From 6955ae2512233dc4a538243163550cc2fb961cef Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Thu, 2 Oct 2025 13:52:26 -0400 Subject: [PATCH 01/20] chore: use macos-14 for CI --- .github/workflows/ci_examples_java.yml | 2 +- .github/workflows/ci_examples_net.yml | 2 +- .github/workflows/ci_test_go.yml | 4 ++-- .github/workflows/ci_test_java.yml | 2 +- .github/workflows/ci_test_net.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 4 ++-- .github/workflows/ci_todos.yml | 2 +- .github/workflows/dafny_interop_examples_java.yml | 2 +- .github/workflows/dafny_interop_examples_net.yml | 2 +- .github/workflows/dafny_interop_java.yml | 2 +- .github/workflows/dafny_interop_test_net.yml | 2 +- .github/workflows/go-release.yml | 2 +- .github/workflows/library_dafny_verification.yml | 4 ++-- .github/workflows/library_format.yml | 2 +- .github/workflows/library_rust_tests.yml | 4 ++-- .github/workflows/sem_ver.yml | 2 +- .github/workflows/semantic_release.yml | 2 +- .github/workflows/test_vector_verification.yml | 4 ++-- 19 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index a8c221dc6..3c2a53410 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 41d90d49c..6eab731fd 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -27,7 +27,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 3cb97b7c6..f02b7d013 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption, TestVectors] - os: [ubuntu-22.04, macos-13] + os: [ubuntu-22.04, macos-14] go-version: ["1.23", "1.24", "1.25"] runs-on: ${{ matrix.os }} permissions: @@ -37,7 +37,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1-alpha - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 4715bb174..702d76794 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -30,7 +30,7 @@ jobs: matrix: library: [DynamoDbEncryption] java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 6c90f0e52..dcc93a405 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -25,7 +25,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13, ubuntu-22.04, windows-latest] + os: [macos-14, ubuntu-22.04, windows-latest] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index d0396f2b4..a4d58cb31 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -32,7 +32,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-13, + macos-14, ] runs-on: ${{ matrix.os }} permissions: @@ -40,7 +40,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index c98fb33ed..91602a923 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -28,7 +28,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-13, + macos-14, ] runs-on: ${{ matrix.os }} permissions: @@ -36,7 +36,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_todos.yml b/.github/workflows/ci_todos.yml index 20a75492f..736feb599 100644 --- a/.github/workflows/ci_todos.yml +++ b/.github/workflows/ci_todos.yml @@ -9,7 +9,7 @@ on: jobs: findTodos: - runs-on: macos-13 + runs-on: macos-14 steps: - uses: actions/checkout@v3 diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 4a77907e9..092cd31f1 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -28,7 +28,7 @@ jobs: max-parallel: 1 matrix: java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index 7e3f031ab..46281110c 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -24,7 +24,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 685d0035f..9ae08aabb 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -28,7 +28,7 @@ jobs: matrix: library: [DynamoDbEncryption] java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 701794438..eecddca0e 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -24,7 +24,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13, ubuntu-22.04, windows-latest] + os: [macos-14, ubuntu-22.04, windows-latest] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml index adf530554..9b87b3497 100644 --- a/.github/workflows/go-release.yml +++ b/.github/workflows/go-release.yml @@ -18,7 +18,7 @@ jobs: go-release: needs: get-dafny-version - runs-on: macos-13 + runs-on: macos-14 permissions: contents: write pull-requests: write diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index 1759804e1..f911c5fed 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -39,7 +39,7 @@ jobs: DynamoDbItemEncryptor, StructuredEncryption, ] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: @@ -72,7 +72,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties # dafny-reportgenerator requires next6 - # but only 7.0 is installed on macos-13-large + # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' uses: actions/setup-dotnet@v4 with: diff --git a/.github/workflows/library_format.yml b/.github/workflows/library_format.yml index 1732bc57b..f6dd42ee9 100644 --- a/.github/workflows/library_format.yml +++ b/.github/workflows/library_format.yml @@ -19,7 +19,7 @@ jobs: if: github.event_name != 'schedule' || github.repository_owner == 'aws' strategy: matrix: - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index bae6b3aaf..28253d0a9 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -26,7 +26,7 @@ jobs: matrix: library: [DynamoDbEncryption, TestVectors] # removed windows-latest because somehow it can't build aws-lc in CI - os: [ubuntu-22.04, macos-13] + os: [ubuntu-22.04, macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write @@ -35,7 +35,7 @@ jobs: RUST_MIN_STACK: 838860800 steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 93154bb36..44675f7d0 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -6,7 +6,7 @@ on: jobs: semantic-release: - runs-on: macos-13 + runs-on: macos-14 permissions: id-token: write contents: read diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index 9110e579e..e68190991 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -15,7 +15,7 @@ jobs: # privileged operation, so we must make sure this list of users is a subset of the users labeled as maintainers of # https://github.com/orgs/aws/teams/aws-crypto-tools if: contains('["seebees","texastony","ShubhamChaturvedi7","lucasmcdonald3","josecorella","imabhichow","rishav-karanjit","antonf-amzn","kessplas","ajewellamz","RitvikKapila"]', github.actor) - runs-on: macos-13 + runs-on: macos-14 permissions: id-token: write contents: write diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index d00b1fdc2..472d2f57d 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -29,7 +29,7 @@ jobs: if: github.event_name != 'schedule' || github.repository_owner == 'aws' strategy: matrix: - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: @@ -62,7 +62,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties # dafny-reportgenerator requires next6 - # but only 7.0 is installed on macos-13-large + # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' uses: actions/setup-dotnet@v4 with: From ecffe8677a3dfdfa8d328a84f8e87e48ac16f1ec Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Thu, 2 Oct 2025 14:02:46 -0400 Subject: [PATCH 02/20] m --- .github/workflows/ci_codegen.yml | 2 +- .github/workflows/ci_examples_java.yml | 4 ++-- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_java.yml | 4 ++-- .github/workflows/ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/dafny_interop_examples_java.yml | 4 ++-- .github/workflows/dafny_interop_java.