chore(deps): update public.ecr.aws/aws-cli/aws-cli docker tag to v2.25.6 #2297
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| name: Run Pulumi | |
| concurrency: | |
| # Make sure each push gets a separate concurrency group so pushes to main | |
| # don't cancel each other. | |
| group: >- | |
| pulumi-${{ | |
| github.event_name == 'pull_request' && | |
| github.ref || | |
| github.sha | |
| }} | |
| cancel-in-progress: true | |
| jobs: | |
| # Actions only allows one waiter per concrrency group, so we do the waiting | |
| # ourselves. | |
| turnstile: | |
| name: Wait for any other builds of ${{ github.workflow }} | |
| runs-on: ubuntu-24.04 | |
| if: github.event_name == 'push' | |
| steps: | |
| - name: Wait | |
| uses: softprops/turnstyle@25dcee5c3fcb84375f3a3f93a3c97ed0d42cfcdc # v2.3.1 | |
| with: | |
| continue-after-seconds: 600 | |
| oidc_debug_test: | |
| name: Debug OIDC claims | |
| permissions: | |
| contents: read | |
| id-token: write | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - name: Checkout actions-oidc-debugger | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| repository: github/actions-oidc-debugger | |
| ref: main | |
| path: ./.github/actions/actions-oidc-debugger | |
| - name: Debug OIDC Claims | |
| uses: ./.github/actions/actions-oidc-debugger | |
| with: | |
| audience: "${{ github.server_url }}/${{ github.repository_owner }}" | |
| pulumi: | |
| # Share build results via cache between the `build-rust.yml` and | |
| # `pulumi.yml` workflows, because they have the same concurrency group. The | |
| # later one will wait for the earlier. | |
| concurrency: | |
| group: build-${{ github.sha }}-aarch64-unknown-linux-gnu | |
| cancel-in-progress: false | |
| name: >- | |
| Pulumi ${{ (github.event_name == 'push' && github.ref == | |
| 'refs/heads/main') && 'up' || 'preview' }} | |
| permissions: | |
| actions: read | |
| contents: read | |
| id-token: write | |
| pull-requests: write | |
| runs-on: ubuntu-24.04 | |
| env: | |
| AWS_REGION: eu-west-2 | |
| ROLE_PULL_REQUEST: arn:aws:iam::588722779806:role/oidcPullRequestRole-f06bda4 | |
| ROLE_PUSH: arn:aws:iam::588722779806:role/oidcPushRole-3ed1aa1 | |
| STATE_BUCKET: pulumi-state-588722779806 | |
| steps: | |
| # Actions only allows one waiter per concrrency group, so we do the waiting | |
| # ourselves. | |
| - name: Wait | |
| if: github.event_name == 'push' | |
| uses: softprops/turnstyle@25dcee5c3fcb84375f3a3f93a3c97ed0d42cfcdc # v2.3.1 | |
| with: | |
| continue-after-seconds: 600 | |
| - name: Install corepack | |
| env: | |
| # renovate: datasource=npm depName=corepack | |
| COREPACK_VERSION: 0.31.0 | |
| run: | | |
| npm install -g corepack@${{ env.COREPACK_VERSION }} | |
| - name: Enable corepack | |
| run: | | |
| corepack enable | |
| - name: Configure AWS credentials | |
| uses: aws-actions/configure-aws-credentials@ececac1a45f3b08a01d2dd070d28d111c5fe6722 # v4.1.0 | |
| with: | |
| audience: lambda-rssfilter-core-prod | |
| aws-region: ${{ env.AWS_REGION }} | |
| role-to-assume: >- | |
| ${{ github.event_name == 'push' && env.ROLE_PUSH || | |
| env.ROLE_PULL_REQUEST }} | |
| - name: Print session info | |
| run: aws sts get-caller-identity | |
| - name: Check out | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| - name: Build | |
| uses: ./.github/actions/build | |
| with: | |
| build-type: | |
| ${{ github.event_name == 'pull_request' && 'debug' || 'release' }} | |
| pkg-config-sysroot: /usr/lib/aarch64-linux-gnu | |
| target: aarch64-unknown-linux-gnu | |
| - name: Set up pnpm | |
| uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 | |
| with: | |
| package_json_file: pulumi/package.json | |
| - name: Set up Node.js | |
| uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 | |
| with: | |
| cache-dependency-path: "pulumi/pnpm-lock.yaml" | |
| node-version-file: "pulumi/package.json" | |
| cache: "pnpm" | |
| - name: Install dependencies | |
| working-directory: pulumi | |
| run: pnpm install | |
| - name: Get pulumi node package version | |
| id: pulumi-version | |
| working-directory: pulumi | |
| run: | | |
| pulumi_version="$(pnpm ls --json @pulumi/pulumi | jq --raw-output '.[0].dependencies["@pulumi/pulumi"].version')" | |
| echo "Pulumi version: ${pulumi_version}" | |
| echo "pulumi-version=${pulumi_version}" >> $GITHUB_OUTPUT | |
| - name: Run pulumi | |
| uses: pulumi/actions@9519177da243fd32cab35cdbf19cce1ab7472fcc # v6.2.0 | |
| env: | |
| PKG_CONFIG_SYSROOT_DIR: /usr/lib/aarch64-linux-gnu | |
| with: | |
| cloud-url: | |
| s3://${{ env.STATE_BUCKET }}?region=${{ env.AWS_REGION }}&awssdk=v2 | |
| stack-name: organization/lambda-rssfilter/prod | |
| command: >- | |
| ${{ | |
| (github.event_name == 'push' && github.ref == 'refs/heads/main') | |
| && 'up' | |
| || 'preview' | |
| }} | |
| comment-on-pr: true | |
| comment-on-summary: true | |
| pulumi-version: ${{ steps.pulumi-version.outputs.pulumi-version }} | |
| work-dir: pulumi |