chore: projen eject

.github/dependabot.yml

@@ -1,24 +1,10 @@
-# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
 
 version: 2
 updates:
   - package-ecosystem: npm
-    versioning-strategy: lockfile-only
     directory: /
     schedule:
       interval: weekly
       day: tuesday
-    ignore:
-      - dependency-name: projen
     open-pull-requests-limit: 10
     target-branch: main
-  - package-ecosystem: npm
-    directory: /
-    open-pull-requests-limit: 10
-    target-branch: v1-node16
-    ignore:
-      - dependency-name: projen
-    versioning-strategy: lockfile-only
-    schedule:
-      interval: weekly
-      day: tuesday

.github/workflows/build.yml

@@ -1,4 +1,3 @@
-# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
 
 name: build
 on:
@@ -26,7 +25,7 @@ jobs:
       - name: Install dependencies
         run: npm install
       - name: build
-        run: npx projen build
+        run: scripts/run-task build
       - name: Find mutations
         id: self_mutation
         run: |-

.github/workflows/package.yml

@@ -0,0 +1,49 @@
+name: Update dist files on target branch
+
+on:
+  push:
+    branches:
+      - main
+      - v1-node16
+    paths-ignore:
+      - 'dist/**'
+
+jobs:
+  package:
+    name: Package dist files
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1-node16
+        with:
+          aws-region: us-west-2
+          role-to-assume: ${{ secrets.SECRETS_AWS_ROLE_TO_ASSUME }}
+          role-duration-seconds: 900
+          role-session-name: SecretsManagerFetch
+      - name: Get bot user token
+        uses: aws-actions/aws-secretsmanager-get-secrets@v1
+        with:
+          parse-json-secrets: true
+          secret-ids: |
+            OSDS,arn:aws:secretsmanager:us-west-2:294535624312:secret:github-aws-sdk-osds-automation-ZHNalp
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref_name }}
+          token: ${{ env.OSDS_ACCESS_TOKEN }}
+      - name: Package
+        run: |
+          npm ci
+          npm test
+          npm run package
+      - name: Commit
+        run: |
+          echo "::add-mask::${{ env.OSDS_ACCESS_TOKEN }}}"
+          git config --global user.name "GitHub Actions"
+          git add dist/
+          git commit -m "chore: Update dist" || echo "No changes to commit"
+          git push https://${{ env.OSDS_ACCESS_TOKEN }}@github.com/aws-actions/configure-aws-credentials.git

.github/workflows/pull-request-lint.yml

@@ -1,4 +1,3 @@
-# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
 
 name: pull-request-lint
 on:

.github/workflows/release.yml

@@ -1,86 +0,0 @@
-# ~~ Generated by projen. To modify, edit .projenrc.js and run "npx projen".
-
-name: release
-on:
-  push:
-    branches:
-      - main
-  workflow_dispatch: {}
-jobs:
-  release:
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    outputs:
-      latest_commit: ${{ steps.git_remote.outputs.latest_commit }}
-    env:
-      CI: "true"
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-        with:
-          fetch-depth: 0
-      - name: Set git identity
-        run: |-
-          git config user.name "github-actions"
-          git config user.email "github-actions@github.com"
-      - name: Setup Node.js
-        uses: actions/setup-node@v3
-        with:
-          node-version: 14.0.0
-      - name: Install dependencies
-        run: npm ci
-      - name: release
-        run: npx projen release
-      - name: Check for new commits
-        id: git_remote
-        run: echo ::set-output name=latest_commit::"$(git ls-remote origin -h ${{ github.ref }} | cut -f1)"
-      - name: Backup artifact permissions
-        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
-        run: cd dist && getfacl -R . > permissions-backup.acl
-        continue-on-error: true
-      - name: Upload artifact
-        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
-        uses: actions/upload-artifact@v2.1.1
-        with:
-          name: build-artifact
-          path: dist
-  release_github:
-    name: Publish to GitHub Releases
-    needs: release
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-      issues: write
-    if: needs.release.outputs.latest_commit == github.sha
-    steps:
-      - uses: actions/setup-node@v3
-        with:
-          node-version: 14.0.0
-      - name: Download build artifacts
-        uses: actions/download-artifact@v3
-        with:
-          name: build-artifact
-          path: dist
-      - name: Restore build artifact permissions
-        run: cd dist && setfacl --restore=permissions-backup.acl
-        continue-on-error: true
-      - name: Release
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GITHUB_REPOSITORY: ${{ github.repository }}
-          GITHUB_REF: ${{ github.ref }}
-        run: errout=$(mktemp); gh release create $(cat dist/releasetag.txt) -R $GITHUB_REPOSITORY -F dist/changelog.md -t $(cat dist/releasetag.txt) --target $GITHUB_REF 2> $errout && true; exitcode=$?; if [ $exitcode -ne 0 ] && ! grep -q "Release.tag_name already exists" $errout; then cat $errout; exit $exitcode; fi
-      - name: Extract Version
-        id: extract-version
-        if: ${{ failure() }}
-        run: echo "::set-output name=VERSION::$(cat dist/version.txt)"
-      - name: Create Issue
-        if: ${{ failure() }}
-        uses: imjohnbo/issue-bot@v3
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          labels: failed-release
-          title: Publishing v${{ steps.extract-version.outputs.VERSION }} to GitHub Releases failed
-          body: See https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}

.github/workflows/test.yml

@@ -0,0 +1,16 @@
+on:
+  [pull_request]
+
+name: Run Unit Tests
+
+jobs:
+  test:
+    name: Run Unit Tests
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Run tests
+        run: |
+          npm ci
+          npm run test

.github/workflows/v1-node16.yml

@@ -0,0 +1,39 @@
+on:
+  push:
+    branches:
+      - main
+    paths-ignore:
+      - 'dist/**'
+
+name: Update v1-node16 branch with changes from main
+
+jobs:
+  v1-node16-update:
+    name: Update v1-node16
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v1-node16
+        with:
+          aws-region: us-west-2
+          role-to-assume: ${{ secrets.SECRETS_AWS_ROLE_TO_ASSUME }}
+          role-duration-seconds: 900
+          role-session-name: SecretsManagerFetch
+      - name: Get bot user token
+        uses: aws-actions/aws-secretsmanager-get-secrets@v1
+        with:
+          parse-json-secrets: true
+          secret-ids: |
+            OSDS,arn:aws:secretsmanager:us-west-2:294535624312:secret:github-aws-sdk-osds-automation-ZHNalp
+      - name: Checkout
+        uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref_name }}
+          token: ${{ env.OSDS_ACCESS_TOKEN }}
+      - name: Merge commit and push
+        run: |
+          echo "::add-mask::${{ env.OSDS_ACCESS_TOKEN }}}"
+          git config --global user.name "GitHub Actions"
+          git merge --no-ff -m "Merge branch main into v1-node16"
+          git push https://${{ env.OSDS_ACCESS_TOKEN }}@github.com/aws-actions/configure-aws-credentials.git