release.yml

# ~~ Generated by projen. To modify, edit .projenrc.ts and run "yarn projen".

name: release
on:
  workflow_dispatch:
    inputs:
      dry_run:
        description: Dry run (skip actual publishing)
        required: false
        type: boolean
      package:
        description: Select specific package to release
        required: false
        type: choice
        options:
          - "*all packages*"
          - "@aws-cdk/cloud-assembly-schema"
          - "@aws-cdk/cloudformation-diff"
          - "@aws-cdk/cloud-assembly-api"
          - "@aws-cdk/cli-plugin-contract"
          - "@aws-cdk/cdk-assets-lib"
          - cdk-assets
          - "@aws-cdk/toolkit-lib"
          - aws-cdk
          - cdk
          - "@aws-cdk/integ-runner"
          - "@aws-cdk-testing/cli-integ"
        default: "*all packages*"
jobs:
  release:
    runs-on: aws-cdk_ubuntu-latest_16-core
    permissions:
      contents: write
    outputs:
      latest_commit: ${{ steps.git_remote.outputs.latest_commit }}
      publish-aws-cdk-cloud-assembly-schema: ${{ steps.check-publish-aws-cdk-cloud-assembly-schema.outputs.publish }}
      publish-aws-cdk-cloudformation-diff: ${{ steps.check-publish-aws-cdk-cloudformation-diff.outputs.publish }}
      publish-aws-cdk-cloud-assembly-api: ${{ steps.check-publish-aws-cdk-cloud-assembly-api.outputs.publish }}
      publish-aws-cdk-cli-plugin-contract: ${{ steps.check-publish-aws-cdk-cli-plugin-contract.outputs.publish }}
      publish-aws-cdk-cdk-assets-lib: ${{ steps.check-publish-aws-cdk-cdk-assets-lib.outputs.publish }}
      publish-cdk-assets: ${{ steps.check-publish-cdk-assets.outputs.publish }}
      publish-aws-cdk-toolkit-lib: ${{ steps.check-publish-aws-cdk-toolkit-lib.outputs.publish }}
      publish-aws-cdk: ${{ steps.check-publish-aws-cdk.outputs.publish }}
      publish-cdk: ${{ steps.check-publish-cdk.outputs.publish }}
      publish-aws-cdk-integ-runner: ${{ steps.check-publish-aws-cdk-integ-runner.outputs.publish }}
      publish-aws-cdk-testing-cli-integ: ${{ steps.check-publish-aws-cdk-testing-cli-integ.outputs.publish }}
    env:
      CI: "true"
    steps:
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          fetch-depth: 0
      - name: Set git identity
        id: set_git_identity
        run: |-
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Setup Node.js
        id: setup_node_js
        uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Install dependencies
        id: install_dependencies
        run: yarn install --immutable
      - name: release
        id: release
        run: yarn projen release
      - id: check-publish-aws-cdk-cloud-assembly-schema
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/cloud-assembly-schema
      - id: check-publish-aws-cdk-cloudformation-diff
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/cloudformation-diff
      - id: check-publish-aws-cdk-cloud-assembly-api
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/cloud-assembly-api
      - id: check-publish-aws-cdk-cli-plugin-contract
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/cli-plugin-contract
      - id: check-publish-aws-cdk-cdk-assets-lib
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/cdk-assets-lib
      - id: check-publish-cdk-assets
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/cdk-assets
      - id: check-publish-aws-cdk-toolkit-lib
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/toolkit-lib
      - id: check-publish-aws-cdk
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/aws-cdk
      - id: check-publish-cdk
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/cdk
      - id: check-publish-aws-cdk-integ-runner
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk/integ-runner
      - id: check-publish-aws-cdk-testing-cli-integ
        run: (git ls-remote -q --exit-code --tags origin $(cat dist/releasetag.txt) && (echo "publish=false" >> $GITHUB_OUTPUT)) || echo "publish=true" >> $GITHUB_OUTPUT
        working-directory: packages/@aws-cdk-testing/cli-integ
      - name: Output the sha value that downstream checks expect
        id: git_remote
        run: echo "latest_commit=${{ github.sha }}" >> $GITHUB_OUTPUT
      - name: "@aws-cdk/cloud-assembly-schema: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/cloud-assembly-schema
      - name: "@aws-cdk/cloud-assembly-schema: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-cloud-assembly-schema_build-artifact
          path: packages/@aws-cdk/cloud-assembly-schema/dist
          overwrite: true
      - name: "@aws-cdk/cloudformation-diff: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/cloudformation-diff
      - name: "@aws-cdk/cloudformation-diff: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-cloudformation-diff_build-artifact
          path: packages/@aws-cdk/cloudformation-diff/dist
          overwrite: true
      - name: "@aws-cdk/cloud-assembly-api: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/cloud-assembly-api
      - name: "@aws-cdk/cloud-assembly-api: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-cloud-assembly-api_build-artifact
          path: packages/@aws-cdk/cloud-assembly-api/dist
          overwrite: true
      - name: "@aws-cdk/cli-plugin-contract: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/cli-plugin-contract
      - name: "@aws-cdk/cli-plugin-contract: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-cli-plugin-contract_build-artifact
          path: packages/@aws-cdk/cli-plugin-contract/dist
          overwrite: true
      - name: "@aws-cdk/cdk-assets-lib: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/cdk-assets-lib
