@cloudsnorkel/cdk-github-runners 0.8.0 → 0.8.2

package/README.md

@@ -124,7 +124,7 @@ const myBuilder = new CodeBuildImageBuilder(this, 'image builder', {
 });
 myBuilder.setBuildArg('EXTRA_PACKAGES', 'nginx xz-utils');
 
-const myProvider = new FargateRunner(this, 'fargate runner', {
+const myProvider = new FargateRunnerProvider(this, 'fargate runner', {
   label: 'customized-fargate',
   vpc: vpc,
   securityGroup: runnerSg,
@@ -171,7 +171,7 @@ myWindowsBuilder.addComponent(new ImageBuilderComponent(this, 'Ninja Component',
   }
 ));
 
-const myProvider = new FargateRunner(this, 'fargate runner', {
+const myProvider = new FargateRunnerProvider(this, 'fargate runner', {
   label: 'customized-windows-fargate',
   vpc: vpc,
   securityGroup: runnerSg,

package/{lib/providers → assets}/docker-images/lambda/linux-arm64/runner.sh

@@ -4,7 +4,7 @@ set -e -u -o pipefail
 
 cp -r /runner /tmp/
 cd /tmp/runner
-mkdir /tmp/home
+mkdir -p /tmp/home
 export HOME=/tmp/home
 
 if [ "${RUNNER_VERSION}" = "latest" ]; then RUNNER_FLAGS=""; else RUNNER_FLAGS="--disableupdate"; fi

package/{lib/providers → assets}/docker-images/lambda/linux-x64/runner.sh

@@ -4,7 +4,7 @@ set -e -u -o pipefail
 
 cp -r /runner /tmp/
 cd /tmp/runner
-mkdir /tmp/home
+mkdir -p /tmp/home
 export HOME=/tmp/home
 
 if [ "${RUNNER_VERSION}" = "latest" ]; then RUNNER_FLAGS=""; else RUNNER_FLAGS="--disableupdate"; fi

package/{lib/lambdas/aws-image-builder-versioner → assets/lambdas/aws-image-builder-versioner.lambda}/index.js

@@ -2392,12 +2392,12 @@ var require_semver2 = __commonJS({
   }
 });
 
-// src/lambdas/aws-image-builder-versioner/index.ts
-var aws_image_builder_versioner_exports = {};
-__export(aws_image_builder_versioner_exports, {
+// src/lambdas/aws-image-builder-versioner.lambda.ts
+var aws_image_builder_versioner_lambda_exports = {};
+__export(aws_image_builder_versioner_lambda_exports, {
   handler: () => handler
 });
-module.exports = __toCommonJS(aws_image_builder_versioner_exports);
+module.exports = __toCommonJS(aws_image_builder_versioner_lambda_exports);
 var AWS2 = __toESM(require("aws-sdk"));
 var import_semver = __toESM(require_semver2());
 
@@ -2438,7 +2438,7 @@ async function customResourceRespond(event, responseStatus, reason, physicalReso
   });
 }
 
-// src/lambdas/aws-image-builder-versioner/index.ts
+// src/lambdas/aws-image-builder-versioner.lambda.ts
 var ib = new AWS2.Imagebuilder();
 async function handler(event, context) {
   console.log(JSON.stringify({ ...event, ResponseURL: "..." }));

package/{lib/lambdas/build-image → assets/lambdas/build-image.lambda}/index.js

@@ -27,12 +27,12 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
-// src/lambdas/build-image/index.ts
-var build_image_exports = {};
-__export(build_image_exports, {
+// src/lambdas/build-image.lambda.ts
+var build_image_lambda_exports = {};
+__export(build_image_lambda_exports, {
   handler: () => handler
 });
-module.exports = __toCommonJS(build_image_exports);
+module.exports = __toCommonJS(build_image_lambda_exports);
 var AWS2 = __toESM(require("aws-sdk"));
 
 // src/lambdas/helpers.ts
@@ -72,7 +72,7 @@ async function customResourceRespond(event, responseStatus, reason, physicalReso
   });
 }
 
-// src/lambdas/build-image/index.ts
+// src/lambdas/build-image.lambda.ts
 var codebuild = new AWS2.CodeBuild();
 var ecr = new AWS2.ECR();
 var ib = new AWS2.Imagebuilder();

package/{lib/lambdas/delete-ami → assets/lambdas/delete-ami.lambda}/index.js

@@ -22,7 +22,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/lambdas/delete-ami/index.ts
+// src/lambdas/delete-ami.lambda.ts
 var AWS2 = __toESM(require("aws-sdk"));
 
