From 6955ae2512233dc4a538243163550cc2fb961cef Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Thu, 2 Oct 2025 13:52:26 -0400 Subject: [PATCH 01/20] chore: use macos-14 for CI --- .github/workflows/ci_examples_java.yml | 2 +- .github/workflows/ci_examples_net.yml | 2 +- .github/workflows/ci_test_go.yml | 4 ++-- .github/workflows/ci_test_java.yml | 2 +- .github/workflows/ci_test_net.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 4 ++-- .github/workflows/ci_todos.yml | 2 +- .github/workflows/dafny_interop_examples_java.yml | 2 +- .github/workflows/dafny_interop_examples_net.yml | 2 +- .github/workflows/dafny_interop_java.yml | 2 +- .github/workflows/dafny_interop_test_net.yml | 2 +- .github/workflows/go-release.yml | 2 +- .github/workflows/library_dafny_verification.yml | 4 ++-- .github/workflows/library_format.yml | 2 +- .github/workflows/library_rust_tests.yml | 4 ++-- .github/workflows/sem_ver.yml | 2 +- .github/workflows/semantic_release.yml | 2 +- .github/workflows/test_vector_verification.yml | 4 ++-- 19 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index a8c221dc6c..3c2a534105 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 41d90d49c7..6eab731fda 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -27,7 +27,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 3cb97b7c6d..f02b7d0130 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption, TestVectors] - os: [ubuntu-22.04, macos-13] + os: [ubuntu-22.04, macos-14] go-version: ["1.23", "1.24", "1.25"] runs-on: ${{ matrix.os }} permissions: @@ -37,7 +37,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1-alpha - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 4715bb174b..702d76794c 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -30,7 +30,7 @@ jobs: matrix: library: [DynamoDbEncryption] java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 6c90f0e520..dcc93a405a 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -25,7 +25,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13, ubuntu-22.04, windows-latest] + os: [macos-14, ubuntu-22.04, windows-latest] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index d0396f2b4b..a4d58cb319 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -32,7 +32,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-13, + macos-14, ] runs-on: ${{ matrix.os }} permissions: @@ -40,7 +40,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index c98fb33edb..91602a9232 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -28,7 +28,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-13, + macos-14, ] runs-on: ${{ matrix.os }} permissions: @@ -36,7 +36,7 @@ jobs: contents: read steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/ci_todos.yml b/.github/workflows/ci_todos.yml index 20a75492f9..736feb599f 100644 --- a/.github/workflows/ci_todos.yml +++ b/.github/workflows/ci_todos.yml @@ -9,7 +9,7 @@ on: jobs: findTodos: - runs-on: macos-13 + runs-on: macos-14 steps: - uses: actions/checkout@v3 diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 4a77907e9c..092cd31f10 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -28,7 +28,7 @@ jobs: max-parallel: 1 matrix: java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index 7e3f031ab7..46281110c4 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -24,7 +24,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 685d0035f6..9ae08aabba 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -28,7 +28,7 @@ jobs: matrix: library: [DynamoDbEncryption] java-version: [8, 11, 16, 17] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 7017944388..eecddca0e9 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -24,7 +24,7 @@ jobs: matrix: library: [DynamoDbEncryption] dotnet-version: ["6.0.x"] - os: [macos-13, ubuntu-22.04, windows-latest] + os: [macos-14, ubuntu-22.04, windows-latest] runs-on: ${{ matrix.os }} permissions: id-token: write diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml index adf530554b..9b87b3497c 100644 --- a/.github/workflows/go-release.yml +++ b/.github/workflows/go-release.yml @@ -18,7 +18,7 @@ jobs: go-release: needs: get-dafny-version - runs-on: macos-13 + runs-on: macos-14 permissions: contents: write pull-requests: write diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index 1759804e1b..f911c5fede 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -39,7 +39,7 @@ jobs: DynamoDbItemEncryptor, StructuredEncryption, ] - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: @@ -72,7 +72,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties # dafny-reportgenerator requires next6 - # but only 7.0 is installed on macos-13-large + # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' uses: actions/setup-dotnet@v4 with: diff --git a/.github/workflows/library_format.yml b/.github/workflows/library_format.yml index 1732bc57b2..f6dd42ee95 100644 --- a/.github/workflows/library_format.yml +++ b/.github/workflows/library_format.yml @@ -19,7 +19,7 @@ jobs: if: github.event_name != 'schedule' || github.repository_owner == 'aws' strategy: matrix: - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index bae6b3aafa..28253d0a93 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -26,7 +26,7 @@ jobs: matrix: library: [DynamoDbEncryption, TestVectors] # removed windows-latest because somehow it can't build aws-lc in CI - os: [ubuntu-22.04, macos-13] + os: [ubuntu-22.04, macos-14] runs-on: ${{ matrix.os }} permissions: id-token: write @@ -35,7 +35,7 @@ jobs: RUST_MIN_STACK: 838860800 steps: - name: Setup Docker - if: matrix.os == 'macos-13' && matrix.library == 'TestVectors' + if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' uses: douglascamata/setup-docker-macos-action@v1.0.0 - name: Setup DynamoDB Local diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 93154bb364..44675f7d09 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -6,7 +6,7 @@ on: jobs: semantic-release: - runs-on: macos-13 + runs-on: macos-14 permissions: id-token: write contents: read diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index 9110e579e4..e681909912 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -15,7 +15,7 @@ jobs: # privileged operation, so we must make sure this list of users is a subset of the users labeled as maintainers of # https://github.com/orgs/aws/teams/aws-crypto-tools if: contains('["seebees","texastony","ShubhamChaturvedi7","lucasmcdonald3","josecorella","imabhichow","rishav-karanjit","antonf-amzn","kessplas","ajewellamz","RitvikKapila"]', github.actor) - runs-on: macos-13 + runs-on: macos-14 permissions: id-token: write contents: write diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index d00b1fdc20..472d2f57d3 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -29,7 +29,7 @@ jobs: if: github.event_name != 'schedule' || github.repository_owner == 'aws' strategy: matrix: - os: [macos-13] + os: [macos-14] runs-on: ${{ matrix.os }} defaults: run: @@ -62,7 +62,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties # dafny-reportgenerator requires next6 - # but only 7.0 is installed on macos-13-large + # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' uses: actions/setup-dotnet@v4 with: From ecffe8677a3dfdfa8d328a84f8e87e48ac16f1ec Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Thu, 2 Oct 2025 14:02:46 -0400 Subject: [PATCH 02/20] m --- .github/workflows/ci_codegen.yml | 2 +- .github/workflows/ci_examples_java.yml | 4 ++-- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_java.yml | 4 ++-- .github/workflows/ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/dafny_interop_examples_java.yml | 4 ++-- .github/workflows/dafny_interop_java.