fix(ci): add missing dollar signs in SSM parameter path variables

[Iamrodos]

Issue number: closes #7689

Summary

Changes

Fixed a typo in .github/workflows/update_ssm.yml where 10 out of 12 SSM parameter path variables were missing the $ prefix on PACKAGE_VERSION.

When adding Python 3.14 support in commit a58cef7, the workflow was refactored to use shell environment variables instead of GitHub Actions expressions. However, during this refactor, the $ symbol was accidentally omitted on most lines, causing the literal string "PACKAGE_VERSION" to be used in parameter paths instead of the actual semantic version (e.g., "3.23.0").

Lines fixed:

• ARM64: Python 3.11, 3.12, 3.13, 3.14
• x86_64: Python 3.9, 3.10, 3.11, 3.12, 3.13, 3.14

User experience

Before:
Users looking for version-specific SSM parameters for Python 3.11-3.14 (ARM64) and all x86_64 versions cannot find them for release 3.23.0.

For example, querying
aws ssm get-parameter --name "/aws/service/powertools/python/x86_64/python3.13/3.23.0" --region us-east-1 returns ParameterNotFound

Instead, incorrectly named parameters exist at /aws/service/powertools/python/x86_64/python3.13/PACKAGE_VERSION

After:
Future releases will create correctly named SSM parameters that users can reference in their CloudFormation templates and infrastructure code.

Note:

This fix prevents the issue in future releases. The v3.23.0 parameters will need to be recreated separately by re-running the update_ssm workflow for that version.

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[leandrodamascena]

Hey @Iamrodos thanks for sending this PR! I was taking a look on this. I merged this and run the parameter workflow again.

{
    "Parameter": {
        "Name": "/aws/service/powertools/python/x86_64/python3.14/latest",
        "Type": "String",
        "Value": "arn:aws:lambda:us-east-1:017000801446:layer:AWSLambdaPowertoolsPythonV3-python314-x86_64:27",
        "Version": 2,
        "LastModifiedDate": "2025-11-15T23:28:24.845000+00:00",
        "ARN": "arn:aws:ssm:us-east-1::parameter/aws/service/powertools/python/x86_64/python3.14/latest",
        "DataType": "text"
    }
}

[Iamrodos]

@leandrodamascena thanks for the merge and running the update.

FYI I found this because dependabot trigger because of the PyPi update. I use the SSM in my CloudFormation to specify the specific layer. However I have a lint check on my CF that verifies that the layer actually exists, due to the "potential 48 hour delay" in it being available. After waiting quite a while, I figured there was something wrong and started to investigate the missing parameter.

Love PowerTools!