Merge branch 'main' into ddbec-with-sdk-v2

Author: rishav-karanjit

.github/workflows/check-files.yml

@@ -16,7 +16,7 @@ jobs:
       # to add more allowlisted approvers just modify this env variable
       maintainers: seebees, texastony, ShubhamChaturvedi7, lucasmcdonald3, josecorella, rishav-karanjit, antonf-amzn, kessplas
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/check_only_key_word.yml

@@ -13,7 +13,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
 

.github/workflows/ci_codegen.yml

@@ -10,6 +10,10 @@ on:
 
 jobs:
   code-generation:
+    permissions:
+      contents: read
+      pull-requests: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -31,7 +35,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
       - run: git submodule update --init --recursive submodules/smithy-dafny

.github/workflows/ci_duvet.yml

@@ -11,9 +11,13 @@ on:
 
 jobs:
   duvet:
+    permissions:
+      contents: read
+      pull-requests: write
+      id-token: write
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Install duvet
         shell: bash

.github/workflows/ci_examples_java.yml

@@ -42,7 +42,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2
           role-session-name: DDBEC-Dafny-Java-Tests
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 

.github/workflows/ci_examples_net.yml

@@ -36,7 +36,7 @@ jobs:
       DOTNET_CLI_TELEMETRY_OPTOUT: 1
       DOTNET_NOLOGO: 1
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 

.github/workflows/ci_static_analysis.yml

@@ -9,8 +9,16 @@ on:
 
 jobs:
   not-grep:
+    permissions:
+      contents: read
+      pull-requests: write
+      id-token: write
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
+      - name: Install setuptools dependency
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install setuptools==81.0.0
       - name: not-grep
-        uses: mattsb42-meta/not-grep@1.0.0
+        uses: mattsb42-meta/not-grep@1.0.1

.github/workflows/ci_test_go.yml

@@ -45,7 +45,7 @@ jobs:
 
       - name: Setup Docker
         if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors'
-        uses: douglascamata/setup-docker-macos-action@v1.0.2
+        uses: douglascamata/setup-docker-macos-action@v1.1.0
 
       - name: Setup DynamoDB Local
         if: matrix.library == 'TestVectors'
@@ -58,7 +58,7 @@ jobs:
         run: |
           git config --global core.longpaths true
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 
@@ -95,7 +95,7 @@ jobs:
         with:
           go-version: ${{ matrix.go-version }}
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Init Submodules
         shell: bash
         run: |

.github/workflows/ci_test_java.yml

@@ -43,7 +43,7 @@ jobs:
           role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2
           role-session-name: DDBEC-Dafny-Java-Tests
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive
 

.github/workflows/ci_test_net.yml

@@ -37,7 +37,7 @@ jobs:
       - name: Support longpaths on Git checkout
         run: |
           git config --global core.longpaths true
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         with:
           submodules: recursive