      - name: "@aws-cdk/cdk-assets-lib: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-cdk-assets-lib_build-artifact
          path: packages/@aws-cdk/cdk-assets-lib/dist
          overwrite: true
      - name: "cdk-assets: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/cdk-assets
      - name: "cdk-assets: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: cdk-assets_build-artifact
          path: packages/cdk-assets/dist
          overwrite: true
      - name: "@aws-cdk/toolkit-lib: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/toolkit-lib
      - name: "@aws-cdk/toolkit-lib: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-toolkit-lib_build-artifact
          path: packages/@aws-cdk/toolkit-lib/dist
          overwrite: true
      - name: "aws-cdk: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/aws-cdk
      - name: "aws-cdk: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk_build-artifact
          path: packages/aws-cdk/dist
          overwrite: true
      - name: "cdk: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/cdk
      - name: "cdk: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: cdk_build-artifact
          path: packages/cdk/dist
          overwrite: true
      - name: "@aws-cdk/integ-runner: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk/integ-runner
      - name: "@aws-cdk/integ-runner: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-integ-runner_build-artifact
          path: packages/@aws-cdk/integ-runner/dist
          overwrite: true
      - name: "@aws-cdk-testing/cli-integ: Backup artifact permissions"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        run: cd dist && getfacl -R . > permissions-backup.acl
        continue-on-error: true
        working-directory: packages/@aws-cdk-testing/cli-integ
      - name: "@aws-cdk-testing/cli-integ: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: aws-cdk-testing-cli-integ_build-artifact
          path: packages/@aws-cdk-testing/cli-integ/dist
          overwrite: true
      - name: "standalone: Upload artifact"
        if: ${{ steps.git_remote.outputs.latest_commit == github.sha }}
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
        with:
          name: standalone_build-artifact
          path: dist/standalone
          overwrite: true
  release_gate:
    name: Publish gate
    needs: release
    runs-on: ubuntu-latest
    permissions: {}
    outputs:
      packages_to_publish: ${{ steps.collect.outputs.packages_to_publish }}
    if: ${{ needs.release.outputs.latest_commit == github.sha }}
    steps:
      - name: "@aws-cdk/cloud-assembly-schema: Check publish"
        id: aws-cdk_cloud-assembly-schema_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-cloud-assembly-schema }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/cloud-assembly-schema","@aws-cdk/cloud-assembly-api","@aws-cdk/cdk-assets-lib","cdk-assets","@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloud-assembly-schema: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloud-assembly-schema: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/cloud-assembly-schema"
            echo "@aws-cdk/cloud-assembly-schema" >> publish.txt
          fi
      - name: "@aws-cdk/cloudformation-diff: Check publish"
        id: aws-cdk_cloudformation-diff_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-cloudformation-diff }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/cloudformation-diff","@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloudformation-diff: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloudformation-diff: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/cloudformation-diff"
            echo "@aws-cdk/cloudformation-diff" >> publish.txt
          fi
      - name: "@aws-cdk/cloud-assembly-api: Check publish"
        id: aws-cdk_cloud-assembly-api_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-cloud-assembly-api }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/cloud-assembly-api","@aws-cdk/cdk-assets-lib","cdk-assets","@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloud-assembly-api: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cloud-assembly-api: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/cloud-assembly-api"
            echo "@aws-cdk/cloud-assembly-api" >> publish.txt
          fi
      - name: "@aws-cdk/cli-plugin-contract: Check publish"
        id: aws-cdk_cli-plugin-contract_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-cli-plugin-contract }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/cli-plugin-contract","@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cli-plugin-contract: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cli-plugin-contract: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/cli-plugin-contract"
            echo "@aws-cdk/cli-plugin-contract" >> publish.txt
          fi
      - name: "@aws-cdk/cdk-assets-lib: Check publish"
        id: aws-cdk_cdk-assets-lib_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-cdk-assets-lib }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/cdk-assets-lib","cdk-assets","@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cdk-assets-lib: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/cdk-assets-lib: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/cdk-assets-lib"
            echo "@aws-cdk/cdk-assets-lib" >> publish.txt
          fi
      - name: "cdk-assets: Check publish"
        id: cdk-assets_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-cdk-assets }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["cdk-assets"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping cdk-assets: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping cdk-assets: not selected for release"