 // src/lambdas/helpers.ts
@@ -62,7 +62,7 @@ async function customResourceRespond(event, responseStatus, reason, physicalReso
   });
 }
 
-// src/lambdas/delete-ami/index.ts
+// src/lambdas/delete-ami.lambda.ts
 var ec2 = new AWS2.EC2();
 async function deleteAmis(launchTemplateId, stackName, builderName, deleteAll) {
   var _a;

package/{lib/lambdas/delete-runner → assets/lambdas/delete-runner.lambda}/index.js

@@ -6913,7 +6913,9 @@ var require_lib3 = __commonJS({
           if (signal && signal.aborted) {
             return;
           }
-          destroyStream(response.body, err);
+          if (response && response.body) {
+            destroyStream(response.body, err);
+          }
         });
         if (parseInt(process.version.substring(1)) < 14) {
           req.on("socket", function(s) {
@@ -7689,7 +7691,7 @@ var require_dist_node6 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -7775,7 +7777,7 @@ var require_dist_node8 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8248,7 +8250,7 @@ var require_dist_node10 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -8280,7 +8282,7 @@ var require_dist_node11 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8437,7 +8439,7 @@ var require_dist_node12 = __commonJS({
     var request = require_dist_node11();
     var requestError = require_dist_node7();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.0.4";
+    var VERSION = "2.0.5";
     function requestToOAuthBaseUrl(request2) {
       const endpointDefaults = request2.endpoint.DEFAULTS;
       return /^https:\/\/(api\.)?github\.com$/.test(endpointDefaults.baseUrl) ? "https://github.com" : endpointDefaults.baseUrl.replace("/api/v3", "");
@@ -8796,7 +8798,7 @@ var require_dist_node13 = __commonJS({
       endpoint.headers.authorization = `token ${token}`;
       return request2(endpoint);
     }
-    var VERSION = "4.0.3";
+    var VERSION = "4.0.4";
     function createOAuthDeviceAuth(options) {
       const requestWithDefaults = options.request || request.request.defaults({
         headers: {
@@ -8844,7 +8846,7 @@ var require_dist_node14 = __commonJS({
     var authOauthDevice = require_dist_node13();
     var oauthMethods = require_dist_node12();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.1.0";
+    var VERSION = "2.1.1";
     async function getAuthentication(state) {
       if ("code" in state.strategyOptions) {
         const {
@@ -8901,7 +8903,7 @@ var require_dist_node14 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -19126,7 +19128,7 @@ var require_dist_node17 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -19158,7 +19160,7 @@ var require_dist_node18 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -20088,7 +20090,7 @@ var require_dist_node23 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -20476,7 +20478,7 @@ var require_dist_node24 = __commonJS({
       const repositorySelection = repositorySelectionOptional || "all";
       const repositoryIds = repositories ? repositories.map((r) => r.id) : void 0;
       const repositoryNames = repositories ? repositories.map((repo) => repo.name) : void 0;
-      const createdAt = new Date().toISOString();
+      const createdAt = (/* @__PURE__ */ new Date()).toISOString();
       await set(state.cache, optionsWithInstallationTokenFromState, {
         token,
         createdAt,
@@ -20557,7 +20559,7 @@ var require_dist_node24 = __commonJS({
           if (typeof error.response.headers.date === "undefined") {
             throw error;
           }
-          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse(new Date().toString())) / 1e3);
+          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse((/* @__PURE__ */ new Date()).toString())) / 1e3);
           state.log.warn(error.message);
           state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
           const {
@@ -20590,7 +20592,7 @@ var require_dist_node24 = __commonJS({
       return sendRequestWithRetries(state, request2, endpoint, createdAt);
     }
     async function sendRequestWithRetries(state, request2, options, createdAt, retries = 0) {
-      const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+      const timeSinceTokenCreationInMs = +/* @__PURE__ */ new Date() - +new Date(createdAt);
       try {
         return await request2(options);
       } catch (error) {
@@ -22427,7 +22429,7 @@ async function getOctokit(installationId) {
   };
 }
 
