@rio-cloud/cdk-v2-constructs 7.13.2 → 7.13.4

package/docs/changelog.md

@@ -2,6 +2,10 @@
 
 All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines.
 
+## [7.13.4](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv7.13.3&sourceBranch=refs%2Ftags%2Fv7.13.4) (2025-12-09)
+
+## [7.13.3](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv7.13.2&sourceBranch=refs%2Ftags%2Fv7.13.3) (2025-12-02)
+
 ## [7.13.2](https://bitbucket.collaboration-man.com/projects/RIODEV/repos/cdk-v2-constructs/compare/commits?targetBranch=refs%2Ftags%2Fv7.13.1&sourceBranch=refs%2Ftags%2Fv7.13.2) (2025-11-25)
 
 

package/lib/iam/sonatype-oss-index-credentials.d.ts

@@ -2,4 +2,5 @@ import { IGrantable } from 'aws-cdk-lib/aws-iam';
 import { Construct } from 'constructs';
 export declare class SonatypeOssIndexCredentials {
     static allowAccessTo(scope: Construct, target: IGrantable): void;
+    private static importedSecret;
 }

package/lib/iam/sonatype-oss-index-credentials.js

@@ -7,7 +7,7 @@ const iam = require("aws-cdk-lib/aws-iam");
 const secretsmanager = require("aws-cdk-lib/aws-secretsmanager");
 class SonatypeOssIndexCredentials {
     static allowAccessTo(scope, target) {
-        const sonatypeSecret = secretsmanager.Secret.fromSecretPartialArn(scope, 'SonatypeOssIndexCredentialsSecret', 'arn:aws:secretsmanager:eu-west-1:577146897785:secret:/rio/config/sonatype-oss-index/credentials');
+        const sonatypeSecret = SonatypeOssIndexCredentials.importedSecret(scope);
         sonatypeSecret.grantRead(target);
         target.grantPrincipal.addToPrincipalPolicy(new iam.PolicyStatement({
             actions: [
@@ -27,8 +27,15 @@ class SonatypeOssIndexCredentials {
             },
         }));
     }
+    static importedSecret(scope) {
+        const existing = scope.node.tryFindChild('SonatypeOssIndexCredentialsSecret');
+        if (existing) {
+            return existing;
+        }
+        return secretsmanager.Secret.fromSecretPartialArn(scope, 'SonatypeOssIndexCredentialsSecret', 'arn:aws:secretsmanager:eu-west-1:577146897785:secret:/rio/config/sonatype-oss-index/credentials');
+    }
 }
 exports.SonatypeOssIndexCredentials = SonatypeOssIndexCredentials;
 _a = JSII_RTTI_SYMBOL_1;
 SonatypeOssIndexCredentials[_a] = { fqn: "@rio-cloud/cdk-v2-constructs.SonatypeOssIndexCredentials", version: "0.0.0" };
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -15,7 +15,7 @@
   ],
   "main": "lib/index.js",
   "license": "Apache-2.0",
-  "version": "7.13.2",
+  "version": "7.13.4",
   "types": "lib/index.d.ts",
   "stability": "stable",
   "exports": {
@@ -69,7 +69,9 @@
     "release:push": "echo '✅  pushing release' && git push origin master --follow-tags",
     "release": "npm run release:check && npm run release:build",
     "release:alpha": "npm run release:check && npm run release:build:alpha",
-    "release:dry-run": "npm run build && npm run docgen && npm run release:check && commit-and-tag-version -i docs/changelog.md -a --dry-run"
+    "release:dry-run": "npm run build && npm run docgen && npm run release:check && commit-and-tag-version -i docs/changelog.md -a --dry-run",
+    "set-package-version": "ts-node --project tsconfig.scripts.json scripts/set-package-version.ts",
+    "publish": "ts-node --project tsconfig.scripts.json scripts/publish.ts"
   },
   "devDependencies": {
     "@types/jest": "29.5.13",

package/scripts/publish.ts

@@ -0,0 +1,57 @@
+#!/usr/bin/env ts-node
+import { spawnSync } from 'child_process';
+import { readFileSync } from 'fs';
+import path from 'path';
+
+const PACKAGE_NAME = '@rio-cloud/cdk-v2-constructs';
+const PACKAGE_JSON_PATH = path.resolve(__dirname, '..', 'package.json');
+
+function run(command: string, args: string[], inheritOutput = true): number {
+    const result = spawnSync(command, args, { stdio: inheritOutput ? 'inherit' : 'ignore' });
+    if (result.error) {
+        throw result.error;
+    }
+    return result.status ?? 1;
+}
+
+function ensureTaggedCommit(): void {
+    const status = run('git', ['describe', '--tags', '--exact-match', 'HEAD'], false);
+    if (status !== 0) {
+        console.log('No tag found; skipping publish');
+        process.exit(0);
+    }
+}
+
+function getPackageVersion(): string {
+    const pkg = JSON.parse(readFileSync(PACKAGE_JSON_PATH, 'utf8')) as { version?: string };
+    if (!pkg.version) {
+        throw new Error('package.json must contain a version');
+    }
+    return pkg.version;
+}
+
+function ensureVersionNotPublished(version: string): void {
+    const status = run('npm', ['view', `${PACKAGE_NAME}@${version}`, 'version'], false);
+    if (status === 0) {
+        console.log(`✅ Version ${version} already exists, skipping publish`);
+        process.exit(0);
+    }
+}
+
+function publish(version: string): void {
+    console.log(`🚀 Publishing ${PACKAGE_NAME}@${version}`);
+    const status = run('npm', ['publish', '--access', 'public']);
+    if (status !== 0) {
+        console.error('npm publish failed. You might need to create a new token on npmjs.com');
+        process.exit(status);
+    }
+}
+
+function main(): void {
+    ensureTaggedCommit();
+    const version = getPackageVersion();
+    ensureVersionNotPublished(version);
+    publish(version);
+}
+
+main();

package/scripts/set-package-version.ts

@@ -0,0 +1,24 @@
+#!/usr/bin/env ts-node
+import { readFileSync, writeFileSync } from 'fs';
+import path from 'path';
+
+const rootDir = path.resolve(__dirname, '..');
+const versionFile = path.join(rootDir, 'version.json');
+const packageFile = path.join(rootDir, 'package.json');
+
+type VersionFile = {
+    version?: string;
+};
+
+function main(): void {
+    const { version } = JSON.parse(readFileSync(versionFile, 'utf8')) as VersionFile;
+    if (!version) {
+        throw new Error('version.json must contain a version field');
+    }
+
+    const pkg = JSON.parse(readFileSync(packageFile, 'utf8')) as Record<string, unknown>;
+    const updated = { ...pkg, version };
+    writeFileSync(packageFile, `${JSON.stringify(updated, null, 2)}\n`, 'utf8');
+}
+
+main();

package/tsconfig.scripts.json

@@ -0,0 +1,11 @@
+{
+  "extends": "./tsconfig.dev.json",
+  "compilerOptions": {
+    "rootDir": ".",
+    "noEmit": true,
+    "esModuleInterop": true
+  },
+  "include": [
+    "scripts/**/*.ts"
+  ]
+}

package/version.json

@@ -1,3 +1,3 @@
 {
-  "version": "7.13.2"
+  "version": "7.13.4"
 }