          else
            echo "✅ Will publish cdk-assets"
            echo "cdk-assets" >> publish.txt
          fi
      - name: "@aws-cdk/toolkit-lib: Check publish"
        id: aws-cdk_toolkit-lib_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-toolkit-lib }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/toolkit-lib","aws-cdk","cdk","@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/toolkit-lib: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/toolkit-lib: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/toolkit-lib"
            echo "@aws-cdk/toolkit-lib" >> publish.txt
          fi
      - name: "aws-cdk: Check publish"
        id: aws-cdk_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["aws-cdk","cdk"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping aws-cdk: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping aws-cdk: not selected for release"
          else
            echo "✅ Will publish aws-cdk"
            echo "aws-cdk" >> publish.txt
          fi
      - name: "cdk: Check publish"
        id: cdk_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-cdk }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["cdk"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping cdk: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping cdk: not selected for release"
          else
            echo "✅ Will publish cdk"
            echo "cdk" >> publish.txt
          fi
      - name: "@aws-cdk/integ-runner: Check publish"
        id: aws-cdk_integ-runner_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-integ-runner }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk/integ-runner"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/integ-runner: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk/integ-runner: not selected for release"
          else
            echo "✅ Will publish @aws-cdk/integ-runner"
            echo "@aws-cdk/integ-runner" >> publish.txt
          fi
      - name: "@aws-cdk-testing/cli-integ: Check publish"
        id: aws-cdk-testing_cli-integ_check_publish
        run: |-
          should_publish="${{ needs.release.outputs.publish-aws-cdk-testing-cli-integ }}"
          package_filter="${{ (!github.event.inputs.package || github.event.inputs.package == '*all packages*' || contains(fromJSON('["@aws-cdk-testing/cli-integ"]'), github.event.inputs.package)) }}"
          if [[ "$should_publish" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk-testing/cli-integ: release tag already exists"
          elif [[ "$package_filter" != "true" ]]; then
            echo "⏭️ Skipping @aws-cdk-testing/cli-integ: not selected for release"
          else
            echo "✅ Will publish @aws-cdk-testing/cli-integ"
            echo "@aws-cdk-testing/cli-integ" >> publish.txt
          fi
      - name: Collect packages to publish
        id: collect
        run: |-
          if [ -f publish.txt ]; then
            packages=$(jq -Rc '.' publish.txt | jq -sc '.')
          else
            packages='[]'
          fi
          echo "packages_to_publish=$packages" >> $GITHUB_OUTPUT
          echo "Publishing: $packages"
  aws-cdk-cloud-assembly-schema_release:
    name: "@aws-cdk/cloud-assembly-schema: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/cloud-assembly-schema') }}
    steps:
      - id: auto_40a1ea23
        run: echo "Releasing @aws-cdk/cloud-assembly-schema..."
  aws-cdk-cloud-assembly-schema_release_github:
    name: "@aws-cdk/cloud-assembly-schema: Publish to GitHub Releases"
    needs:
      - aws-cdk-cloud-assembly-schema_release_npm
      - aws-cdk-cloud-assembly-schema_release_maven
      - aws-cdk-cloud-assembly-schema_release_pypi
      - aws-cdk-cloud-assembly-schema_release_nuget
      - aws-cdk-cloud-assembly-schema_release_golang
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-cloud-assembly-schema_release_npm:
    name: "@aws-cdk/cloud-assembly-schema: Publish to npm"
    needs: aws-cdk-cloud-assembly-schema_release
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          path: .repo
      - name: Install Dependencies
        id: install_dependencies
        run: cd .repo && yarn install --immutable
      - name: Extract build artifact
        id: extract_build_artifact
        run: tar --strip-components=1 -xzvf dist/js/*.tgz -C .repo/packages/@aws-cdk/cloud-assembly-schema
      - name: Move build artifact out of the way
        id: move_build_artifact_out_of_the_way
        run: mv dist dist.old
      - name: Create js artifact
        id: create_js_artifact
        run: cd .repo/packages/@aws-cdk/cloud-assembly-schema && yarn projen package:js
      - name: Collect js artifact
        id: collect_js_artifact
        run: mv .repo/packages/@aws-cdk/cloud-assembly-schema/dist dist
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-cloud-assembly-schema_release_maven:
    name: "@aws-cdk/cloud-assembly-schema: Publish to Maven Central"
    needs: aws-cdk-cloud-assembly-schema_release
    runs-on: ubuntu-latest
    permissions:
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-java@v6.0.0
        with:
          distribution: corretto
          java-version: "11"
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          path: .repo
      - name: Install Dependencies
        id: install_dependencies
        run: cd .repo && yarn install --immutable
      - name: Extract build artifact
        id: extract_build_artifact
        run: tar --strip-components=1 -xzvf dist/js/*.tgz -C .repo/packages/@aws-cdk/cloud-assembly-schema
      - name: Move build artifact out of the way
        id: move_build_artifact_out_of_the_way
        run: mv dist dist.old
      - name: Create java artifact
