358358
RELEASE_VERSION: ${{ needs.seal.outputs.RELEASE_VERSION }}
359359
steps:
360-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
360+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
361361
with:
362362
ref: ${{ env.RELEASE_COMMIT }}
363363

‎.github/workflows/reusable_deploy_v2_layer_stack.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -140,7 +140,7 @@ jobs:
140140
has_arm64_support: "true"
141141
steps:
142142
- name: checkout
143-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
143+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
144144
with:
145145
ref: ${{ env.RELEASE_COMMIT }}
146146

@@ -180,7 +180,7 @@ jobs:
180180
- name: install deps
181181
run: poetry install
182182
- name: Download artifact
183-
uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
183+
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
184184
with:
185185
name: ${{ inputs.artefact-name }}
186186
path: layer

‎.github/workflows/reusable_deploy_v2_sar.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -79,7 +79,7 @@ jobs:
7979
architecture: ["x86_64", "arm64"]
8080
steps:
8181
- name: checkout
82-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
82+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
8383
with:
8484
ref: ${{ env.RELEASE_COMMIT }}
8585

@@ -115,7 +115,7 @@ jobs:
115115
with:
116116
node-version: ${{ env.NODE_VERSION }}
117117
- name: Download artifact
118-
uses: actions/download-artifact@9c19ed7fe5d278cd354c7dfd5d3b88589c7e2395 # v4.1.6
118+
uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
119119
with:
120120
name: ${{ inputs.artefact-name }}
121121
- name: Unzip artefact

‎.github/workflows/reusable_export_pr_details.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -76,7 +76,7 @@ jobs:
7676
prLabels: ${{ steps.prLabels.outputs.prLabels }}
7777
steps:
7878
- name: Checkout repository # in case caller workflow doesn't checkout thus failing with file not found
79-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
79+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
8080
- name: "Download previously saved PR"
8181
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
8282
env:

‎.github/workflows/reusable_publish_changelog.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
pull-requests: write # create PR
2727
steps:
2828
- name: Checkout repository # reusable workflows start clean, so we need to checkout again
29-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
29+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
3030
with:
3131
fetch-depth: 0
3232
- name: "Generate latest changelog"

‎.github/workflows/reusable_publish_docs.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
id-token: write # trade JWT token for AWS credentials in AWS Docs account
4545
pages: write # uncomment if mike fails as we migrated to S3 hosting
4646
steps:
47-
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
47+
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
4848
with:
4949
fetch-depth: 0
5050
ref: ${{ inputs.git_ref }}

‎.github/workflows/run-e2e-tests.yml

+2-1
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,7 @@ on:
1919
push:
2020
branches:
2121
- develop
22+
- v3
2223
paths:
2324
- "aws_lambda_powertools/**"
2425
- "tests/e2e/**"
@@ -51,7 +52,7 @@ jobs:
5152
if: ${{ github.actor != 'dependabot[bot]' && github.repository == 'aws-powertools/powertools-lambda-python' }}
5253
steps:
5354
- name: "Checkout"
54-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
55+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
5556
- name: Install poetry
5657
run: pipx install poetry
5758
- name: "Use Python"

‎.github/workflows/secure_workflows.yml

+5-3
Original file line numberDiff line numberDiff line change
@@ -30,8 +30,10 @@ jobs:
3030
contents: read # checkout code and subsequently GitHub action workflows
3131
steps:
3232
- name: Checkout code
33-
uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4.1.3
33+
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
3434
- name: Ensure 3rd party workflows have SHA pinned
35-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@19ebcb0babbd282ae1822a0b9c28f3f1f25cea45 # v3.0.4
35+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@40e45e738b3cad2729f599d8afc6ed02184e1dbd # v3.0.5
3636
with:
37-
allowlist: slsa-framework/slsa-github-generator
37+
allowlist: |
38+
slsa-framework/slsa-github-generator
39+
aws-powertools/actions

0 commit comments

Comments
 (0)