chore(ci): prepare CI actions for v1 releases (#1621)

* chore: prepare v1 actions

* fix: remove post_release job

Author: rubenfonseca

.github/workflows/codeql-analysis.yml

@@ -2,7 +2,7 @@ name: "CodeQL"
 
 on:
   push:
-    branches: [develop, v2]
+    branches: [v1]
 
 jobs:
   analyze:

.github/workflows/on_push_docs.yml

@@ -21,10 +21,11 @@ name: Publish to PyPi
 # See MAINTAINERS.md "Releasing a new version" for release mechanisms
 
 env:
-  BRANCH: develop
+  BRANCH: v1
 
 on:
   release:
+    # We can't filter by tag here, so we filter later on the first job
     types: [published]
   workflow_dispatch:
     inputs:
@@ -45,6 +46,7 @@ on:
 
 jobs:
   release:
+    if: ${{ startsWith(github.ref, 'refs/tags/v1') }}
     environment: release
     runs-on: ubuntu-latest
     permissions:
@@ -121,22 +123,8 @@ jobs:
       alias: latest
       detached_mode: true
 
-  post_release:
+  publish_layer:
     needs: release
-    permissions:
-      contents: read
-      issues: write
-      discussions: write
-      pull-requests: write
-    runs-on: ubuntu-latest
-    env:
-      RELEASE_VERSION: ${{ needs.release.outputs.RELEASE_VERSION }}
-    steps:
-      - uses: actions/checkout@v3
-      - name: Close issues related to this release
-        uses: actions/github-script@v6
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          script: |
-            const post_release = require('.github/scripts/post_release.js')
-            await post_release({github, context, core})
+    uses: ./.github/workflows/publish_layer.yml
+    with:
+      latest_published_version: ${{ needs.release.outputs.RELEASE_VERSION }}

.github/workflows/on_release_notes.yml

@@ -11,15 +11,16 @@ on:
         description: "Latest PyPi published version to rebuild latest docs for, e.g. v1.22.0"
         default: "v1.22.0"
         required: true
-  workflow_run:
-    workflows: ["Publish to PyPi"]
-    types:
-      - completed
+  workflow_call:
+    inputs:
+      latest_published_version:
+        type: string
+        description: "Latest PyPi published version to rebuild latest docs for, e.g. v1.22.0"
+        required: true
 
 jobs:
   build-layer:
     runs-on: ubuntu-latest
-    if: ${{ (github.event.workflow_run.conclusion == 'success') || (github.event_name == 'workflow_dispatch') }}
     defaults:
       run:
         working-directory: ./layer
@@ -50,13 +51,13 @@ jobs:
           RELEASE_INPUT=${{ inputs.latest_published_version }}
           LATEST_TAG=$(git describe --tag --abbrev=0)
           RELEASE_TAG_VERSION=${RELEASE_INPUT:-$LATEST_TAG}
-          echo "RELEASE_TAG_VERSION=${RELEASE_TAG_VERSION:1}" >> $GITHUB_ENV
+          echo "RELEASE_TAG_VERSION=${RELEASE_TAG_VERSION:1}" >> "$GITHUB_ENV"
       - name: install cdk and deps
         run: |
           npm install -g [email protected]
           cdk --version
       - name: CDK build
-        run: cdk synth --context version=$RELEASE_TAG_VERSION -o cdk.out
+        run: cdk synth --context version="$RELEASE_TAG_VERSION" -o cdk.out
       - name: zip output
         run: zip -r cdk.out.zip cdk.out
       - name: Archive CDK artifacts
@@ -66,8 +67,7 @@ jobs:
           path: layer/cdk.out.zip
 
   deploy-beta:
-    needs:
-      - build-layer
+    needs: build-layer
     uses: ./.github/workflows/reusable_deploy_layer_stack.yml
     secrets: inherit
     with:
@@ -76,8 +76,7 @@ jobs:
       environment: "layer-beta"
 
   deploy-prod:
-    needs:
-      - deploy-beta
+    needs: deploy-beta
     uses: ./.github/workflows/reusable_deploy_layer_stack.yml
     secrets: inherit
     with:

.github/workflows/publish_layer.yml

@@ -9,8 +9,7 @@ on:
       - "poetry.lock"
       - "mypy.ini"
     branches:
-      - develop
-      - v2
+      - v1
   push:
     paths:
       - "aws_lambda_powertools/**"
@@ -19,8 +18,7 @@ on:
       - "poetry.lock"
       - "mypy.ini"
     branches:
-      - develop
-      - v2
+      - v1
 
 jobs:
   build:

.github/workflows/publish_v2_layer.yml

@@ -7,7 +7,7 @@ permissions:
   contents: write
 
 env:
-  BRANCH: develop
+  BRANCH: v1
 
 jobs:
   publish_changelog:

.github/workflows/python_build.yml

@@ -1,7 +1,7 @@
 name: Reusable publish documentation
 
 env:
-  BRANCH: develop
+  BRANCH: v1
   ORIGIN: awslabs/aws-lambda-powertools-python
 
 on:

.github/workflows/release-drafter.yml

@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
 
   push:
-    branches: [develop, v2]
+    branches: [v1]
     paths:
       - "aws_lambda_powertools/**"
       - "tests/e2e/**"

.github/workflows/reusable_deploy_v2_sar.yml

@@ -40,7 +40,7 @@ repos:
       - id: cfn-python-lint
         files: examples/.*\.(yaml|yml)$
   - repo: https://github.com/rhysd/actionlint
-    rev: v1.6.16
+    rev: v1.6.21
     hooks:
       - id: actionlint-docker
         args: [-pyflakes=]