        id: create_java_artifact
        run: cd .repo/packages/@aws-cdk/cloud-assembly-schema && yarn projen package:java
      - name: Collect java artifact
        id: collect_java_artifact
        run: mv .repo/packages/@aws-cdk/cloud-assembly-schema/dist dist
      - name: Release
        id: release
        env:
          MAVEN_SERVER_ID: central-ossrh
          MAVEN_GPG_PRIVATE_KEY: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
          MAVEN_GPG_PRIVATE_KEY_PASSPHRASE: ${{ secrets.MAVEN_GPG_PRIVATE_KEY_PASSPHRASE }}
          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
          MAVEN_USERNAME: ${{ secrets.MAVEN_USERNAME }}
          MAVEN_STAGING_PROFILE_ID: ${{ secrets.MAVEN_STAGING_PROFILE_ID }}
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-maven'
  aws-cdk-cloud-assembly-schema_release_pypi:
    name: "@aws-cdk/cloud-assembly-schema: Publish to PyPI"
    needs: aws-cdk-cloud-assembly-schema_release
    runs-on: ubuntu-latest
    permissions:
      contents: read
      id-token: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - uses: actions/setup-python@v7.0.0
        with:
          python-version: 3.x
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          path: .repo
      - name: Install Dependencies
        id: install_dependencies
        run: cd .repo && yarn install --immutable
      - name: Extract build artifact
        id: extract_build_artifact
        run: tar --strip-components=1 -xzvf dist/js/*.tgz -C .repo/packages/@aws-cdk/cloud-assembly-schema
      - name: Move build artifact out of the way
        id: move_build_artifact_out_of_the_way
        run: mv dist dist.old
      - name: Create python artifact
        id: create_python_artifact
        run: cd .repo/packages/@aws-cdk/cloud-assembly-schema && yarn projen package:python
      - name: Collect python artifact
        id: collect_python_artifact
        run: mv .repo/packages/@aws-cdk/cloud-assembly-schema/dist dist
      - name: Release
        id: release
        env:
          PYPI_TRUSTED_PUBLISHER: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-pypi'
  aws-cdk-cloud-assembly-schema_release_nuget:
    name: "@aws-cdk/cloud-assembly-schema: Publish to NuGet Gallery"
    needs: aws-cdk-cloud-assembly-schema_release
    runs-on: ubuntu-latest
    permissions:
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - uses: actions/setup-dotnet@v6.0.0
        with:
          dotnet-version: 6.x
          cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          path: .repo
      - name: Install Dependencies
        id: install_dependencies
        run: cd .repo && yarn install --immutable
      - name: Extract build artifact
        id: extract_build_artifact
        run: tar --strip-components=1 -xzvf dist/js/*.tgz -C .repo/packages/@aws-cdk/cloud-assembly-schema
      - name: Move build artifact out of the way
        id: move_build_artifact_out_of_the_way
        run: mv dist dist.old
      - name: Create dotnet artifact
        id: create_dotnet_artifact
        run: cd .repo/packages/@aws-cdk/cloud-assembly-schema && yarn projen package:dotnet
      - name: Collect dotnet artifact
        id: collect_dotnet_artifact
        run: mv .repo/packages/@aws-cdk/cloud-assembly-schema/dist dist
      - name: Release
        id: release
        env:
          NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-nuget'
  aws-cdk-cloud-assembly-schema_release_golang:
    name: "@aws-cdk/cloud-assembly-schema: Publish to GitHub Go Module Repository"
    needs: aws-cdk-cloud-assembly-schema_release
    runs-on: ubuntu-latest
    permissions:
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-schema_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - uses: actions/setup-go@v7.0.0
        with:
          go-version: ^1.18.0
          cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-schema_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
        with:
          path: .repo
      - name: Install Dependencies
        id: install_dependencies
        run: cd .repo && yarn install --immutable
      - name: Extract build artifact
        id: extract_build_artifact
        run: tar --strip-components=1 -xzvf dist/js/*.tgz -C .repo/packages/@aws-cdk/cloud-assembly-schema
      - name: Move build artifact out of the way
        id: move_build_artifact_out_of_the_way
        run: mv dist dist.old
      - name: Create go artifact
        id: create_go_artifact
        run: cd .repo/packages/@aws-cdk/cloud-assembly-schema && yarn projen package:go
      - name: Collect go artifact
        id: collect_go_artifact
        run: mv .repo/packages/@aws-cdk/cloud-assembly-schema/dist dist
      - name: Release
        id: release
        env:
          GIT_USER_NAME: github-actions[bot]
          GIT_USER_EMAIL: 41898282+github-actions[bot]@users.noreply.github.com
          GITHUB_TOKEN: ${{ secrets.GO_GITHUB_TOKEN }}
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-golang'
  aws-cdk-cloud-assembly-schema_release_done:
    name: "@aws-cdk/cloud-assembly-schema: Release complete"
    needs:
      - aws-cdk-cloud-assembly-schema_release_github
      - aws-cdk-cloud-assembly-schema_release_npm
      - aws-cdk-cloud-assembly-schema_release_maven
      - aws-cdk-cloud-assembly-schema_release_pypi
      - aws-cdk-cloud-assembly-schema_release_nuget
      - aws-cdk-cloud-assembly-schema_release_golang
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-cloudformation-diff_release:
    name: "@aws-cdk/cloudformation-diff: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/cloudformation-diff') }}
    steps:
      - id: auto_db81aab1
        run: echo "Releasing @aws-cdk/cloudformation-diff..."