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_java.yml | 4 ++-- .github/workflows/library_rust_tests.yml | 2 +- 10 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 43856d3a7..1bd695c48 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -58,7 +58,7 @@ jobs: run: echo '{"sdk":{"rollForward":"latestFeature","version":"6.0.0"}}' > ./global.json - name: Setup Java 17 for codegen - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 3c2a53410..2bba8fbcc 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -27,7 +27,7 @@ jobs: testJava: strategy: matrix: - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -46,7 +46,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index f02b7d013..482ac8688 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -71,7 +71,7 @@ jobs: run: echo '{"sdk":{"rollForward":"latestFeature","version":"6.0.0"}}' > ./global.json - name: Setup Java 17 for codegen - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 702d76794..1253e9adb 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -79,7 +79,7 @@ jobs: update-and-regenerate-mpl: true - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 79b193440..99edd54b5 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -48,7 +48,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index a4d58cb31..60c428650 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -92,7 +92,7 @@ jobs: update-and-regenerate-mpl: true - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 092cd31f1..10494474a 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -27,7 +27,7 @@ jobs: strategy: max-parallel: 1 matrix: - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -60,7 +60,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 9ae08aabb..4bded7416 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -60,7 +60,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 1d29bf32f..88bf5a6bd 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -69,7 +69,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 28253d0a9..ce0ace469 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -82,7 +82,7 @@ jobs: git rev-parse HEAD - name: Setup Java 17 for codegen - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" From d421c830e7a8eaaac03f051530b8d64afb1f7e2a Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 18:40:52 -0400 Subject: [PATCH 03/20] m --- .../action.yml | 8 ++++---- .github/workflows/ci_codegen.yml | 4 ++-- .github/workflows/ci_examples_java.yml | 8 +++++++- .github/workflows/ci_examples_net.yml | 9 ++++++++- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_java.yml | 8 +++++++- .../ci_test_latest_released_mpl_java.yml | 6 ++++++ .github/workflows/ci_test_net.yml | 15 +++++++++------ .github/workflows/ci_test_vector_java.yml | 8 +++++++- .github/workflows/ci_test_vector_net.yml | 9 ++++++++- .github/workflows/dafny_interop_examples_java.yml | 8 +++++++- .github/workflows/dafny_interop_examples_net.yml | 9 ++++++++- .github/workflows/dafny_interop_java.yml | 8 +++++++- .github/workflows/dafny_interop_test_net.yml | 15 +++++++++------ .../workflows/dafny_interop_test_vector_java.yml | 8 +++++++- .../workflows/dafny_interop_test_vector_net.yml | 9 ++++++++- .github/workflows/library_dafny_verification.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- .github/workflows/sem_ver.yml | 2 +- .github/workflows/semantic_release.yml | 2 +- .github/workflows/test_vector_verification.yml | 2 +- 21 files changed, 110 insertions(+), 34 deletions(-) diff --git a/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml b/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml index 79e52b2e8..33aad451c 100644 --- a/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml +++ b/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml @@ -9,7 +9,7 @@ runs: using: "composite" steps: - name: Setup Java 17 for codegen - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" @@ -20,7 +20,7 @@ runs: make -C submodules/smithy-dafny mvn_local_deploy_polymorph_dependencies - name: Setup Python, black, and docformatter for code formatting - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} architecture: x64 @@ -31,14 +31,14 @@ runs: python -m pip install --upgrade docformatter - name: Install Go - uses: actions/setup-go@v2 + uses: actions/setup-go@v6 with: go-version: "1.23" - name: Install Go imports shell: bash run: | - go install golang.org/x/tools/cmd/goimports@latest + go install golang.org/x/tools/cmd/goimports@v0.36.0 # Without this the if-dafny-at-least command includes "Downloading ..." output - name: Arbitrary makefile target to force downloading Gradle diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 1bd695c48..7aca0fffd 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -45,12 +45,12 @@ jobs: dafny-version: ${{ inputs.dafny }} - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: ${{ matrix.go-version }} diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 2bba8fbcc..9f516bd0a 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -27,7 +27,7 @@ jobs: testJava: strategy: matrix: - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -45,6 +45,12 @@ jobs: with: submodules: recursive + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 6eab731fd..5585a760d 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -41,10 +41,17 @@ jobs: submodules: recursive - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 482ac8688..59dc9cd92 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -91,7 +91,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: ${{ matrix.go-version }} diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 1253e9adb..f620494c1 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -78,6 +78,12 @@ jobs: diff-generated-code: false update-and-regenerate-mpl: true + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 99edd54b5..6946a54b5 