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_java.yml | 4 ++-- .github/workflows/library_rust_tests.yml | 2 +- 10 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 43856d3a76..1bd695c487 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -58,7 +58,7 @@ jobs: run: echo '{"sdk":{"rollForward":"latestFeature","version":"6.0.0"}}' > ./global.json - name: Setup Java 17 for codegen - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 3c2a534105..2bba8fbcc8 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -27,7 +27,7 @@ jobs: testJava: strategy: matrix: - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -46,7 +46,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index f02b7d0130..482ac86885 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -71,7 +71,7 @@ jobs: run: echo '{"sdk":{"rollForward":"latestFeature","version":"6.0.0"}}' > ./global.json - name: Setup Java 17 for codegen - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 702d76794c..1253e9adba 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -79,7 +79,7 @@ jobs: update-and-regenerate-mpl: true - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 79b193440f..99edd54b50 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -48,7 +48,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index a4d58cb319..60c428650e 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -92,7 +92,7 @@ jobs: update-and-regenerate-mpl: true - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 092cd31f10..10494474ac 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -27,7 +27,7 @@ jobs: strategy: max-parallel: 1 matrix: - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -60,7 +60,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 9ae08aabba..4bded74160 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -60,7 +60,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 1d29bf32f7..88bf5a6bdf 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 16, 17] + java-version: [8, 11, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -69,7 +69,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 28253d0a93..ce0ace469e 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -82,7 +82,7 @@ jobs: git rev-parse HEAD - name: Setup Java 17 for codegen - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" From d421c830e7a8eaaac03f051530b8d64afb1f7e2a Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 18:40:52 -0400 Subject: [PATCH 03/20] m --- .../action.yml | 8 ++++---- .github/workflows/ci_codegen.yml | 4 ++-- .github/workflows/ci_examples_java.yml | 8 +++++++- .github/workflows/ci_examples_net.yml | 9 ++++++++- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_java.yml | 8 +++++++- .../ci_test_latest_released_mpl_java.yml | 6 ++++++ .github/workflows/ci_test_net.yml | 15 +++++++++------ .github/workflows/ci_test_vector_java.yml | 8 +++++++- .github/workflows/ci_test_vector_net.yml | 9 ++++++++- .github/workflows/dafny_interop_examples_java.yml | 8 +++++++- .github/workflows/dafny_interop_examples_net.yml | 9 ++++++++- .github/workflows/dafny_interop_java.yml | 8 +++++++- .github/workflows/dafny_interop_test_net.yml | 15 +++++++++------ .../workflows/dafny_interop_test_vector_java.yml | 8 +++++++- .../workflows/dafny_interop_test_vector_net.yml | 9 ++++++++- .github/workflows/library_dafny_verification.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- .github/workflows/sem_ver.yml | 2 +- .github/workflows/semantic_release.yml | 2 +- .github/workflows/test_vector_verification.yml | 2 +- 21 files changed, 110 insertions(+), 34 deletions(-) diff --git a/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml b/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml index 79e52b2e89..33aad451cd 100644 --- a/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml +++ b/.github/actions/install_smithy_dafny_codegen_dependencies/action.yml @@ -9,7 +9,7 @@ runs: using: "composite" steps: - name: Setup Java 17 for codegen - uses: actions/setup-java@v3 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: "17" @@ -20,7 +20,7 @@ runs: make -C submodules/smithy-dafny mvn_local_deploy_polymorph_dependencies - name: Setup Python, black, and docformatter for code formatting - uses: actions/setup-python@v4 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} architecture: x64 @@ -31,14 +31,14 @@ runs: python -m pip install --upgrade docformatter - name: Install Go - uses: actions/setup-go@v2 + uses: actions/setup-go@v6 with: go-version: "1.23" - name: Install Go imports shell: bash run: | - go install golang.org/x/tools/cmd/goimports@latest + go install golang.org/x/tools/cmd/goimports@v0.36.0 # Without this the if-dafny-at-least command includes "Downloading ..." output - name: Arbitrary makefile target to force downloading Gradle diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 1bd695c487..7aca0fffd6 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -45,12 +45,12 @@ jobs: dafny-version: ${{ inputs.dafny }} - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: ${{ matrix.go-version }} diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 2bba8fbcc8..9f516bd0ac 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -27,7 +27,7 @@ jobs: testJava: strategy: matrix: - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -45,6 +45,12 @@ jobs: with: submodules: recursive + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 6eab731fda..5585a760d1 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -41,10 +41,17 @@ jobs: submodules: recursive - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 482ac86885..59dc9cd928 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -91,7 +91,7 @@ jobs: sed "s/mplDependencyJavaVersion=.*/mplDependencyJavaVersion=${{inputs.mpl-version}}/g" project.properties > project.properties2; mv project.properties2 project.properties - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: ${{ matrix.go-version }} diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index 1253e9adba..f620494c14 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -78,6 +78,12 @@ jobs: diff-generated-code: false update-and-regenerate-mpl: true + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 99edd54b50..6946a54b52 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -47,6 +47,12 @@ jobs: with: submodules: recursive + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index dcc93a405a..ef19c2bd64 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -42,10 +42,17 @@ jobs: submodules: recursive - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -106,11 +113,7 @@ jobs: run: | dotnet restore runtimes/net/tests dotnet build runtimes/net/tests - if [ "$RUNNER_OS" == "macOS" ]; then - make test_net_mac_intel - else - make test_net FRAMEWORK=net6.0 - fi + make test_net FRAMEWORK=net6.0 - name: Test Build and Pack ${{ matrix.library}} shell: bash diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 60c428650e..5d7b2c310c 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -28,7 +28,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -91,6 +91,12 @@ jobs: diff-generated-code: false update-and-regenerate-mpl: true + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 91602a9232..3dc78d5053 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -83,10 +83,17 @@ jobs: update-and-regenerate-mpl: true - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Build TestVectors implementation shell: bash working-directory: ${{matrix.library}} diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index 10494474ac..acfeefce74 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -27,7 +27,7 @@ jobs: strategy: max-parallel: 1 matrix: - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -59,6 +59,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index 46281110c4..e4caba31f2 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -42,10 +42,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 4bded74160..9d71d2a468 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [DynamoDbEncryption] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [macos-14] runs-on: ${{ matrix.os }} permissions: @@ -59,6 +59,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index eecddca0e9..225bf2beb3 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -42,10 +42,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -108,11 +115,7 @@ jobs: run: | dotnet restore runtimes/net/tests dotnet build runtimes/net/tests - if [ "$RUNNER_OS" == "macOS" ]; then - make test_net_mac_intel - else - make test_net FRAMEWORK=net6.0 - fi + make test_net FRAMEWORK=net6.0 - name: Test Build and Pack ${{ matrix.library}} shell: bash diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 88bf5a6bdf..5722168e06 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17] + java-version: [8, 11, 17, 19] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -68,6 +68,12 @@ jobs: git submodule update --init --recursive git rev-parse HEAD + - name: Setup Java 8 + uses: actions/setup-java@v5 + with: + distribution: "corretto" + java-version: 8 + - name: Setup Java ${{ matrix.java-version }} uses: actions/setup-java@v5 with: diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index bc8500c3de..35b4bf31f5 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -47,10 +47,17 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index f911c5fede..c55ad63a0c 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -74,7 +74,7 @@ jobs: # dafny-reportgenerator requires next6 # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: "6.0.x" diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index ce0ace469e..34a0e2fcdd 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -63,7 +63,7 @@ jobs: role-session-name: DDBEC-Dafny-Rust-Tests - name: Setup Rust Toolchain for GitHub CI - uses: actions-rust-lang/setup-rust-toolchain@v1.10.1 + uses: actions-rust-lang/setup-rust-toolchain@v1 with: components: rustfmt diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 44675f7d09..2c2ab4e0f5 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -27,7 +27,7 @@ jobs: role-session-name: CI_Bot_Release - name: Upgrade Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 21 diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index e681909912..2c958781f9 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -36,7 +36,7 @@ jobs: role-session-name: CI_Bot_Release - name: Upgrade Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v5 with: node-version: 21 diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index 472d2f57d3..c99f745eb7 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -64,7 +64,7 @@ jobs: # dafny-reportgenerator requires next6 # but only 7.0 is installed on macos-14-large - name: Setup .NET Core SDK '6.0.x' - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: "6.0.x" From eebb22b4f59fe72806fb6c7bfdc860915130c145 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 18:47:02 -0400 Subject: [PATCH 04/20] m --- .github/workflows/ci_test_vector_java.yml | 4 ---- .github/workflows/ci_test_vector_net.yml | 4 ---- .github/workflows/library_rust_tests.yml | 4 ---- 3 files changed, 12 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 5d7b2c310c..1d3add030a 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,10 +39,6 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local uses: rrainn/dynamodb-action@v4.0.0 with: diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 3dc78d5053..de5622ac3e 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,10 +35,6 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local uses: rrainn/dynamodb-action@v4.0.0 with: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 34a0e2fcdd..fad586e8c0 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,10 +34,6 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1.0.0 - - name: Setup DynamoDB Local if: matrix.library == 'TestVectors' uses: rrainn/dynamodb-action@v4.0.0 From 43bdfec087cf498e68acea7c3401d304423290c9 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:27:33 -0400 Subject: [PATCH 05/20] m --- .github/workflows/library_rust_tests.yml | 25 +++++++++++++++++++----- 1 file changed, 20 insertions(+), 5 deletions(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index fad586e8c0..1ff778457e 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,12 +34,27 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: - - name: Setup DynamoDB Local - if: matrix.library == 'TestVectors' - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: 'corretto' + java-version: '11' # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Support longpaths on Git checkout run: | From 40d9138dcd9cbffdd410d1f30e9145a0774f43f2 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:30:17 -0400 Subject: [PATCH 06/20] m --- .github/workflows/library_rust_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 1ff778457e..5be3d190fc 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -42,7 +42,7 @@ jobs: - name: Download DynamoDB Local run: | - wget https://s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + wget https://dynamodb-local.s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local From 64c81dfc7fe4644f4e197fcba3b3d587eae22543 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 19:34:25 -0400 Subject: [PATCH 07/20] m --- .github/workflows/library_rust_tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 5be3d190fc..6c3cb035b4 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -42,7 +42,7 @@ jobs: - name: Download DynamoDB Local run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb-local/dynamodb_local_latest.tar.gz + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local From cc831f226b8f739a84a602f44b02f2104923723e Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Fri, 10 Oct 2025 20:26:39 -0400 Subject: [PATCH 08/20] m --- .github/workflows/ci_test_go.yml | 29 +++++++++++++------ .github/workflows/ci_test_vector_java.yml | 24 ++++++++++++--- .github/workflows/ci_test_vector_net.yml | 24 ++++++++++++--- .../dafny_interop_test_vector_java.yml | 24 ++++++++++++--- .../dafny_interop_test_vector_net.yml | 25 +++++++++++++--- .github/workflows/library_rust_tests.yml | 22 ++++++++++++-- 6 files changed, 120 insertions(+), 28 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 59dc9cd928..51312f0762 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -36,16 +36,27 @@ jobs: id-token: write contents: read steps: - - name: Setup Docker - if: matrix.os == 'macos-14' && matrix.library == 'TestVectors' - uses: douglascamata/setup-docker-macos-action@v1-alpha - - - name: Setup DynamoDB Local - if: matrix.library == 'TestVectors' - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Support longpaths run: | diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 1d3add030a..be6902353e 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,11 +39,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index de5622ac3e..6a910d96ff 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,11 +35,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 5722168e06..9ea5af7c69 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -37,11 +37,27 @@ jobs: id-token: write contents: read steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 35b4bf31f5..b7e7107888 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -33,11 +33,28 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - name: Setup DynamoDB Local - uses: rrainn/dynamodb-action@v4.0.0 + - name: Install Java + uses: actions/setup-java@v5 with: - port: 8000 - cors: "*" + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java + + - name: Download DynamoDB Local + run: | + wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz + tar -xf dynamodb_local_latest.tar.gz + + - name: Start DynamoDB Local + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + # The & runs the Java process in the background. + + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done + - name: Support longpaths on Git checkout run: | git config --global core.longpaths true diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 6c3cb035b4..9ab01f98f9 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -37,8 +37,8 @@ jobs: - name: Install Java uses: actions/setup-java@v5 with: - distribution: 'corretto' - java-version: '11' # DynamoDB Local requires Java + distribution: "corretto" + java-version: "11" # DynamoDB Local requires Java - name: Download DynamoDB Local run: | @@ -46,7 +46,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -127,12 +127,20 @@ jobs: cp runtimes/java/*.json runtimes/rust/ - name: Test ${{ matrix.library }} Rust + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | make test_rust - name: Test ${{ matrix.library }} Rust Fips + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }}/runtimes/rust/ run: | @@ -140,6 +148,10 @@ jobs: - name: Test ${{ matrix.library }} Rust Debug if: ${{ matrix.library != 'TestVectors' }} + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | @@ -147,6 +159,10 @@ jobs: - name: Test Examples for Rust in ${{ matrix.library }} if: ${{ matrix.library == 'DynamoDbEncryption' }} + env: + AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' + AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' + AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK working-directory: ./${{ matrix.library }}/runtimes/rust/ shell: bash run: | From 5f23731d6d95ae556e0f91757689fb33fbfebc26 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 07:42:31 -0400 Subject: [PATCH 09/20] m --- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 2 +- .../dafny_interop_test_vector_java.yml | 2 +- .../dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 30 +++++-------------- .../dafny/DDBEncryption/src/TestVectors.dfy | 7 ++++- 7 files changed, 18 insertions(+), 29 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 51312f0762..ee29e30aeb 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -48,7 +48,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index be6902353e..54f16efbdf 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -51,7 +51,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 6a910d96ff..a6bf0291b9 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 9ea5af7c69..590b1c565a 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -49,7 +49,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index b7e7107888..6698f29eef 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -45,7 +45,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 9ab01f98f9..69942be05d 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -49,13 +49,6 @@ jobs: run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - - name: Support longpaths on Git checkout run: | git config --global core.longpaths true @@ -73,6 +66,13 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Rust-Tests + - name: Wait for DynamoDB Local + run: | + echo "Waiting for DynamoDB Local to start..." + until curl -s http://localhost:8000; do + sleep 1 + done + - name: Setup Rust Toolchain for GitHub CI uses: actions-rust-lang/setup-rust-toolchain@v1 with: @@ -127,20 +127,12 @@ jobs: cp runtimes/java/*.json runtimes/rust/ - name: Test ${{ matrix.library }} Rust - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | make test_rust - name: Test ${{ matrix.library }} Rust Fips - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }}/runtimes/rust/ run: | @@ -148,10 +140,6 @@ jobs: - name: Test ${{ matrix.library }} Rust Debug if: ${{ matrix.library != 'TestVectors' }} - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK shell: bash working-directory: ./${{ matrix.library }} run: | @@ -159,10 +147,6 @@ jobs: - name: Test Examples for Rust in ${{ matrix.library }} if: ${{ matrix.library == 'DynamoDbEncryption' }} - env: - AWS_ACCESS_KEY_ID: 'DUMMY_KEY_ID' - AWS_SECRET_ACCESS_KEY: 'DUMMY_SECRET_KEY' - AWS_ENDPOINT_URL_DYNAMODB: 'http://localhost:8000' # This is key for the Rust SDK working-directory: ./${{ matrix.library }}/runtimes/rust/ shell: bash run: | diff --git a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy index 86f42525c6..bcfb4e79d5 100644 --- a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy +++ b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy @@ -369,7 +369,12 @@ module {:options "-functionSyntax:4"} DdbEncryptionTestVectors { modifies client.Modifies { DeleteTable(client); - var _ :- expect client.CreateTable(schemaOnEncrypt); + // var _ :- expect client.CreateTable(schemaOnEncrypt); + var xxx := client.CreateTable(schemaOnEncrypt); + if xxx.Failure? { + print "***\n", xxx, "\n***\n"; + expect false; + } for i := 0 to |records| { var input := DDB.PutItemInput( TableName := TableName, From 9a50766cf099ac654d2348cd9158bbe8a4caa1cc Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:10:57 -0400 Subject: [PATCH 10/20] m --- .../dafny_interop_test_vector_java.yml | 34 +++++++++++++------ 1 file changed, 23 insertions(+), 11 deletions(-) diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 590b1c565a..5ef6ae527d 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -37,6 +37,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -49,22 +56,27 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + run: | + java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 + for i in {1..30}; do + if curl -s -f http://localhost:8000 > /dev/null 2>&1; then + echo "DynamoDB Local is ready" + break + fi + echo "Attempt $i: DynamoDB Local not ready yet..." + sleep 2 done - - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests + # Verify it's actually working + curl -X POST http://localhost:8000 \ + -H "Content-Type: application/x-amz-json-1.0" \ + -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 with: From bbe9aedaafe5ff849eba608dab1c541ff89dfa02 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:17:50 -0400 Subject: [PATCH 11/20] m --- .github/workflows/ci_test_vector_java.yml | 34 +++++++++++++++-------- 1 file changed, 23 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 54f16efbdf..0ae6450ccb 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -39,6 +39,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -51,22 +58,27 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + run: | + java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 + for i in {1..30}; do + if curl -s -f http://localhost:8000 > /dev/null 2>&1; then + echo "DynamoDB Local is ready" + break + fi + echo "Attempt $i: DynamoDB Local not ready yet..." + sleep 2 done - - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests + # Verify it's actually working + curl -X POST http://localhost:8000 \ + -H "Content-Type: application/x-amz-json-1.0" \ + -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 with: From 0870f3ee59ab18cc65c1ffc73f9a9da532000fbd Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:26:46 -0400 Subject: [PATCH 12/20] m --- .github/workflows/ci_test_go.yml | 2 +- .github/workflows/ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/dafny_interop_test_vector_java.yml | 2 +- .github/workflows/dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index ee29e30aeb..935058452f 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -48,7 +48,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 6946a54b52..47d6a8ce44 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -119,7 +119,7 @@ jobs: working-directory: ./TestVectors run: | # Spin up ddb local - docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -inMemory -cors * + docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -noAuth -inMemory -cors * # Run transpile by itself so we don't locally build the MPL. make transpile_implementation_java make transpile_test_java diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 0ae6450ccb..8f64ae2ed5 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -60,7 +60,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index a6bf0291b9..3a24080dfe 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 5ef6ae527d..3b7d04690d 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -58,7 +58,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 6698f29eef..5a5117b65a 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -45,7 +45,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Wait for DynamoDB Local diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 69942be05d..cf74b43b4d 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -46,7 +46,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & # The & runs the Java process in the background. - name: Support longpaths on Git checkout From 0ccf143bd914b692c06988fb64b26335531960b4 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 08:35:24 -0400 Subject: [PATCH 13/20] m --- .github/workflows/dafny_interop_test_vector_java.