  aws-cdk-cloudformation-diff_release_github:
    name: "@aws-cdk/cloudformation-diff: Publish to GitHub Releases"
    needs: aws-cdk-cloudformation-diff_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloudformation-diff_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloudformation-diff_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-cloudformation-diff_release_npm:
    name: "@aws-cdk/cloudformation-diff: Publish to npm"
    needs: aws-cdk-cloudformation-diff_release
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloudformation-diff_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloudformation-diff_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-cloudformation-diff_release_done:
    name: "@aws-cdk/cloudformation-diff: Release complete"
    needs:
      - aws-cdk-cloudformation-diff_release_github
      - aws-cdk-cloudformation-diff_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-cloud-assembly-api_release:
    name: "@aws-cdk/cloud-assembly-api: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/cloud-assembly-api') }}
    steps:
      - id: auto_d47652ab
        run: echo "Releasing @aws-cdk/cloud-assembly-api..."
  aws-cdk-cloud-assembly-api_release_github:
    name: "@aws-cdk/cloud-assembly-api: Publish to GitHub Releases"
    needs: aws-cdk-cloud-assembly-api_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-api_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-api_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-cloud-assembly-api_release_npm:
    name: "@aws-cdk/cloud-assembly-api: Publish to npm"
    needs:
      - aws-cdk-cloud-assembly-api_release
      - aws-cdk-cloud-assembly-schema_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cloud-assembly-api_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cloud-assembly-api_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-cloud-assembly-api_release_done:
    name: "@aws-cdk/cloud-assembly-api: Release complete"
    needs:
      - aws-cdk-cloud-assembly-api_release_github
      - aws-cdk-cloud-assembly-api_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-cli-plugin-contract_release:
    name: "@aws-cdk/cli-plugin-contract: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/cli-plugin-contract') }}
    steps:
      - id: auto_b63ffe8e
        run: echo "Releasing @aws-cdk/cli-plugin-contract..."
  aws-cdk-cli-plugin-contract_release_github:
    name: "@aws-cdk/cli-plugin-contract: Publish to GitHub Releases"
    needs: aws-cdk-cli-plugin-contract_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cli-plugin-contract_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cli-plugin-contract_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-cli-plugin-contract_release_npm:
    name: "@aws-cdk/cli-plugin-contract: Publish to npm"
    needs: aws-cdk-cli-plugin-contract_release
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cli-plugin-contract_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cli-plugin-contract_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-cli-plugin-contract_release_done:
    name: "@aws-cdk/cli-plugin-contract: Release complete"
    needs:
      - aws-cdk-cli-plugin-contract_release_github
      - aws-cdk-cli-plugin-contract_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-cdk-assets-lib_release:
    name: "@aws-cdk/cdk-assets-lib: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/cdk-assets-lib') }}
    steps:
      - id: auto_42150589
        run: echo "Releasing @aws-cdk/cdk-assets-lib..."
  aws-cdk-cdk-assets-lib_release_github:
    name: "@aws-cdk/cdk-assets-lib: Publish to GitHub Releases"
    needs: aws-cdk-cdk-assets-lib_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cdk-assets-lib_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cdk-assets-lib_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-cdk-assets-lib_release_npm:
    name: "@aws-cdk/cdk-assets-lib: Publish to npm"
    needs:
      - aws-cdk-cdk-assets-lib_release
      - aws-cdk-cloud-assembly-schema_release_done
      - aws-cdk-cloud-assembly-api_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-cdk-assets-lib_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-cdk-assets-lib_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-cdk-assets-lib_release_done:
    name: "@aws-cdk/cdk-assets-lib: Release complete"
    needs:
      - aws-cdk-cdk-assets-lib_release_github
      - aws-cdk-cdk-assets-lib_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  cdk-assets_release:
    name: "cdk-assets: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), 'cdk-assets') }}
    steps:
      - id: auto_eafe4a5b
        run: echo "Releasing cdk-assets..."