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -47,6 +47,12 @@ jobs: with: submodules: recursive + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index dcc93a405..ef19c2bd6 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -42,10 +42,17 @@ jobs: submodules: recursive - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -106,11 +113,7 @@ jobs: run: | dotnet restore runtimes/net/tests dotnet build runtimes/net/tests - if [ "$RUNNER_OS" == "macOS" ]; then - make test_net_mac_intel - else - make test_net FRAMEWORK=net6.0 - fi + make test_net FRAMEWORK=net6.0 - name: Test Build and Pack ${{ matrix.library}} shell: bash diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 60c428650..5d7b2c310 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -91,6 +91,12 @@ jobs: diff-generated-code: false update-and-regenerate-mpl: true + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 91602a923..3dc78d505 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -83,10 +83,17 @@ jobs: update-and-regenerate-mpl: true - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Build TestVectors implementation shell: bash working-directory: ${{matrix.library}} diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 10494474a..acfeefce7 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -27,7 +27,7 @@ jobs: strategy: max-parallel: 1 matrix: - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -59,6 +59,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index 46281110c..e4caba31f 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -42,10 +42,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 4bded7416..9d71d2a46 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -59,6 +59,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index eecddca0e..225bf2beb 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -42,10 +42,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -108,11 +115,7 @@ jobs: run: | dotnet restore runtimes/net/tests dotnet build runtimes/net/tests - if [ "$RUNNER_OS" == "macOS" ]; then - make test_net_mac_intel - else - make test_net FRAMEWORK=net6.0 - fi + make test_net FRAMEWORK=net6.0 - name: Test Build and Pack ${{ matrix.library}} shell: bash diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 88bf5a6bd..5722168e0 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -68,6 +68,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index bc8500c3d..35b4bf31f 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -47,10 +47,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index f911c5fed..c55ad63a0 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -74,7 +74,7 @@ jobs: # dafny-reportgenerator requires next6 # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: "6.0.x" diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index ce0ace469..34a0e2fcd 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -63,7 +63,7 @@ jobs: role-session-name: DDBEC-Dafny-Rust-Tests - name: Setup Rust Toolchain for GitHub CI - uses: actions-rust-lang/setup-rust-toolchain@v1.10.1 + uses: actions-rust-lang/setup-rust-toolchain@v1 with: components: rustfmt diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 44675f7d0..2c2ab4e0f 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -27,7 +27,7 @@ jobs: role-session-name: CI_Bot_Release - name: Upgrade Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 21 diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index e68190991..2c958781f 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -36,7 +36,7 @@ jobs: role-session-name: CI_Bot_Release - name: Upgrade Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 21 diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index 472d2f57d..c99f745eb 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -64,7 +64,7 @@ jobs: # dafny-reportgenerator requires next6 # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: "6.0.x" From eebb22b4f59fe72806fb6c7bfdc860915130c145 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 18:47:02 -0400 Subject: [PATCH 04/20] m --- .github/workflows/ci_test_vector_java.yml | 4 ---- .github/workflows/ci_test_vector_net.yml | 4 ---- .github/workflows/library_rust_tests.yml | 4 ---- 3 files changed, 12 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 5d7b2c310..1d3add030 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,10 +39,6 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local uses: rrainn/dynamodb-action@v4.0.0 with: diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 3dc78d505..de5622ac3 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,10 +35,6 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local uses: rrainn/dynamodb-action@v4.0.0 with: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 34a0e2fcd..fad586e8c 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,10 +34,6 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local if: matrix.library == 'TestVectors' uses: rrainn/dynamodb-action@v4.0.0 From 43bdfec087cf498e68acea7c3401d304423290c9 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:27:33 -0400 Subject: [PATCH 05/20] m --- .github/workflows/library_rust_tests.yml | 25 +++++++++++++++++++----- 1 file changed, 20 insertions(+), 5 deletions(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index fad586e8c..1ff778457 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,12 +34,27 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: - - name: Setup DynamoDB Local - if: matrix.library == 'TestVectors' - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: 'corretto' + java-version: '11' # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Support longpaths on Git checkout run: | From 40d9138dcd9cbffdd410d1f30e9145a0774f43f2 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:30:17 -0400 Subject: [PATCH 06/20] m --- .github/workflows/library_rust_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 1ff778457..5be3d190f 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -42,7 +42,7 @@ jobs: - name: Download DynamoDB Local run: | - wget https://s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + wget https://dynamodb-local.s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local From 64c81dfc7fe4644f4e197fcba3b3d587eae22543 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:34:25 -0400 Subject: [PATCH 07/20] m --- .github/workflows/library_rust_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 5be3d190f..6c3cb035b 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -42,7 +42,7 @@ jobs: - name: Download DynamoDB Local run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local From cc831f226b8f739a84a602f44b02f2104923723e Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 20:26:39 -0400 Subject: [PATCH 08/20] m --- .github/workflows/ci_test_go.yml | 29 +++++++++++++------ .github/workflows/ci_test_vector_java.yml | 24 ++++++++++++--- .github/workflows/ci_test_vector_net.yml | 24 ++++++++++++--- .../dafny_interop_test_vector_java.yml | 24 ++++++++++++--- .../dafny_interop_test_vector_net.yml | 25 +++++++++++++--- .github/workflows/library_rust_tests.yml | 22 ++++++++++++-- 6 files changed, 120 insertions(+), 28 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 59dc9cd92..51312f076 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -36,16 +36,27 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1-alpha - - - name: Setup DynamoDB Local - if: matrix.library == 'TestVectors' - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Support longpaths run: | diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 1d3add030..be6902353 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,11 +39,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index de5622ac3..6a910d96f 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,11 +35,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 5722168e0..9ea5af7c6 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -37,11 +37,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 35b4bf31f..b7e710788 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -33,11 +33,28 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done + - name: Support longpaths on Git checkout run: | git config --global core.longpaths true diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 6c3cb035b..9ab01f98f 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -37,8 +37,8 @@ jobs: - name: Install Java uses: actions/setup-java@v5 with: - distribution: 'corretto' - java-version: '11' # DynamoDB Local requires Java + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java - name: Download DynamoDB Local run: | @@ -46,7 +46,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -127,12 +127,20 @@ jobs: cp runtimes/java/*.json runtimes/rust/ - name: Test ${{ matrix.library }} Rust + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | make test_rust - name: Test ${{ matrix.library }} Rust Fips + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }}/runtimes/rust/ run: | @@ -140,6 +148,10 @@ jobs: - name: Test ${{ matrix.library }} Rust Debug if: ${{ matrix.library != 'TestVectors' }} + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | @@ -147,6 +159,10 @@ jobs: - name: Test Examples for Rust in ${{ matrix.library }} if: ${{ matrix.library == 'DynamoDbEncryption' }} + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK working-directory: ./${{ matrix.library }}/runtimes/rust/ shell: bash run: | From 5f23731d6d95ae556e0f91757689fb33fbfebc26 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 07:42:31 -0400 Subject: [PATCH 09/20] m --- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 2 +- .../dafny_interop_test_vector_java.yml | 2 +- .../dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 30 +++++-------------- .../dafny/DDBEncryption/src/TestVectors.dfy | 7 ++++- 7 files changed, 18 insertions(+), 29 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 51312f076..ee29e30ae 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -48,7 +48,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index be6902353..54f16efbd 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -51,7 +51,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 6a910d96f..a6bf0291b 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 9ea5af7c6..590b1c565 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -49,7 +49,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index b7e710788..6698f29ee 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -45,7 +45,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 9ab01f98f..69942be05 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -49,13 +49,6 @@ jobs: run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - - name: Support longpaths on Git checkout run: | git config --global core.longpaths true @@ -73,6 +66,13 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Rust-Tests + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done + - name: Setup Rust Toolchain for GitHub CI uses: actions-rust-lang/setup-rust-toolchain@v1 with: @@ -127,20 +127,12 @@ jobs: cp runtimes/java/*.json runtimes/rust/ - name: Test ${{ matrix.library }} Rust - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | make test_rust - name: Test ${{ matrix.library }} Rust Fips - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }}/runtimes/rust/ run: | @@ -148,10 +140,6 @@ jobs: - name: Test ${{ matrix.library }} Rust Debug if: ${{ matrix.library != 'TestVectors' }} - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | @@ -159,10 +147,6 @@ jobs: - name: Test Examples for Rust in ${{ matrix.library }} if: ${{ matrix.library == 'DynamoDbEncryption' }} - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK working-directory: ./${{ matrix.library }}/runtimes/rust/ shell: bash run: | diff --git a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy index 86f42525c..bcfb4e79d 100644 --- a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy +++ b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy @@ -369,7 +369,12 @@ module {:options "-functionSyntax:4"} DdbEncryptionTestVectors { modifies client.Modifies { DeleteTable(client); - var _ :- expect client.CreateTable(schemaOnEncrypt); + // var _ :- expect client.CreateTable(schemaOnEncrypt); + var xxx := client.CreateTable(schemaOnEncrypt); + if xxx.Failure? { + print "***\n", xxx, "\n***\n"; + expect false; + } for i := 0 to |records| { var input := DDB.PutItemInput( TableName := TableName, From 9a50766cf099ac654d2348cd9158bbe8a4caa1cc Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:10:57 -0400 Subject: [PATCH 10/20] m --- .../dafny_interop_test_vector_java.yml | 34 +++++++++++++------ 1 file changed, 23 insertions(+), 11 deletions(-) diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 590b1c565..5ef6ae527 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -37,6 +37,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -49,22 +56,27 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + run: | + java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 + for i in {1..30}; do + if curl -s -f http://localhost:8000 > /dev/null 2>&1; then + echo "DynamoDB Local is ready" + break + fi + echo "Attempt $i: DynamoDB Local not ready yet..." + sleep 2 done - - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests + # Verify it's actually working + curl -X POST http://localhost:8000 \ + -H "Content-Type: application/x-amz-json-1.0" \ + -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 with: From bbe9aedaafe5ff849eba608dab1c541ff89dfa02 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:17:50 -0400 Subject: [PATCH 11/20] m --- .github/workflows/ci_test_vector_java.yml | 34 +++++++++++++++-------- 1 file changed, 23 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 54f16efbd..0ae6450cc 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,6 +39,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -51,22 +58,27 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + run: | + java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 + for i in {1..30}; do + if curl -s -f http://localhost:8000 > /dev/null 2>&1; then + echo "DynamoDB Local is ready" + break + fi + echo "Attempt $i: DynamoDB Local not ready yet..." + sleep 2 done - - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests + # Verify it's actually working + curl -X POST http://localhost:8000 \ + -H "Content-Type: application/x-amz-json-1.0" \ + -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 with: From 0870f3ee59ab18cc65c1ffc73f9a9da532000fbd Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:26:46 -0400 Subject: [PATCH 12/20] m --- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/dafny_interop_test_vector_java.yml | 2 +- .github/workflows/dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index ee29e30ae..935058452 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -48,7 +48,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 6946a54b5..47d6a8ce4 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -119,7 +119,7 @@ jobs: working-directory: ./TestVectors run: | # Spin up ddb local - docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -inMemory -cors * + docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -noAuth -inMemory -cors * # Run transpile by itself so we don't locally build the MPL. make transpile_implementation_java make transpile_test_java diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 0ae6450cc..8f64ae2ed 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -60,7 +60,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index a6bf0291b..3a24080df 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 5ef6ae527..3b7d04690 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -58,7 +58,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 6698f29ee..5a5117b65 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -45,7 +45,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 69942be05..cf74b43b4 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -46,7 +46,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Support longpaths on Git checkout From 0ccf143bd914b692c06988fb64b26335531960b4 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:35:24 -0400 Subject: [PATCH 13/20] m --- .github/workflows/dafny_interop_test_vector_java.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 3b7d04690..d6cb92d7a 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -58,7 +58,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local @@ -72,10 +72,12 @@ jobs: echo "Attempt $i: DynamoDB Local not ready yet..." sleep 2 done - # Verify it's actually working + # Verify it's actually working with dummy credentials curl -X POST http://localhost:8000 \ -H "Content-Type: application/x-amz-json-1.0" \ -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -H "Authorization: AWS4-HMAC-SHA256 Credential=dummy/20230101/us-east-1/dynamodb/aws4_request, SignedHeaders=host;x-amz-date, Signature=dummy" \ + -H "X-Amz-Date: 20230101T000000Z" \ -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 From fd4f6e4bf8b0137ad48a2a996721addb4c5aa2ed Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 09:17:01 -0400 Subject: [PATCH 14/20] m --- .github/workflows/ci_test_go.yml | 16 +++--- .../ci_test_latest_released_mpl_java.yml | 10 +--- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 16 +++--- .../dafny_interop_test_vector_java.yml | 52 +++---------------- .../dafny_interop_test_vector_net.yml | 34 ++---------- .github/workflows/library_rust_tests.yml | 16 +++--- 7 files changed, 40 insertions(+), 106 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 935058452..0645bd5c2 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -36,6 +36,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v5 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -48,7 +55,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -62,13 +69,6 @@ jobs: run: | git config --global core.longpaths true - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 with: submodules: recursive diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 47d6a8ce4..79b193440 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -47,14 +47,8 @@ jobs: with: submodules: recursive - - name: Setup Java 8 - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: 8 - - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v5 + uses: actions/setup-java@v4 with: distribution: "corretto" java-version: ${{ matrix.java-version }} @@ -119,7 +113,7 @@ jobs: working-directory: ./TestVectors run: | # Spin up ddb local - docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -noAuth -inMemory -cors * + docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -inMemory -cors * # Run transpile by itself so we don't locally build the MPL. make transpile_implementation_java make transpile_test_java diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 8f64ae2ed..533638c41 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -60,7 +60,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -cors '*' > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 3a24080df..6791e923c 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,6 +35,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v5 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-DotNet-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -47,7 +54,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -57,13 +64,6 @@ jobs: sleep 1 done - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-DotNet-Tests - - uses: actions/checkout@v3 with: submodules: recursive diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index d6cb92d7a..1d29bf32f 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17, 19] + java-version: [8, 11, 16, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -37,6 +37,12 @@ jobs: id-token: write contents: read steps: + - name: Setup DynamoDB Local + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" + - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 with: @@ -44,42 +50,6 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: | - java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & - echo $! > dynamodb-local.pid - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - for i in {1..30}; do - if curl -s -f http://localhost:8000 > /dev/null 2>&1; then - echo "DynamoDB Local is ready" - break - fi - echo "Attempt $i: DynamoDB Local not ready yet..." - sleep 2 - done - # Verify it's actually working with dummy credentials - curl -X POST http://localhost:8000 \ - -H "Content-Type: application/x-amz-json-1.0" \ - -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ - -H "Authorization: AWS4-HMAC-SHA256 Credential=dummy/20230101/us-east-1/dynamodb/aws4_request, SignedHeaders=host;x-amz-date, Signature=dummy" \ - -H "X-Amz-Date: 20230101T000000Z" \ - -d '{}' || (cat dynamodb-local.log && exit 1) - - uses: actions/checkout@v3 with: submodules: recursive @@ -98,14 +68,8 @@ jobs: git submodule update --init --recursive git rev-parse HEAD - - name: Setup Java 8 - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: 8 - - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v5 + uses: actions/setup-java@v4 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 5a5117b65..bc8500c3d 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -33,28 +33,11 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - name: Install Java - uses: actions/setup-java@v5 + - name: Setup DynamoDB Local + uses: rrainn/dynamodb-action@v4.0.0 with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & - # The & runs the Java process in the background. - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - + port: 8000 + cors: "*" - name: Support longpaths on Git checkout run: | git config --global core.longpaths true @@ -64,17 +47,10 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@v4 with: dotnet-version: ${{ matrix.dotnet-version }} - - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' - run: | - brew install openssl@3 - echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV - echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index cf74b43b4..620b07299 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,6 +34,13 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Rust-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -46,7 +53,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Support longpaths on Git checkout @@ -59,13 +66,6 @@ jobs: git submodule update --init --recursive submodules/smithy-dafny git submodule update --init --recursive submodules/MaterialProviders - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Rust-Tests - - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." From 7b8ff102b63e97764e783d245423030bf31f7c5d Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 10:05:55 -0400 Subject: [PATCH 15/20] m --- .github/workflows/ci_test_vector_java.yml | 43 ++++++----------------- 1 file changed, 10 insertions(+), 33 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 533638c41..ae9c4e2de 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -32,7 +32,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-14, + macos-15-intel, ] runs-on: ${{ matrix.os }} permissions: @@ -46,39 +46,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Start DynamoDB Local - run: | - java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -cors '*' > dynamodb-local.log 2>&1 & - echo $! > dynamodb-local.pid - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - for i in {1..30}; do - if curl -s -f http://localhost:8000 > /dev/null 2>&1; then - echo "DynamoDB Local is ready" - break - fi - echo "Attempt $i: DynamoDB Local not ready yet..." - sleep 2 - done - # Verify it's actually working - curl -X POST http://localhost:8000 \ - -H "Content-Type: application/x-amz-json-1.0" \ - -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ - -d '{}' || (cat dynamodb-local.log && exit 1) + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - uses: actions/checkout@v3 with: From b1a7740e25056858850b5098b7f34bd71aa0b4f3 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:07:38 -0400 Subject: [PATCH 16/20] m --- .github/workflows/ci_test_go.yml | 31 ++++++------------- .../ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 31 ++++++------------- .../dafny_interop_test_vector_java.yml | 2 +- .../dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 22 ++++++------- 6 files changed, 32 insertions(+), 58 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 0645bd5c2..784e90573 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption, TestVectors] - os: [ubuntu-22.04, macos-14] + os: [ubuntu-22.04, macos-15-intel] go-version: ["1.23", "1.24", "1.25"] runs-on: ${{ matrix.os }} permissions: @@ -43,27 +43,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - name: Support longpaths run: | diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 79b193440..99edd54b5 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -48,7 +48,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 6791e923c..d35a99d4b 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -28,7 +28,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-14, + macos-15-intel, ] runs-on: ${{ matrix.os }} permissions: @@ -42,27 +42,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-DotNet-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - uses: actions/checkout@v3 with: diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 1d29bf32f..9930d5234 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -69,7 +69,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index bc8500c3d..e58d1eb56 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 620b07299..2d62e0554 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -41,20 +41,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Rust-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - name: Support longpaths on Git checkout run: | From b9fad682831efc958ec77f3fbea3c1f806497412 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:27:47 -0400 Subject: [PATCH 17/20] m --- .github/workflows/check-files.yml | 2 +- .github/workflows/check_only_key_word.yml | 2 +- .github/workflows/ci_codegen.yml | 2 +- .github/workflows/ci_duvet.yml | 2 +- .github/workflows/ci_examples_java.yml | 4 ++-- .github/workflows/ci_examples_net.yml | 4 ++-- .github/workflows/ci_static_analysis.yml | 2 +- .github/workflows/ci_test_go.yml | 4 ++-- .github/workflows/ci_test_java.yml | 4 ++-- .../workflows/ci_test_latest_released_mpl_java.yml | 4 ++-- .github/workflows/ci_test_net.yml | 11 +++++++++-- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/ci_todos.yml | 2 +- .github/workflows/dafny_interop_examples_java.yml | 4 ++-- .github/workflows/dafny_interop_examples_net.yml | 4 ++-- .github/workflows/dafny_interop_java.yml | 4 ++-- .github/workflows/dafny_interop_test_net.