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 3b7d04690d..d6cb92d7aa 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -58,7 +58,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local @@ -72,10 +72,12 @@ jobs: echo "Attempt $i: DynamoDB Local not ready yet..." sleep 2 done - # Verify it's actually working + # Verify it's actually working with dummy credentials curl -X POST http://localhost:8000 \ -H "Content-Type: application/x-amz-json-1.0" \ -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ + -H "Authorization: AWS4-HMAC-SHA256 Credential=dummy/20230101/us-east-1/dynamodb/aws4_request, SignedHeaders=host;x-amz-date, Signature=dummy" \ + -H "X-Amz-Date: 20230101T000000Z" \ -d '{}' || (cat dynamodb-local.log && exit 1) - uses: actions/checkout@v3 From fd4f6e4bf8b0137ad48a2a996721addb4c5aa2ed Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 09:17:01 -0400 Subject: [PATCH 14/20] m --- .github/workflows/ci_test_go.yml | 16 +++--- .../ci_test_latest_released_mpl_java.yml | 10 +--- .github/workflows/ci_test_vector_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 16 +++--- .../dafny_interop_test_vector_java.yml | 52 +++---------------- .../dafny_interop_test_vector_net.yml | 34 ++---------- .github/workflows/library_rust_tests.yml | 16 +++--- 7 files changed, 40 insertions(+), 106 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 935058452f..0645bd5c2a 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -36,6 +36,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v5 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Java-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -48,7 +55,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -62,13 +69,6 @@ jobs: run: | git config --global core.longpaths true - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 with: submodules: recursive diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 47d6a8ce44..79b193440f 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -47,14 +47,8 @@ jobs: with: submodules: recursive - - name: Setup Java 8 - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: 8 - - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v5 + uses: actions/setup-java@v4 with: distribution: "corretto" java-version: ${{ matrix.java-version }} @@ -119,7 +113,7 @@ jobs: working-directory: ./TestVectors run: | # Spin up ddb local - docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -noAuth -inMemory -cors * + docker run --name dynamodb -d -p 8000:8000 amazon/dynamodb-local -jar DynamoDBLocal.jar -port 8000 -inMemory -cors * # Run transpile by itself so we don't locally build the MPL. make transpile_implementation_java make transpile_test_java diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 8f64ae2ed5..533638c41f 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -60,7 +60,7 @@ jobs: - name: Start DynamoDB Local run: | java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -noAuth > dynamodb-local.log 2>&1 & + -inMemory -sharedDb -port 8000 -cors '*' > dynamodb-local.log 2>&1 & echo $! > dynamodb-local.pid - name: Wait for DynamoDB Local diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 3a24080dfe..6791e923c6 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -35,6 +35,13 @@ jobs: id-token: write contents: read steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v5 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-DotNet-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -47,7 +54,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Wait for DynamoDB Local @@ -57,13 +64,6 @@ jobs: sleep 1 done - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-DotNet-Tests - - uses: actions/checkout@v3 with: submodules: recursive diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index d6cb92d7aa..1d29bf32f7 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -27,7 +27,7 @@ jobs: strategy: matrix: library: [TestVectors] - java-version: [8, 11, 17, 19] + java-version: [8, 11, 16, 17] os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, @@ -37,6 +37,12 @@ jobs: id-token: write contents: read steps: + - name: Setup DynamoDB Local + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" + - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@v4 with: @@ -44,42 +50,6 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: | - java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 > dynamodb-local.log 2>&1 & - echo $! > dynamodb-local.pid - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - for i in {1..30}; do - if curl -s -f http://localhost:8000 > /dev/null 2>&1; then - echo "DynamoDB Local is ready" - break - fi - echo "Attempt $i: DynamoDB Local not ready yet..." - sleep 2 - done - # Verify it's actually working with dummy credentials - curl -X POST http://localhost:8000 \ - -H "Content-Type: application/x-amz-json-1.0" \ - -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ - -H "Authorization: AWS4-HMAC-SHA256 Credential=dummy/20230101/us-east-1/dynamodb/aws4_request, SignedHeaders=host;x-amz-date, Signature=dummy" \ - -H "X-Amz-Date: 20230101T000000Z" \ - -d '{}' || (cat dynamodb-local.log && exit 1) - - uses: actions/checkout@v3 with: submodules: recursive @@ -98,14 +68,8 @@ jobs: git submodule update --init --recursive git rev-parse HEAD - - name: Setup Java 8 - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: 8 - - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v5 + uses: actions/setup-java@v4 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index 5a5117b65a..bc8500c3de 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -33,28 +33,11 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - name: Install Java - uses: actions/setup-java@v5 + - name: Setup DynamoDB Local + uses: rrainn/dynamodb-action@v4.0.0 with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & - # The & runs the Java process in the background. - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - + port: 8000 + cors: "*" - name: Support longpaths on Git checkout run: | git config --global core.longpaths true @@ -64,17 +47,10 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@v4 with: dotnet-version: ${{ matrix.dotnet-version }} - - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' - run: | - brew install openssl@3 - echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV - echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup MPL Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index cf74b43b4d..620b072991 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -34,6 +34,13 @@ jobs: env: RUST_MIN_STACK: 838860800 steps: + - name: Configure AWS Credentials + uses: aws-actions/configure-aws-credentials@v4 + with: + aws-region: us-west-2 + role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 + role-session-name: DDBEC-Dafny-Rust-Tests + - name: Install