  cdk-assets_release_github:
    name: "cdk-assets: Publish to GitHub Releases"
    needs: cdk-assets_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.cdk-assets_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: cdk-assets_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  cdk-assets_release_npm:
    name: "cdk-assets: Publish to npm"
    needs:
      - cdk-assets_release
      - aws-cdk-cdk-assets-lib_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.cdk-assets_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: cdk-assets_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  cdk-assets_release_done:
    name: "cdk-assets: Release complete"
    needs:
      - cdk-assets_release_github
      - cdk-assets_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-toolkit-lib_release:
    name: "@aws-cdk/toolkit-lib: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/toolkit-lib') }}
    steps:
      - id: auto_3a0b8e79
        run: echo "Releasing @aws-cdk/toolkit-lib..."
  aws-cdk-toolkit-lib_release_github:
    name: "@aws-cdk/toolkit-lib: Publish to GitHub Releases"
    needs: aws-cdk-toolkit-lib_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-toolkit-lib_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-toolkit-lib_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-toolkit-lib_release_npm:
    name: "@aws-cdk/toolkit-lib: Publish to npm"
    needs:
      - aws-cdk-toolkit-lib_release
      - aws-cdk-cloud-assembly-schema_release_done
      - aws-cdk-cloudformation-diff_release_done
      - aws-cdk-cloud-assembly-api_release_done
      - aws-cdk-cli-plugin-contract_release_done
      - aws-cdk-cdk-assets-lib_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-toolkit-lib_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-toolkit-lib_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-toolkit-lib_release_done:
    name: "@aws-cdk/toolkit-lib: Release complete"
    needs:
      - aws-cdk-toolkit-lib_release_github
      - aws-cdk-toolkit-lib_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk_release:
    name: "aws-cdk: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), 'aws-cdk') }}
    steps:
      - id: auto_4b426d8c
        run: echo "Releasing aws-cdk..."
  aws-cdk_release_github:
    name: "aws-cdk: Publish to GitHub Releases"
    needs: aws-cdk_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk_release_npm:
    name: "aws-cdk: Publish to npm"
    needs:
      - aws-cdk_release
      - aws-cdk-cloud-assembly-schema_release_done
      - aws-cdk-cloudformation-diff_release_done
      - aws-cdk-cloud-assembly-api_release_done
      - aws-cdk-cdk-assets-lib_release_done
      - aws-cdk-toolkit-lib_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          VERIFY_PUBLISHED_TIMEOUT_SECONDS: "10800"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk_release_done:
    name: "aws-cdk: Release complete"
    needs:
      - aws-cdk_release_github
      - aws-cdk_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  cdk_release:
    name: "cdk: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), 'cdk') }}
    steps:
      - id: auto_84c3e2d5
        run: echo "Releasing cdk..."
  cdk_release_github:
    name: "cdk: Publish to GitHub Releases"
    needs: cdk_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.cdk_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: cdk_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  cdk_release_npm:
    name: "cdk: Publish to npm"
    needs:
      - cdk_release
      - aws-cdk_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.cdk_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: cdk_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  cdk_release_done:
    name: "cdk: Release complete"
    needs:
      - cdk_release_github
      - cdk_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-integ-runner_release:
    name: "@aws-cdk/integ-runner: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk/integ-runner') }}
    steps:
      - id: auto_8824227e
        run: echo "Releasing @aws-cdk/integ-runner..."
  aws-cdk-integ-runner_release_github:
    name: "@aws-cdk/integ-runner: Publish to GitHub Releases"
    needs: aws-cdk-integ-runner_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-integ-runner_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-integ-runner_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-integ-runner_release_npm:
    name: "@aws-cdk/integ-runner: Publish to npm"
    needs:
      - aws-cdk-integ-runner_release
      - aws-cdk-cloud-assembly-schema_release_done
      - aws-cdk-cloudformation-diff_release_done
      - aws-cdk-cloud-assembly-api_release_done
      - aws-cdk-cdk-assets-lib_release_done
      - aws-cdk-toolkit-lib_release_done
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-integ-runner_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-integ-runner_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-integ-runner_release_done:
    name: "@aws-cdk/integ-runner: Release complete"
    needs:
      - aws-cdk-integ-runner_release_github
      - aws-cdk-integ-runner_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  aws-cdk-testing-cli-integ_release:
    name: "@aws-cdk-testing/cli-integ: Release"
    needs: release_gate
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ contains(fromJSON(needs.release_gate.outputs.packages_to_publish), '@aws-cdk-testing/cli-integ') }}
    steps:
      - id: auto_07880c56
        run: echo "Releasing @aws-cdk-testing/cli-integ..."
