kn: merge from main

.github/workflows/codebuild-ci.yml

@@ -142,56 +142,9 @@ jobs:
           ./gradlew collectDelegatedArtifactSizeMetrics -PpullRequest=$PULL_REQUEST
       - name: Analyze Artifact Size Metrics
         run: ./gradlew analyzeArtifactSizeMetrics
-      - name: Show Results
-        uses: actions/github-script@v7
-        with:
-          script: |
-            const getComments = 
-              `query { 
-                repository(owner:"${context.repo.owner}", name:"${context.repo.repo}"){
-                  pullRequest(number: ${context.issue.number ?? process.env.SDK_PR}) {
-                    id
-                    comments(last:100) {
-                      nodes {
-                        id
-                        body
-                        author {
-                          login
-                        }
-                        isMinimized
-                      }
-                    }
-                  }
-                } 
-              }`
-
-            const response = await github.graphql(getComments)
-            const comments = response.repository.pullRequest.comments.nodes
-
-            const mutations = comments
-              .filter(comment => comment.author.login == 'github-actions' && !comment.isMinimized && comment.body.startsWith('Affected Artifacts'))
-              .map(comment =>
-                github.graphql(
-                  `mutation {
-                    minimizeComment(input:{subjectId:"${comment.id}", classifier:OUTDATED}){
-                      clientMutationId
-                    }
-                  }`
-                )
-              )
-            await Promise.all(mutations)
 
-            const fs = require('node:fs')
-            const comment = fs.readFileSync('build/reports/metrics/artifact-analysis.md', 'utf8')
-
-            const writeComment = 
-              `mutation {
-                addComment(input:{body:"""${comment}""", subjectId:"${response.repository.pullRequest.id}"}){
-                  clientMutationId
-                }
-              }`
-
-            await github.graphql(writeComment)
+      - name: Show Results
+        uses: awslabs/aws-kotlin-repo-tools/.github/actions/artifact-size-metrics/show-results@main
 
       - name: Evaluate Result
         if: ${{ !contains(github.event.pull_request.labels.*.name, 'acknowledge-artifact-size-increase') }}

.github/workflows/merge-main.yml

@@ -1,11 +1,11 @@
 name: Merge main
 on:
-  schedule:
-    - cron: "0 7 * * 1-5"  # At 07:00 UTC (00:00 PST, 03:00 EST), Monday through Friday
+  push:
+    branches: [ main ]
   workflow_dispatch:
 
 jobs:
-  test:
+  merge:
     runs-on: ubuntu-latest
     steps:
       - name: Merge main

.github/workflows/sync-mirror.yml

@@ -0,0 +1,20 @@
+name: Sync Mirror
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+jobs:
+  git-sync:
+    # Only sync when pushing to source repo
+    if: github.repository == 'awslabs/aws-sdk-kotlin'
+    runs-on: ubuntu-latest
+    steps:
+      - name: git-sync
+        uses: wei/git-sync@v3
+        with:
+          source_repo: "https://aws-sdk-kotlin-ci:${{ secrets.CI_USER_PAT }}@github.com/awslabs/aws-sdk-kotlin.git"
+          source_branch: "main"
+          destination_repo: "https://aws-sdk-kotlin-ci:${{ secrets.CI_USER_PAT }}@github.com/awslabs/private-aws-sdk-kotlin-staging.git"
+          destination_branch: "main"

.github/workflows/update-canary.yml

@@ -0,0 +1,76 @@
+# After every GitHub release, verify that the Maven artifacts are available, then kick off
+# a canary deployment with the latest version of the SDK.
+name: Update Canary
+on:
+  release:
+    types: [ published ]
+
+jobs:
+  update-canary:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.CI_AWS_ROLE_ARN }}
+          aws-region: us-west-2
+
+
+      - name: Verify artifact is available on Maven
+        shell: bash
+        # Maven can take up to 2 hours after the release has succeeded to publish our artifacts
+        # FIXME Track execution duration over time and see if this can be shortened
+        timeout-minutes: 120
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+          VERSION="${TAG#v}"
+          MAVEN_URL="https://repo.maven.apache.org/maven2/aws/sdk/kotlin/s3/${VERSION}/"
+
+          echo "Checking for an artifact at $MAVEN_URL"
+
+          while true; do
+            STATUS=$(curl -i -s -o /dev/null -w "%{http_code}" "$MAVEN_URL")
+            echo "Status: $STATUS"
+
+            if [[ "$STATUS" == "200" ]]; then
+              echo "Artifact is available at $MAVEN_URL"
+              exit 0
+            fi
+
+            sleep 30
+          done
+
+      - name: Update canary
+        shell: bash
+        timeout-minutes: 15
+        run: |
+          set -euo pipefail
+
+          TAG="${{ github.event.release.tag_name }}"
+          EXECUTION_NAME="update-canary-${TAG}"
+          STATE_MACHINE_ARN="arn:aws:states:us-west-2:${{ secrets.CI_USER }}:stateMachine:DeployLatestSdkVersion"
+
+          echo "Starting step function: $EXECUTION_NAME"
+            EXECUTION_ARN=$(aws stepfunctions start-execution \
+            --state-machine-arn "$STATE_MACHINE_ARN" \
+            --name "$EXECUTION_NAME" \
+            --input '{}' \
+            --query 'executionArn' \
+            --output text)
+
+          echo "Waiting for step function to complete..."
+
+          while true; do
+            STATUS=$(aws stepfunctions describe-execution --execution-arn "$EXECUTION_ARN" --query 'status' --output text)
+            echo "Status: $STATUS"
+
+            if [[ "$STATUS" == "SUCCEEDED" ]]; then
+              echo "Step Function completed successfully"
+              exit 0
+            elif [[ "$STATUS" == "FAILED" || "$STATUS" == "TIMED_OUT" || "$STATUS" == "ABORTED" ]]; then
+              echo "Step Function failed with status: $STATUS"
+              exit 1
+            fi
+
+            sleep 10
+          done