Java uses: actions/setup-java@v5 with: @@ -46,7 +53,7 @@ jobs: tar -xf dynamodb_local_latest.tar.gz - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb -noAuth & + run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & # The & runs the Java process in the background. - name: Support longpaths on Git checkout @@ -59,13 +66,6 @@ jobs: git submodule update --init --recursive submodules/smithy-dafny git submodule update --init --recursive submodules/MaterialProviders - - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 - with: - aws-region: us-west-2 - role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 - role-session-name: DDBEC-Dafny-Rust-Tests - - name: Wait for DynamoDB Local run: | echo "Waiting for DynamoDB Local to start..." From 7b8ff102b63e97764e783d245423030bf31f7c5d Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 10:05:55 -0400 Subject: [PATCH 15/20] m --- .github/workflows/ci_test_vector_java.yml | 43 ++++++----------------- 1 file changed, 10 insertions(+), 33 deletions(-) diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index 533638c41f..ae9c4e2dee 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -32,7 +32,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-14, + macos-15-intel, ] runs-on: ${{ matrix.os }} permissions: @@ -46,39 +46,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Start DynamoDB Local - run: | - java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar \ - -inMemory -sharedDb -port 8000 -cors '*' > dynamodb-local.log 2>&1 & - echo $! > dynamodb-local.pid - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - for i in {1..30}; do - if curl -s -f http://localhost:8000 > /dev/null 2>&1; then - echo "DynamoDB Local is ready" - break - fi - echo "Attempt $i: DynamoDB Local not ready yet..." - sleep 2 - done - # Verify it's actually working - curl -X POST http://localhost:8000 \ - -H "Content-Type: application/x-amz-json-1.0" \ - -H "X-Amz-Target: DynamoDB_20120810.ListTables" \ - -d '{}' || (cat dynamodb-local.log && exit 1) + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - uses: actions/checkout@v3 with: From b1a7740e25056858850b5098b7f34bd71aa0b4f3 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:07:38 -0400 Subject: [PATCH 16/20] m --- .github/workflows/ci_test_go.yml | 31 ++++++------------- .../ci_test_latest_released_mpl_java.yml | 2 +- .github/workflows/ci_test_vector_net.yml | 31 ++++++------------- .../dafny_interop_test_vector_java.yml | 2 +- .../dafny_interop_test_vector_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 22 ++++++------- 6 files changed, 32 insertions(+), 58 deletions(-) diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 0645bd5c2a..784e905736 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -29,7 +29,7 @@ jobs: fail-fast: false matrix: library: [DynamoDbEncryption, TestVectors] - os: [ubuntu-22.04, macos-14] + os: [ubuntu-22.04, macos-15-intel] go-version: ["1.23", "1.24", "1.25"] runs-on: ${{ matrix.os }} permissions: @@ -43,27 +43,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - name: Support longpaths run: | diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 79b193440f..99edd54b50 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -48,7 +48,7 @@ jobs: submodules: recursive - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 6791e923c6..d35a99d4be 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -28,7 +28,7 @@ jobs: os: [ # Run on ubuntu image that comes pre-configured with docker ubuntu-22.04, - macos-14, + macos-15-intel, ] runs-on: ${{ matrix.os }} permissions: @@ -42,27 +42,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-DotNet-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java - - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. - - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - uses: actions/checkout@v3 with: diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 1d29bf32f7..9930d52345 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -69,7 +69,7 @@ jobs: git rev-parse HEAD - name: Setup Java ${{ matrix.java-version }} - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: "corretto" java-version: ${{ matrix.java-version }} diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index bc8500c3de..e58d1eb560 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -47,7 +47,7 @@ jobs: fetch-depth: 0 - name: Setup .NET Core SDK ${{ matrix.dotnet-version }} - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ matrix.dotnet-version }} diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 620b072991..2d62e0554a 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -41,20 +41,16 @@ jobs: role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Rust-Tests - - name: Install Java - uses: actions/setup-java@v5 - with: - distribution: "corretto" - java-version: "11" # DynamoDB Local requires Java + - name: Setup Docker + if: matrix.os == 'macos-15-intel' && matrix.library == 'TestVectors' + uses: douglascamata/setup-docker-macos-action@v1.0.1 - - name: Download DynamoDB Local - run: | - wget https://dynamodb-local.s3.amazonaws.com/dynamodb_local_latest.tar.gz - tar -xf dynamodb_local_latest.tar.gz - - - name: Start DynamoDB Local - run: java -Djava.library.path=./DynamoDBLocal_lib -jar DynamoDBLocal.jar -inMemory -sharedDb & - # The & runs the Java process in the background. + - name: Setup DynamoDB Local + if: matrix.library == 'TestVectors' + uses: rrainn/dynamodb-action@v4.0.0 + with: + port: 8000 + cors: "*" - name: Support longpaths on Git checkout run: | From b9fad682831efc958ec77f3fbea3c1f806497412 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:27:47 -0400 Subject: [PATCH 17/20] m --- .github/workflows/check-files.yml | 2 +- .github/workflows/check_only_key_word.yml | 2 +- .github/workflows/ci_codegen.yml | 2 +- .github/workflows/ci_duvet.yml | 2 +- .github/workflows/ci_examples_java.yml | 4 ++-- .github/workflows/ci_examples_net.yml | 4 ++-- .github/workflows/ci_static_analysis.yml | 2 +- .github/workflows/ci_test_go.yml | 4 ++-- .github/workflows/ci_test_java.yml | 4 ++-- .../workflows/ci_test_latest_released_mpl_java.yml | 4 ++-- .github/workflows/ci_test_net.yml | 11 +++++++++-- .github/workflows/ci_test_vector_java.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/ci_todos.yml | 2 +- .github/workflows/dafny_interop_examples_java.yml | 4 ++-- .github/workflows/dafny_interop_examples_net.yml | 4 ++-- .github/workflows/dafny_interop_java.yml | 4 ++-- .github/workflows/dafny_interop_test_net.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_java.yml | 4 ++-- .github/workflows/dafny_interop_test_vector_net.yml | 4 ++-- .github/workflows/dafny_verify_version.yml | 2 +- .github/workflows/dafny_version.yml | 2 +- .github/workflows/go-release.yml | 4 ++-- .github/workflows/library_dafny_verification.yml | 2 +- .github/workflows/library_format.yml | 2 +- .github/workflows/library_rust_tests.yml | 4 ++-- .github/workflows/mpl_dependency_java_version.yml | 2 +- .github/workflows/mpl_head_version.yml | 2 +- .github/workflows/nightly.yml | 2 +- .github/workflows/sem_ver.yml | 6 +++--- .github/workflows/semantic_release.yml | 4 ++-- .github/workflows/smithy-diff.yml | 2 +- .github/workflows/test_vector_verification.yml | 2 +- 33 files changed, 58 insertions(+), 51 deletions(-) diff --git a/.github/workflows/check-files.yml b/.github/workflows/check-files.yml index 59f613d0cf..c8dfdb37f1 100644 --- a/.github/workflows/check-files.yml +++ b/.github/workflows/check-files.yml @@ -16,7 +16,7 @@ jobs: # to add more allowlisted approvers just modify this env variable maintainers: seebees, texastony, ShubhamChaturvedi7, lucasmcdonald3, josecorella, imabhichow, rishav-karanjit, antonf-amzn, kessplas, ajewellamz, RitvikKapila steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/check_only_key_word.yml