  aws-cdk-testing-cli-integ_release_github:
    name: "@aws-cdk-testing/cli-integ: Publish to GitHub Releases"
    needs: aws-cdk-testing-cli-integ_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-testing-cli-integ_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-testing-cli-integ_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        if: ${{ !inputs.dry_run }}
        env:
          RELEASE_TAG_FILE: dist/releasetag.txt
          CHANGELOG_FILE: dist/changelog.md
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |-
          tag=$(cat "$RELEASE_TAG_FILE") &&
          gh release view "$tag" -R "$GITHUB_REPOSITORY" 2>/dev/null ||
          gh release create "$tag" -R "$GITHUB_REPOSITORY" -F "$CHANGELOG_FILE" -t "$tag" --target "$GITHUB_SHA"
  aws-cdk-testing-cli-integ_release_npm:
    name: "@aws-cdk-testing/cli-integ: Publish to npm"
    needs: aws-cdk-testing-cli-integ_release
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && !failure() && needs.aws-cdk-testing-cli-integ_release.result == 'success' }}
    steps:
      - uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Download build artifacts
        id: download_build_artifacts
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          path: dist
          name: aws-cdk-testing-cli-integ_build-artifact
      - name: Restore build artifact permissions
        id: restore_build_artifact_permissions
        run: cd dist && setfacl --restore=permissions-backup.acl
        continue-on-error: true
      - name: Release
        id: release
        env:
          NPM_DIST_TAG: latest
          NPM_REGISTRY: registry.npmjs.org
          NPM_CONFIG_PROVENANCE: "true"
          NPM_TRUSTED_PUBLISHER: "true"
          VERIFY_PUBLISHED: "true"
          PUBLIB_DRYRUN: ${{ inputs.dry_run }}
        run: npx '-p' 'publib@latest' 'publib-npm'
  aws-cdk-testing-cli-integ_release_done:
    name: "@aws-cdk-testing/cli-integ: Release complete"
    needs:
      - aws-cdk-testing-cli-integ_release_github
      - aws-cdk-testing-cli-integ_release_npm
    runs-on: ubuntu-latest
    permissions: {}
    if: ${{ !cancelled() && !failure() }}
    steps:
      - id: auto_9c3c4914
        run: echo "All publish jobs complete"
  standalone_release_adc:
    name: "standalone: publish to ADC"
    needs:
      - release
      - aws-cdk_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    environment: releasing
    if: ${{ !cancelled() && needs.aws-cdk_release_npm.result == 'success' && !inputs.dry_run }}
    steps:
      - name: Checkout
        id: checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
      - name: Enable corepack
        id: enable_corepack
        run: corepack enable
      - name: Setup Node.js
        id: setup_node_js
        uses: actions/setup-node@v7.0.0
        with:
          node-version: lts/*
          package-manager-cache: false
      - name: Install dependencies
        id: install_dependencies
        run: yarn install --immutable
      - name: Download artifact
        id: download_artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          name: standalone_build-artifact
          path: dist/standalone
      - name: Authenticate Via OIDC Role
        id: creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_FOR_ACCOUNT }}
          role-session-name: standalone-release@aws-cdk-cli
          output-credentials: true
          mask-aws-account-id: true
      - name: Publish artifacts
        id: publish_artifacts
        env:
          PUBLISHING_ROLE_ARN: ${{ vars.PUBLISHING_ROLE_ARN }}
          TARGET_BUCKETS: ${{ vars.TARGET_BUCKETS }}
        run: yarn projen publish-to-adc
  record_timestamp:
    name: "aws-cdk: Record publishing timestamp"
    needs:
      - release
      - aws-cdk_release_npm
    runs-on: ubuntu-latest
    permissions:
      contents: write
      id-token: write
    environment: releasing
    if: ${{ !cancelled() && needs.aws-cdk_release_npm.result == 'success' && !inputs.dry_run }}
    steps:
      - name: Download artifact
        id: download_artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          name: aws-cdk_build-artifact
          path: dist
      - name: Read version from build artifacts
        id: aws-cdk-version
        run: echo "version=$(cat dist/version.txt)" >> $GITHUB_OUTPUT
      - name: Authenticate Via OIDC Role
        id: creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_FOR_ACCOUNT }}
          role-session-name: publish-timestamps@aws-cdk-cli
          mask-aws-account-id: true
      - name: Publish artifacts
        id: publish_artifacts
        run: |-
          aws ssm put-parameter --name "/published/cdk/cli-npm/version" --type "String" --value "${{ steps.aws-cdk-version.outputs.version }}" --overwrite
          aws ssm put-parameter --name "/published/cdk/cli-npm/timestamp" --type "String" --value "$(date +%s)" --overwrite
  aws-cdk-toolkit-lib_release_docs_toolkit-lib-api-model:
    name: "@aws-cdk/toolkit-lib: Publish docs @aws-cdk/toolkit-lib toolkit-lib-api-model to S3"
    needs: aws-cdk-toolkit-lib_release_npm
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && needs.aws-cdk-toolkit-lib_release_npm.result == 'success' && !inputs.dry_run }}
    steps:
      - name: Download artifact
        id: download_artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          name: aws-cdk-toolkit-lib_build-artifact
          path: dist
      - name: Authenticate Via OIDC Role
        id: creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_FOR_ACCOUNT }}
          role-session-name: s3-pub-toolkit-lib-api-model@aws-cdk-cli
          mask-aws-account-id: true
      - name: Assume the publishing role
        id: publishing-creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.PUBLISH_TOOLKIT_LIB_DOCS_ROLE_ARN }}
          role-session-name: s3-pub-toolkit-lib-api-model@aws-cdk-cli
          mask-aws-account-id: true
          role-chaining: true
      - name: Publish docs @aws-cdk/toolkit-lib toolkit-lib-api-model
        id: publish_docs_aws-cdk_toolkit-lib_toolkit-lib-api-model
        env:
          BUCKET_NAME: ${{ vars.DOCS_BUCKET_NAME }}
          DOCS_STREAM: toolkit-lib-api-model
        run: |-
          echo "Uploading toolkit-lib-api-model docs to S3"
          echo "::add-mask::$BUCKET_NAME"
          VERSION="$(cat dist/version.txt)"
          S3_PATH="$DOCS_STREAM/aws-cdk-toolkit-lib-api-model-v$VERSION.zip"
          LATEST="latest-toolkit-lib-api-model"

          # Capture both stdout and stderr
          if OUTPUT=$(aws s3api put-object \
            --bucket "$BUCKET_NAME" \
            --key "$S3_PATH" \
            --body dist/api-extractor-docs.zip \
            --if-none-match "*" 2>&1); then