-// src/lambdas/delete-runner/index.ts
+// src/lambdas/delete-runner.lambda.ts
 async function getRunnerId(octokit, owner, repo, name, idleOnly) {
   let page = 1;
   while (true) {

package/{lib/lambdas/setup → assets/lambdas/setup.lambda}/index.js

@@ -7056,7 +7056,9 @@ var require_lib3 = __commonJS({
           if (signal && signal.aborted) {
             return;
           }
-          destroyStream(response2.body, err);
+          if (response2 && response2.body) {
+            destroyStream(response2.body, err);
+          }
         });
         if (parseInt(process.version.substring(1)) < 14) {
           req.on("socket", function(s) {
@@ -9110,7 +9112,7 @@ var require_dist_node12 = __commonJS({
   }
 });
 
-// src/lambdas/setup/index.ts
+// src/lambdas/setup.lambda.ts
 var crypto = __toESM(require("crypto"));
 var fs = __toESM(require("fs"));
 var import_rest = __toESM(require_dist_node12());
@@ -9146,7 +9148,7 @@ function baseUrlFromDomain(domain) {
   return `https://${domain}/api/v3`;
 }
 
-// src/lambdas/setup/index.ts
+// src/lambdas/setup.lambda.ts
 var nonce = crypto.randomBytes(64).toString("hex");
 function getHtml(baseUrl, token, domain) {
   return fs.readFileSync("index.html", "utf-8").replace(/INSERT_WEBHOOK_URL_HERE/g, process.env.WEBHOOK_URL).replace(/INSERT_BASE_URL_HERE/g, baseUrl).replace(/INSERT_TOKEN_HERE/g, token).replace(/INSERT_SECRET_ARN_HERE/g, process.env.SETUP_SECRET_ARN).replace(/INSERT_DOMAIN_HERE/g, domain).replace(/<script/g, `<script nonce="${nonce}"`).replace(/<style/g, `<style nonce="${nonce}"`);

package/{lib/lambdas/status → assets/lambdas/status.lambda}/index.js

@@ -6913,7 +6913,9 @@ var require_lib3 = __commonJS({
           if (signal && signal.aborted) {
             return;
           }
-          destroyStream(response.body, err);
+          if (response && response.body) {
+            destroyStream(response.body, err);
+          }
         });
         if (parseInt(process.version.substring(1)) < 14) {
           req.on("socket", function(s) {
@@ -7689,7 +7691,7 @@ var require_dist_node6 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -7775,7 +7777,7 @@ var require_dist_node8 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8248,7 +8250,7 @@ var require_dist_node10 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -8280,7 +8282,7 @@ var require_dist_node11 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8437,7 +8439,7 @@ var require_dist_node12 = __commonJS({
     var request = require_dist_node11();
     var requestError = require_dist_node7();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.0.4";
+    var VERSION = "2.0.5";
     function requestToOAuthBaseUrl(request2) {
       const endpointDefaults = request2.endpoint.DEFAULTS;
       return /^https:\/\/(api\.)?github\.com$/.test(endpointDefaults.baseUrl) ? "https://github.com" : endpointDefaults.baseUrl.replace("/api/v3", "");
@@ -8796,7 +8798,7 @@ var require_dist_node13 = __commonJS({
       endpoint.headers.authorization = `token ${token}`;
       return request2(endpoint);
     }
-    var VERSION = "4.0.3";
+    var VERSION = "4.0.4";
     function createOAuthDeviceAuth(options) {
       const requestWithDefaults = options.request || request.request.defaults({
         headers: {
@@ -8844,7 +8846,7 @@ var require_dist_node14 = __commonJS({
     var authOauthDevice = require_dist_node13();
     var oauthMethods = require_dist_node12();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.1.0";
+    var VERSION = "2.1.1";
     async function getAuthentication(state) {
       if ("code" in state.strategyOptions) {
         const {
@@ -8901,7 +8903,7 @@ var require_dist_node14 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -19126,7 +19128,7 @@ var require_dist_node17 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -19158,7 +19160,7 @@ var require_dist_node18 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -20088,7 +20090,7 @@ var require_dist_node23 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -20476,7 +20478,7 @@ var require_dist_node24 = __commonJS({
       const repositorySelection = repositorySelectionOptional || "all";
       const repositoryIds = repositories ? repositories.map((r) => r.id) : void 0;
       const repositoryNames = repositories ? repositories.map((repo) => repo.name) : void 0;
-      const createdAt = new Date().toISOString();
+      const createdAt = (/* @__PURE__ */ new Date()).toISOString();
       await set(state.cache, optionsWithInstallationTokenFromState, {
         token,
         createdAt,
@@ -20557,7 +20559,7 @@ var require_dist_node24 = __commonJS({
           if (typeof error.response.headers.date === "undefined") {
             throw error;
           }
-          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse(new Date().toString())) / 1e3);
+          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse((/* @__PURE__ */ new Date()).toString())) / 1e3);
           state.log.warn(error.message);
           state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
           const {
@@ -20590,7 +20592,7 @@ var require_dist_node24 = __commonJS({
       return sendRequestWithRetries(state, request2, endpoint, createdAt);
     }
     async function sendRequestWithRetries(state, request2, options, createdAt, retries = 0) {
-      const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+      const timeSinceTokenCreationInMs = +/* @__PURE__ */ new Date() - +new Date(createdAt);
       try {
         return await request2(options);
       } catch (error) {
@@ -21092,7 +21094,7 @@ var require_dist_node27 = __commonJS({
   }
 });
 