b/.github/workflows/check_only_key_word.yml index 4a8a5c9f3f..66d03fcc52 100644 --- a/.github/workflows/check_only_key_word.yml +++ b/.github/workflows/check_only_key_word.yml @@ -13,7 +13,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/ci_codegen.yml b/.github/workflows/ci_codegen.yml index 7aca0fffd6..ece6e8709b 100644 --- a/.github/workflows/ci_codegen.yml +++ b/.github/workflows/ci_codegen.yml @@ -31,7 +31,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive - run: git submodule update --init --recursive submodules/smithy-dafny diff --git a/.github/workflows/ci_duvet.yml b/.github/workflows/ci_duvet.yml index 7bceb87b5e..9b8273df79 100644 --- a/.github/workflows/ci_duvet.yml +++ b/.github/workflows/ci_duvet.yml @@ -13,7 +13,7 @@ jobs: duvet: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Install duvet shell: bash diff --git a/.github/workflows/ci_examples_java.yml b/.github/workflows/ci_examples_java.yml index 9f516bd0ac..c5efc2f03c 100644 --- a/.github/workflows/ci_examples_java.yml +++ b/.github/workflows/ci_examples_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 5585a760d1..6477b5d0aa 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -36,7 +36,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -83,7 +83,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml index fb0ec37792..b587fcd7e3 100644 --- a/.github/workflows/ci_static_analysis.yml +++ b/.github/workflows/ci_static_analysis.yml @@ -11,6 +11,6 @@ jobs: not-grep: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v5 - name: not-grep uses: mattsb42-meta/not-grep@1.0.0 diff --git a/.github/workflows/ci_test_go.yml b/.github/workflows/ci_test_go.yml index 784e905736..e9dc77a4ac 100644 --- a/.github/workflows/ci_test_go.yml +++ b/.github/workflows/ci_test_go.yml @@ -58,7 +58,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -95,7 +95,7 @@ jobs: with: go-version: ${{ matrix.go-version }} - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Init Submodules shell: bash run: | diff --git a/.github/workflows/ci_test_java.yml b/.github/workflows/ci_test_java.yml index f620494c14..e48506bdcc 100644 --- a/.github/workflows/ci_test_java.yml +++ b/.github/workflows/ci_test_java.yml @@ -37,13 +37,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_latest_released_mpl_java.yml b/.github/workflows/ci_test_latest_released_mpl_java.yml index 99edd54b50..0bf6aa2618 100644 --- a/.github/workflows/ci_test_latest_released_mpl_java.yml +++ b/.github/workflows/ci_test_latest_released_mpl_java.yml @@ -37,13 +37,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index ef19c2bd64..1b0b421cd5 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -37,7 +37,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive @@ -53,6 +53,13 @@ jobs: echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup .NET OpenSSL on Mac + if: matrix.os == 'macos-14' && matrix.language == 'net' + run: | + brew install openssl@3 + echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV + echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV + - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: @@ -84,7 +91,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/ci_test_vector_java.yml b/.github/workflows/ci_test_vector_java.yml index ae9c4e2dee..02b66f4916 100644 --- a/.github/workflows/ci_test_vector_java.yml +++ b/.github/workflows/ci_test_vector_java.yml @@ -40,7 +40,7 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 @@ -57,7 +57,7 @@ jobs: port: 8000 cors: "*" - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index d35a99d4be..19706bf6d5 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -53,7 +53,7 @@ jobs: port: 8000 cors: "*" - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/ci_todos.yml b/.github/workflows/ci_todos.yml index 736feb599f..9395425689 100644 --- a/.github/workflows/ci_todos.yml +++ b/.github/workflows/ci_todos.yml @@ -11,7 +11,7 @@ jobs: findTodos: runs-on: macos-14 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Check TODOs in code shell: bash diff --git a/.github/workflows/dafny_interop_examples_java.yml b/.github/workflows/dafny_interop_examples_java.yml index acfeefce74..11b6c93218 100644 --- a/.github/workflows/dafny_interop_examples_java.yml +++ b/.github/workflows/dafny_interop_examples_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index e4caba31f2..fbf711beb1 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -36,7 +36,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -71,7 +71,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_interop_java.yml b/.github/workflows/dafny_interop_java.yml index 9d71d2a468..b01de2d2dc 100644 --- a/.github/workflows/dafny_interop_java.yml +++ b/.github/workflows/dafny_interop_java.yml @@ -35,13 +35,13 @@ jobs: contents: read steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 225bf2beb3..2c37de55d7 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -36,7 +36,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -71,7 +71,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_interop_test_vector_java.yml b/.github/workflows/dafny_interop_test_vector_java.yml index 9930d52345..dd74c06100 100644 --- a/.github/workflows/dafny_interop_test_vector_java.yml +++ b/.github/workflows/dafny_interop_test_vector_java.yml @@ -44,13 +44,13 @@ jobs: cors: "*" - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: DDBEC-Dafny-Java-Tests - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/dafny_interop_test_vector_net.yml b/.github/workflows/dafny_interop_test_vector_net.yml index e58d1eb560..44fe1ec07d 100644 --- a/.github/workflows/dafny_interop_test_vector_net.yml +++ b/.github/workflows/dafny_interop_test_vector_net.yml @@ -41,7 +41,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 @@ -69,7 +69,7 @@ jobs: run: make setup_net - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 diff --git a/.github/workflows/dafny_verify_version.yml b/.github/workflows/dafny_verify_version.yml index ec9ce95b95..2ba81e5cf7 100644 --- a/.github/workflows/dafny_verify_version.yml +++ b/.github/workflows/dafny_verify_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.dafnyVerifyVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/dafny_version.yml b/.github/workflows/dafny_version.yml index c20e01a43f..c4e1482816 100644 --- a/.github/workflows/dafny_version.yml +++ b/.github/workflows/dafny_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.dafnyVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/go-release.yml b/.github/workflows/go-release.yml index 9b87b3497c..df7a851b40 100644 --- a/.github/workflows/go-release.yml +++ b/.github/workflows/go-release.yml @@ -31,14 +31,14 @@ jobs: # KMS and MPL tests need to use credentials which can call KMS - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 role-session-name: GoRelease-DBESDK-Tests - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/library_dafny_verification.yml b/.github/workflows/library_dafny_verification.yml index c55ad63a0c..97b4351370 100644 --- a/.github/workflows/library_dafny_verification.yml +++ b/.github/workflows/library_dafny_verification.yml @@ -48,7 +48,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/library_format.yml b/.github/workflows/library_format.yml index f6dd42ee95..69396630ae 100644 --- a/.github/workflows/library_format.yml +++ b/.github/workflows/library_format.yml @@ -32,7 +32,7 @@ jobs: run: | git config --global core.longpaths true - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 2d62e0554a..81175cafcf 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -35,7 +35,7 @@ jobs: RUST_MIN_STACK: 838860800 steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2 @@ -55,7 +55,7 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 - name: Init Submodules shell: bash run: | diff --git a/.github/workflows/mpl_dependency_java_version.yml