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_java.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_net.yml | 4 ++-- .github/workflows/dafny_verify_version.yml | 2 +- .github/workflows/dafny_version.yml | 2 +- .github/workflows/go-release.yml | 4 ++-- .github/workflows/library_dafny_verification.yml | 2 +- .github/workflows/library_format.yml | 2 +- .github/workflows/library_rust_tests.yml | 4 ++-- .github/workflows/mpl_dependency_java_version.yml | 2 +- .github/workflows/mpl_head_version.yml | 2 +- .github/workflows/nightly.yml | 2 +- .github/workflows/sem_ver.yml | 6 +++--- .github/workflows/semantic_release.yml | 4 ++-- .github/workflows/smithy-diff.yml | 2 +- .github/workflows/test_vector_verification.yml | 2 +- 33 files changed, 58 insertions(+), 51 deletions(-) diff --git a/.github/workflows/check-files.yml b/.github/workflows/check-files.yml index 59f613d0c..c8dfdb37f 100644 --- a/.github/workflows/check-files.yml +++ b/.github/workflows/check-files.yml @@ -16,7 +16,7 @@ jobs: # to add more allowlisted approvers just modify this env variable maintainers: seebees, texastony, ShubhamChaturvedi7, lucasmcdonald3, josecorella, imabhichow, rishav-karanjit, antonf-amzn, kessplas, ajewellamz, RitvikKapila steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/check_only_key_word.yml b/.github/workflows/check_only_key_word.yml index 4a8a5c9f3..66d03fcc5 100644 --- a/.github/workflows/check_only_key_word.yml +++ b/.github/workflows/check_only_key_word.yml @@ -13,7 +13,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 7aca0fffd..ece6e8709 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -31,7 +31,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive - run: git submodule update --init --recursive submodules/smithy-dafny diff --git a/.github/workflows/ci_duvet.yml b/.github/workflows/ci_duvet.yml index 7bceb87b5..9b8273df7 100644 --- a/.github/workflows/ci_duvet.yml +++ b/.github/workflows/ci_duvet.yml @@ -13,7 +13,7 @@ jobs: duvet: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Install duvet shell: bash diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 9f516bd0a..c5efc2f03 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 5585a760d..6477b5d0a 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -36,7 +36,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -83,7 +83,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml index fb0ec3779..b587fcd7e 100644 --- a/.github/workflows/ci_static_analysis.yml +++ b/.github/workflows/ci_static_analysis.yml @@ -11,6 +11,6 @@ jobs: not-grep: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v5 - name: not-grep uses: mattsb42-meta/not-grep@1.0.0 diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 784e90573..e9dc77a4a 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -58,7 +58,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -95,7 +95,7 @@ jobs: with: go-version: ${{ matrix.go-version }} - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Init Submodules shell: bash run: | diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index f620494c1..e48506bdc 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -37,13 +37,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 99edd54b5..0bf6aa261 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -37,13 +37,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index ef19c2bd6..1b0b421cd 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -37,7 +37,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -53,6 +53,13 @@ jobs: echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -84,7 +91,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index ae9c4e2de..02b66f491 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -40,7 +40,7 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 @@ -57,7 +57,7 @@ jobs: port: 8000 cors: "*" - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index d35a99d4b..19706bf6d 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -53,7 +53,7 @@ jobs: port: 8000 cors: "*" - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_todos.yml b/.github/workflows/ci_todos.yml index 736feb599..939542568 100644 --- a/.github/workflows/ci_todos.yml +++ b/.github/workflows/ci_todos.yml @@ -11,7 +11,7 @@ jobs: findTodos: runs-on: macos-14 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Check TODOs in code shell: bash diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index acfeefce7..11b6c9321 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index e4caba31f..fbf711beb 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -36,7 +36,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -71,7 +71,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 9d71d2a46..b01de2d2d 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 225bf2beb..2c37de55d 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -36,7 +36,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -71,7 +71,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 9930d5234..dd74c0610 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -44,13 +44,13 @@ jobs: cors: "*" - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index e58d1eb56..44fe1ec07 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -41,7 +41,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -69,7 +69,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_verify_version.yml b/.github/workflows/dafny_verify_version.yml index ec9ce95b9..2ba81e5cf 100644 --- a/.github/workflows/dafny_verify_version.yml +++ b/.github/workflows/dafny_verify_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.dafnyVerifyVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/dafny_version.yml b/.github/workflows/dafny_version.yml index c20e01a43..c4e148281 100644 --- a/.github/workflows/dafny_version.yml +++ b/.github/workflows/dafny_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.dafnyVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml index 9b87b3497..df7a851b4 100644 --- a/.github/workflows/go-release.yml +++ b/.github/workflows/go-release.yml @@ -31,14 +31,14 @@ jobs: # KMS and MPL tests need to use credentials which can call KMS - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: GoRelease-DBESDK-Tests - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index c55ad63a0..97b435137 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -48,7 +48,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/library_format.yml b/.github/workflows/library_format.yml index f6dd42ee9..69396630a 100644 --- a/.github/workflows/library_format.yml +++ b/.github/workflows/library_format.yml @@ -32,7 +32,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 2d62e0554..81175cafc 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -35,7 +35,7 @@ jobs: RUST_MIN_STACK: 838860800 steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 @@ -55,7 +55,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Init Submodules shell: bash run: | diff --git a/.github/workflows/mpl_dependency_java_version.yml b/.github/workflows/mpl_dependency_java_version.yml index 640b82e33..607f620d7 100644 --- a/.github/workflows/mpl_dependency_java_version.yml +++ b/.github/workflows/mpl_dependency_java_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.mplDependencyJavaVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/mpl_head_version.yml b/.github/workflows/mpl_head_version.yml index 0d32688fb..2e6a953e3 100644 --- a/.github/workflows/mpl_head_version.yml +++ b/.github/workflows/mpl_head_version.yml @@ -22,7 +22,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.mplVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index eb4bc6e20..20685555d 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -81,7 +81,7 @@ jobs: steps: # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 2c2ab4e0f..3f9c6fcee 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -14,13 +14,13 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 @@ -48,6 +48,6 @@ jobs: # Test to see if we can setup semantic release - name: Test Semantic Release Installation - uses: actions/checkout@v4 + uses: actions/checkout@v5 - run: | make setup_semantic_release diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index 2c958781f..52f0680de 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -23,13 +23,13 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 # We only pull in the submodules we need to build the library - run: git submodule update --init libraries # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 diff --git a/.github/workflows/smithy-diff.yml b/.github/workflows/smithy-diff.yml index df756f6a2..c1f44c73e 100644 --- a/.github/workflows/smithy-diff.yml +++ b/.github/workflows/smithy-diff.yml @@ -13,7 +13,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index c99f745eb..7c41aa82d 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -38,7 +38,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive From fc536fb95aaacde698d48d4cbb3e7d9328720948 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:59:23 -0400 Subject: [PATCH 18/20] m --- .github/workflows/ci_examples_net.yml | 2 +- .github/workflows/ci_test_net.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/dafny_interop_examples_net.yml | 2 +- .github/workflows/dafny_interop_test_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 6477b5d0a..07a0884ca 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -46,7 +46,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 1b0b421cd..3dcfdd6cc 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -47,14 +47,14 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 19706bf6d..d0597b399 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -89,7 +89,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-15-intel' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index fbf711beb..c74945edc 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -47,7 +47,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 2c37de55d..79d459730 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -47,7 +47,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 81175cafc..9a0691e31 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -26,7 +26,7 @@ jobs: matrix: library: [DynamoDbEncryption, TestVectors] # removed windows-latest because somehow it can't build aws-lc in CI - os: [ubuntu-22.04, macos-14] + os: [ubuntu-22.04, macos-15-intel] runs-on: ${{ matrix.os }} permissions: id-token: write From 4b6792984b55229a2f7e025e7e3a077d0f59868b Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 14:51:10 -0400 Subject: [PATCH 19/20] m --- .github/workflows/library_rust_tests.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 9a0691e31..fa5bb51d4 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -62,13 +62,6 @@ jobs: git submodule update --init --recursive submodules/smithy-dafny git submodule update --init --recursive submodules/MaterialProviders - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - - name: Setup Rust Toolchain for GitHub CI uses: actions-rust-lang/setup-rust-toolchain@v1 with: From dcd08c412b737b30361dad4bb4303011d481bbec Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 15:25:50 -0400 Subject: [PATCH 20/20] m --- .github/workflows/ci_test_net.yml | 7 ------- TestVectors/dafny/DDBEncryption/src/TestVectors.dfy | 7 +------ 2 files changed, 1 insertion(+), 13 deletions(-) diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 3dcfdd6cc..91485ed9f 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -53,13 +53,6 @@ jobs: echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' - run: | - brew install openssl@3 - echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV - echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy index bcfb4e79d..86f42525c 100644 --- a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy +++ b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy @@ -369,12 +369,7 @@ module {:options "-functionSyntax:4"} DdbEncryptionTestVectors { modifies client.Modifies { DeleteTable(client); - // var _ :- expect client.CreateTable(schemaOnEncrypt); - var xxx := client.CreateTable(schemaOnEncrypt); - if xxx.Failure? { - print "***\n", xxx, "\n***\n"; - expect false; - } + var _ :- expect client.CreateTable(schemaOnEncrypt); for i := 0 to |records| { var input := DDB.PutItemInput( TableName := TableName,