-// src/lambdas/status/index.ts
+// src/lambdas/status.lambda.ts
 var import_auth_app = __toESM(require_dist_node24());
 var import_core = __toESM(require_dist_node27());
 var AWS2 = __toESM(require("aws-sdk"));
@@ -21122,7 +21124,7 @@ function baseUrlFromDomain(domain) {
   return `https://${domain}/api/v3`;
 }
 
-// src/lambdas/status/index.ts
+// src/lambdas/status.lambda.ts
 var cfn = new AWS2.CloudFormation();
 var ec2 = new AWS2.EC2();
 var ecr = new AWS2.ECR();

package/{lib/lambdas/token-retriever → assets/lambdas/token-retriever.lambda}/index.js

@@ -6913,7 +6913,9 @@ var require_lib3 = __commonJS({
           if (signal && signal.aborted) {
             return;
           }
-          destroyStream(response.body, err);
+          if (response && response.body) {
+            destroyStream(response.body, err);
+          }
         });
         if (parseInt(process.version.substring(1)) < 14) {
           req.on("socket", function(s) {
@@ -7689,7 +7691,7 @@ var require_dist_node6 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -7775,7 +7777,7 @@ var require_dist_node8 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8248,7 +8250,7 @@ var require_dist_node10 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -8280,7 +8282,7 @@ var require_dist_node11 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -8437,7 +8439,7 @@ var require_dist_node12 = __commonJS({
     var request = require_dist_node11();
     var requestError = require_dist_node7();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.0.4";
+    var VERSION = "2.0.5";
     function requestToOAuthBaseUrl(request2) {
       const endpointDefaults = request2.endpoint.DEFAULTS;
       return /^https:\/\/(api\.)?github\.com$/.test(endpointDefaults.baseUrl) ? "https://github.com" : endpointDefaults.baseUrl.replace("/api/v3", "");
@@ -8796,7 +8798,7 @@ var require_dist_node13 = __commonJS({
       endpoint.headers.authorization = `token ${token}`;
       return request2(endpoint);
     }
-    var VERSION = "4.0.3";
+    var VERSION = "4.0.4";
     function createOAuthDeviceAuth(options) {
       const requestWithDefaults = options.request || request.request.defaults({
         headers: {
@@ -8844,7 +8846,7 @@ var require_dist_node14 = __commonJS({
     var authOauthDevice = require_dist_node13();
     var oauthMethods = require_dist_node12();
     var btoa = _interopDefault(require_btoa_node());
-    var VERSION = "2.1.0";
+    var VERSION = "2.1.1";
     async function getAuthentication(state) {
       if ("code" in state.strategyOptions) {
         const {
@@ -8901,7 +8903,7 @@ var require_dist_node14 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -19126,7 +19128,7 @@ var require_dist_node17 = __commonJS({
         parse
       });
     }
-    var VERSION = "7.0.3";
+    var VERSION = "7.0.5";
     var userAgent = `octokit-endpoint.js/${VERSION} ${universalUserAgent.getUserAgent()}`;
     var DEFAULTS = {
       method: "GET",
@@ -19158,7 +19160,7 @@ var require_dist_node18 = __commonJS({
     var isPlainObject = require_is_plain_object();
     var nodeFetch = _interopDefault(require_lib3());
     var requestError = require_dist_node7();
-    var VERSION = "6.2.2";
+    var VERSION = "6.2.3";
     function getBufferResponse(response) {
       return response.arrayBuffer();
     }
@@ -20088,7 +20090,7 @@ var require_dist_node23 = __commonJS({
       }
       const currentAuthentication = state.authentication;
       if ("expiresAt" in currentAuthentication) {
-        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < new Date()) {
+        if (options.type === "refresh" || new Date(currentAuthentication.expiresAt) < /* @__PURE__ */ new Date()) {
           const {
             authentication
           } = await oauthMethods.refreshToken({
@@ -20476,7 +20478,7 @@ var require_dist_node24 = __commonJS({
       const repositorySelection = repositorySelectionOptional || "all";
       const repositoryIds = repositories ? repositories.map((r) => r.id) : void 0;
       const repositoryNames = repositories ? repositories.map((repo) => repo.name) : void 0;
-      const createdAt = new Date().toISOString();
+      const createdAt = (/* @__PURE__ */ new Date()).toISOString();
       await set(state.cache, optionsWithInstallationTokenFromState, {
         token,
         createdAt,
@@ -20557,7 +20559,7 @@ var require_dist_node24 = __commonJS({
           if (typeof error.response.headers.date === "undefined") {
             throw error;
           }
-          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse(new Date().toString())) / 1e3);
+          const diff = Math.floor((Date.parse(error.response.headers.date) - Date.parse((/* @__PURE__ */ new Date()).toString())) / 1e3);
           state.log.warn(error.message);
           state.log.warn(`[@octokit/auth-app] GitHub API time and system time are different by ${diff} seconds. Retrying request with the difference accounted for.`);
           const {
@@ -20590,7 +20592,7 @@ var require_dist_node24 = __commonJS({
       return sendRequestWithRetries(state, request2, endpoint, createdAt);
     }
     async function sendRequestWithRetries(state, request2, options, createdAt, retries = 0) {
-      const timeSinceTokenCreationInMs = +new Date() - +new Date(createdAt);
+      const timeSinceTokenCreationInMs = +/* @__PURE__ */ new Date() - +new Date(createdAt);
       try {
         return await request2(options);
       } catch (error) {
@@ -22427,7 +22429,7 @@ async function getOctokit(installationId) {
   };
 }
 