b/.github/workflows/mpl_dependency_java_version.yml index 640b82e330..607f620d72 100644 --- a/.github/workflows/mpl_dependency_java_version.yml +++ b/.github/workflows/mpl_dependency_java_version.yml @@ -16,7 +16,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.mplDependencyJavaVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 - name: Read version from Properties-file id: read_property uses: christian-draeger/read-properties@1.1.1 diff --git a/.github/workflows/mpl_head_version.yml b/.github/workflows/mpl_head_version.yml index 0d32688fbe..2e6a953e3d 100644 --- a/.github/workflows/mpl_head_version.yml +++ b/.github/workflows/mpl_head_version.yml @@ -22,7 +22,7 @@ jobs: outputs: version: ${{ steps.read_property.outputs.mplVersion }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index eb4bc6e206..20685555d4 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -81,7 +81,7 @@ jobs: steps: # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 diff --git a/.github/workflows/sem_ver.yml b/.github/workflows/sem_ver.yml index 2c2ab4e0f5..3f9c6fcee6 100644 --- a/.github/workflows/sem_ver.yml +++ b/.github/workflows/sem_ver.yml @@ -14,13 +14,13 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v4 + - uses: actions/checkout@v5 with: submodules: recursive # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 @@ -48,6 +48,6 @@ jobs: # Test to see if we can setup semantic release - name: Test Semantic Release Installation - uses: actions/checkout@v4 + uses: actions/checkout@v5 - run: | make setup_semantic_release diff --git a/.github/workflows/semantic_release.yml b/.github/workflows/semantic_release.yml index 2c958781f9..52f0680de7 100644 --- a/.github/workflows/semantic_release.yml +++ b/.github/workflows/semantic_release.yml @@ -23,13 +23,13 @@ jobs: - name: Support longpaths on Git checkout run: | git config --global core.longpaths true - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 # We only pull in the submodules we need to build the library - run: git submodule update --init libraries # We need access to the role that is able to get CI Bot Creds - name: Configure AWS Credentials for Release - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v5 with: aws-region: us-west-2 role-to-assume: arn:aws:iam::587316601012:role/GitHub-CI-CI-Bot-Credential-Access-Role-us-west-2 diff --git a/.github/workflows/smithy-diff.yml b/.github/workflows/smithy-diff.yml index df756f6a2b..c1f44c73e7 100644 --- a/.github/workflows/smithy-diff.yml +++ b/.github/workflows/smithy-diff.yml @@ -13,7 +13,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: fetch-depth: 0 diff --git a/.github/workflows/test_vector_verification.yml b/.github/workflows/test_vector_verification.yml index c99f745eb7..7c41aa82dd 100644 --- a/.github/workflows/test_vector_verification.yml +++ b/.github/workflows/test_vector_verification.yml @@ -38,7 +38,7 @@ jobs: DOTNET_CLI_TELEMETRY_OPTOUT: 1 DOTNET_NOLOGO: 1 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v5 with: submodules: recursive From fc536fb95aaacde698d48d4cbb3e7d9328720948 Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 11:59:23 -0400 Subject: [PATCH 18/20] m --- .github/workflows/ci_examples_net.yml | 2 +- .github/workflows/ci_test_net.yml | 4 ++-- .github/workflows/ci_test_vector_net.yml | 2 +- .github/workflows/dafny_interop_examples_net.yml | 2 +- .github/workflows/dafny_interop_test_net.yml | 2 +- .github/workflows/library_rust_tests.yml | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci_examples_net.yml b/.github/workflows/ci_examples_net.yml index 6477b5d0aa..07a0884cad 100644 --- a/.github/workflows/ci_examples_net.yml +++ b/.github/workflows/ci_examples_net.yml @@ -46,7 +46,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 1b0b421cd5..3dcfdd6ccd 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -47,14 +47,14 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/ci_test_vector_net.yml b/.github/workflows/ci_test_vector_net.yml index 19706bf6d5..d0597b3996 100644 --- a/.github/workflows/ci_test_vector_net.yml +++ b/.github/workflows/ci_test_vector_net.yml @@ -89,7 +89,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-15-intel' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/dafny_interop_examples_net.yml b/.github/workflows/dafny_interop_examples_net.yml index fbf711beb1..c74945edcc 100644 --- a/.github/workflows/dafny_interop_examples_net.yml +++ b/.github/workflows/dafny_interop_examples_net.yml @@ -47,7 +47,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/dafny_interop_test_net.yml b/.github/workflows/dafny_interop_test_net.yml index 2c37de55d7..79d4597308 100644 --- a/.github/workflows/dafny_interop_test_net.yml +++ b/.github/workflows/dafny_interop_test_net.yml @@ -47,7 +47,7 @@ jobs: dotnet-version: ${{ matrix.dotnet-version }} - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' && matrix.language == 'net' + if: matrix.os == 'macos-14' run: | brew install openssl@3 echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 81175cafcf..9a0691e319 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -26,7 +26,7 @@ jobs: matrix: library: [DynamoDbEncryption, TestVectors] # removed windows-latest because somehow it can't build aws-lc in CI - os: [ubuntu-22.04, macos-14] + os: [ubuntu-22.04, macos-15-intel] runs-on: ${{ matrix.os }} permissions: id-token: write From 4b6792984b55229a2f7e025e7e3a077d0f59868b Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 14:51:10 -0400 Subject: [PATCH 19/20] m --- .github/workflows/library_rust_tests.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/.github/workflows/library_rust_tests.yml b/.github/workflows/library_rust_tests.yml index 9a0691e319..fa5bb51d47 100644 --- a/.github/workflows/library_rust_tests.yml +++ b/.github/workflows/library_rust_tests.yml @@ -62,13 +62,6 @@ jobs: git submodule update --init --recursive submodules/smithy-dafny git submodule update --init --recursive submodules/MaterialProviders - - name: Wait for DynamoDB Local - run: | - echo "Waiting for DynamoDB Local to start..." - until curl -s http://localhost:8000; do - sleep 1 - done - - name: Setup Rust Toolchain for GitHub CI uses: actions-rust-lang/setup-rust-toolchain@v1 with: From dcd08c412b737b30361dad4bb4303011d481bbec Mon Sep 17 00:00:00 2001 From: Andy Jewell Date: Sat, 11 Oct 2025 15:25:50 -0400 Subject: [PATCH 20/20] m --- .github/workflows/ci_test_net.yml | 7 ------- TestVectors/dafny/DDBEncryption/src/TestVectors.dfy | 7 +------ 2 files changed, 1 insertion(+), 13 deletions(-) diff --git a/.github/workflows/ci_test_net.yml b/.github/workflows/ci_test_net.yml index 3dcfdd6ccd..91485ed9ff 100644 --- a/.github/workflows/ci_test_net.yml +++ b/.github/workflows/ci_test_net.yml @@ -53,13 +53,6 @@ jobs: echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup .NET OpenSSL on Mac - if: matrix.os == 'macos-14' - run: | - brew install openssl@3 - echo "DYLD_LIBRARY_PATH=$(brew --prefix openssl@3)/lib" >> $GITHUB_ENV - echo "DOTNET_CRYPTO_ENGINE_ADAPTER=System.Security.Cryptography.Algorithms.Managed" >> $GITHUB_ENV - - name: Setup Dafny uses: ./submodules/MaterialProviders/.github/actions/setup_dafny/ with: diff --git a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy index bcfb4e79d5..86f42525c6 100644 --- a/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy +++ b/TestVectors/dafny/DDBEncryption/src/TestVectors.dfy @@ -369,12 +369,7 @@ module {:options "-functionSyntax:4"} DdbEncryptionTestVectors { modifies client.Modifies { DeleteTable(client); - // var _ :- expect client.CreateTable(schemaOnEncrypt); - var xxx := client.CreateTable(schemaOnEncrypt); - if xxx.Failure? { - print "***\n", xxx, "\n***\n"; - expect false; - } + var _ :- expect client.CreateTable(schemaOnEncrypt); for i := 0 to |records| { var input := DDB.PutItemInput( TableName := TableName,