Merge branch 'awslabs:main' into main

Author: Kalindi-Dev

.github/workflows/codebuild.yml

@@ -8,6 +8,7 @@ on:
     types:
       - labeled
       - opened
+      - ready_for_review
       - reopened
       - synchronize
       - unlabeled
@@ -164,7 +165,7 @@ jobs:
       - name: Run CodeBuild
         if: steps.cache-check.outputs.cache-hit != 'true'
         id: codebuild
-        uses: aws-actions/aws-codebuild-run-build@d8279f349f3b1b84e834c30e47c20dcb8888b7e5 # v1.0.18
+        uses: aws-actions/aws-codebuild-run-build@7e46c3fa1c1f217e26a73712796b1f78938b534b # v1.0.19
         with:
           project-name: ${{ env.CODEBUILD_PROJECT_NAME }}
           source-version-override: ${{ github.sha }}

.github/workflows/release-pr.yml

@@ -148,7 +148,7 @@ jobs:
 
           ## Checklist (in order)
           
-          1. [ ] Mark the pull request "Ready for review" to trigger required workflows
+          1. [ ] Mark the pull request "Ready for review" and label with "codebuild" to trigger required workflows
           2. [ ] Inspect the CHANGELOG.md and "Approve" or "Reject" the pending [CodeBuild](https://github.com/awslabs/aidlc-workflows/actions/workflows/codebuild.yml) GitHub Action
           3. [ ] Evaluate the artifacts
           4. [ ] Review the pull request (if approved set the "Merge when ready")

.github/workflows/tag-on-merge.yml

@@ -28,6 +28,10 @@ jobs:
       startsWith(github.event.pull_request.head.ref, 'release/v')
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout code
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
+        with:
+          fetch-depth: 1
       - name: Create tag
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -44,9 +48,10 @@ jobs:
             exit 1
           fi
 
-          gh api "repos/$REPO/git/refs" \
-            -f ref="refs/tags/$TAG" \
-            -f sha="$SHA"
+          git config --local user.email "github-actions[bot]@users.noreply.github.com"
+          git config --local user.name "github-actions[bot]"
+          git tag -a "$TAG" "$SHA" -m "Release $TAG"
+          git push origin "$TAG"
 
           echo "Tag $TAG created on $SHA"