            # File was uploaded successfully, update the latest pointer.
            echo "New toolkit-lib-api-model artifact uploaded successfully, updating latest pointer"
            # This is a "#manifest-version:2" manifest
            printf '#manifest-version:2\nartifact_path=%s\nversion=%s\npublished=%s\nrebuild_nonce=%s\n' \
              "$S3_PATH" \
              "$VERSION" \
              "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
              "$GITHUB_SHA" \
              | aws s3 cp - "s3://$BUCKET_NAME/$LATEST"

          elif echo "$OUTPUT" | grep -q "PreconditionFailed"; then
            # Check specifically for PreconditionFailed in the error output
            echo "::warning::File already exists in S3. Skipping upload."
            exit 0

          else
            # Any other error (permissions, etc)
            echo "::error::Failed to upload toolkit-lib-api-model artifact"
            exit 1
          fi
  aws-cdk_release_docs_CLI:
    name: "aws-cdk: Publish docs aws-cdk CLI to S3"
    needs: aws-cdk_release_npm
    runs-on: ubuntu-latest
    permissions:
      id-token: write
      contents: read
    environment: releasing
    if: ${{ !cancelled() && needs.aws-cdk_release_npm.result == 'success' && !inputs.dry_run }}
    steps:
      - name: Download artifact
        id: download_artifact
        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
        with:
          name: aws-cdk_build-artifact
          path: dist
      - name: Authenticate Via OIDC Role
        id: creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.AWS_ROLE_TO_ASSUME_FOR_ACCOUNT }}
          role-session-name: s3-pub-cli@aws-cdk-cli
          mask-aws-account-id: true
      - name: Assume the publishing role
        id: publishing-creds
        uses: aws-actions/configure-aws-credentials@v6.2.3
        with:
          aws-region: us-east-1
          role-to-assume: ${{ vars.PUBLISH_CLI_VERSION_ROLE_ARN }}
          role-session-name: s3-pub-cli@aws-cdk-cli
          mask-aws-account-id: true
          role-chaining: true
      - name: Publish docs aws-cdk CLI
        id: publish_docs_aws-cdk_cli
        env:
          BUCKET_NAME: ${{ vars.DOCS_BUCKET_NAME }}
          DOCS_STREAM: CLI
        run: |-
          echo "Uploading cli docs to S3"
          echo "::add-mask::$BUCKET_NAME"
          VERSION="$(cat dist/version.txt)"
          S3_PATH="$DOCS_STREAM/toolkit-versions-v$VERSION.zip"
          LATEST="latest-CLI"

          # Capture both stdout and stderr
          if OUTPUT=$(aws s3api put-object \
            --bucket "$BUCKET_NAME" \
            --key "$S3_PATH" \
            --body dist/toolkit-versions.zip \
            --if-none-match "*" 2>&1); then

            # File was uploaded successfully, update the latest pointer.
            echo "New cli artifact uploaded successfully, updating latest pointer"
            # This is a "#manifest-version:2" manifest
            printf '#manifest-version:2\nartifact_path=%s\nversion=%s\npublished=%s\nrebuild_nonce=%s\n' \
              "$S3_PATH" \
              "$VERSION" \
              "$(date -u +%Y-%m-%dT%H:%M:%SZ)" \
              "$GITHUB_SHA" \
              | aws s3 cp - "s3://$BUCKET_NAME/$LATEST"

          elif echo "$OUTPUT" | grep -q "PreconditionFailed"; then
            # Check specifically for PreconditionFailed in the error output
            echo "::warning::File already exists in S3. Skipping upload."
            exit 0

          else
            # Any other error (permissions, etc)
            echo "::error::Failed to upload cli artifact"
            exit 1
          fi