-// src/lambdas/token-retriever/index.ts
+// src/lambdas/token-retriever.lambda.ts
 exports.handler = async function(event) {
   const { githubSecrets, octokit } = await getOctokit(event.installationId);
   const response = await octokit.rest.actions.createRegistrationTokenForRepo({

package/assets/lambdas/update-lambda.lambda/index.js

@@ -0,0 +1,63 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/lambdas/update-lambda.lambda.ts
+var update_lambda_lambda_exports = {};
+__export(update_lambda_lambda_exports, {
+  handler: () => handler
+});
+module.exports = __toCommonJS(update_lambda_lambda_exports);
+var AWS = __toESM(require("aws-sdk"));
+var lambda = new AWS.Lambda();
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function handler(event) {
+  console.log(JSON.stringify(event));
+  while (true) {
+    try {
+      await lambda.updateFunctionCode({
+        FunctionName: event.lambdaName,
+        ImageUri: `${event.repositoryUri}:${event.repositoryTag}`,
+        Publish: true
+      }).promise();
+      break;
+    } catch (e) {
+      if (e.code == "ResourceConflictException") {
+        await sleep(1e4);
+      } else {
+        throw e;
+      }
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  handler
+});

package/{lib/lambdas/webhook-handler → assets/lambdas/webhook-handler.lambda}/index.js

@@ -22,7 +22,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
-// src/lambdas/webhook-handler/index.ts
+// src/lambdas/webhook-handler.lambda.ts
 var crypto = __toESM(require("crypto"));
 var AWS2 = __toESM(require("aws-sdk"));
 
@@ -43,7 +43,7 @@ async function getSecretJsonValue(arn) {
   return JSON.parse(await getSecretValue(arn));
 }
 
-// src/lambdas/webhook-handler/index.ts
+// src/lambdas/webhook-handler.lambda.ts
 var sf = new AWS2.StepFunctions();
 function verifyBody(event, secret) {
   const sig = Buffer.from(event.headers["x-hub-signature-256"] || "", "utf8");