aws-delivlib 15.0.4 → 15.0.6

package/lib/publishing/github/node_modules/.yarn-integrity

@@ -52,7 +52,7 @@
     "@types/changelog-parser@^2.8.1": "https://registry.yarnpkg.com/@types/changelog-parser/-/changelog-parser-2.8.4.tgz#45d70417e742ac3bc6bef3786aa453e1f1d63ecc",
     "@types/jsonwebtoken@^9.0.0": "https://registry.yarnpkg.com/@types/jsonwebtoken/-/jsonwebtoken-9.0.9.tgz#a4c3a446c0ebaaf467a58398382616f416345fb3",
     "@types/ms@*": "https://registry.yarnpkg.com/@types/ms/-/ms-2.1.0.tgz#052aa67a48eccc4309d7f0191b7e41434b90bb78",
-    "@types/node@*": "https://registry.yarnpkg.com/@types/node/-/node-22.15.26.tgz#01ea4427edeaf205cd18ebdb93db2708d5301f05",
+    "@types/node@*": "https://registry.yarnpkg.com/@types/node/-/node-22.15.29.tgz#c75999124a8224a3f79dd8b6ccfb37d74098f678",
     "@types/node@^14": "https://registry.yarnpkg.com/@types/node/-/node-14.18.63.tgz#1788fa8da838dbb5f9ea994b834278205db6ca2b",
     "aggregate-error@^3.1.0": "https://registry.yarnpkg.com/aggregate-error/-/aggregate-error-3.1.0.tgz#92670ff50f5359bdb7a3e0d40d0ec30c5737687a",
     "before-after-hook@^2.2.0": "https://registry.yarnpkg.com/before-after-hook/-/before-after-hook-2.2.3.tgz#c51e809c81a4e354084422b9b26bad88249c517c",

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/README.md

@@ -8,7 +8,7 @@ This package contains type definitions for node (https://nodejs.org/).
 Files were exported from https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node.
 
 ### Additional Details
- * Last updated: Thu, 29 May 2025 23:02:21 GMT
+ * Last updated: Fri, 30 May 2025 18:40:02 GMT
  * Dependencies: [undici-types](https://npmjs.com/package/undici-types)
 
 # Credits

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/diagnostics_channel.d.ts

@@ -297,7 +297,12 @@ declare module "diagnostics_channel" {
          * @param thisArg The receiver to be used for the function call.
          * @param args Optional arguments to pass to the function.
          */
-        runStores(): void;
+        runStores<ThisArg = any, Args extends any[] = any[], Result = any>(
+            context: ContextType,
+            fn: (this: ThisArg, ...args: Args) => Result,
+            thisArg?: ThisArg,
+            ...args: Args
+        ): Result;
     }
     interface TracingChannelSubscribers<ContextType extends object> {
         start: (message: ContextType) => void;
@@ -441,12 +446,12 @@ declare module "diagnostics_channel" {
          * @param args Optional arguments to pass to the function
          * @return The return value of the given function
          */
-        traceSync<ThisArg = any, Args extends any[] = any[]>(
-            fn: (this: ThisArg, ...args: Args) => any,
+        traceSync<ThisArg = any, Args extends any[] = any[], Result = any>(
+            fn: (this: ThisArg, ...args: Args) => Result,
             context?: ContextType,
             thisArg?: ThisArg,
             ...args: Args
-        ): void;
+        ): Result;
         /**
          * Trace a promise-returning function call. This will always produce a `start event` and `end event` around the synchronous portion of the
          * function execution, and will produce an `asyncStart event` and `asyncEnd event` when a promise continuation is reached. It may also
@@ -476,12 +481,12 @@ declare module "diagnostics_channel" {
          * @param args Optional arguments to pass to the function
          * @return Chained from promise returned by the given function
          */
-        tracePromise<ThisArg = any, Args extends any[] = any[]>(
-            fn: (this: ThisArg, ...args: Args) => Promise<any>,
+        tracePromise<ThisArg = any, Args extends any[] = any[], Result = any>(
+            fn: (this: ThisArg, ...args: Args) => Promise<Result>,
             context?: ContextType,
             thisArg?: ThisArg,
             ...args: Args
-        ): void;
+        ): Promise<Result>;
         /**
          * Trace a callback-receiving function call. This will always produce a `start event` and `end event` around the synchronous portion of the
          * function execution, and will produce a `asyncStart event` and `asyncEnd event` around the callback execution. It may also produce an `error event` if the given function throws an error or
@@ -540,13 +545,13 @@ declare module "diagnostics_channel" {
          * @param args Optional arguments to pass to the function
          * @return The return value of the given function
          */
-        traceCallback<Fn extends (this: any, ...args: any[]) => any>(
-            fn: Fn,
+        traceCallback<ThisArg = any, Args extends any[] = any[], Result = any>(
+            fn: (this: ThisArg, ...args: Args) => Result,
             position?: number,
             context?: ContextType,
-            thisArg?: any,
-            ...args: Parameters<Fn>
-        ): void;
+            thisArg?: ThisArg,
+            ...args: Args
+        ): Result;
         /**
          * `true` if any of the individual channels has a subscriber, `false` if not.
          *

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/globals.d.ts

@@ -266,11 +266,6 @@ declare global {
 
     // Global DOM types
 
-    function structuredClone<T>(
-        value: T,
-        transfer?: { transfer: ReadonlyArray<import("worker_threads").TransferListItem> },
-    ): T;
-
     interface DOMException extends _DOMException {}
     var DOMException: typeof globalThis extends { onmessage: any; DOMException: infer T } ? T
         : NodeDOMExceptionConstructor;

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@types/node",
-    "version": "22.15.26",
+    "version": "22.15.29",
     "description": "TypeScript definitions for node",
     "homepage": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
     "license": "MIT",
@@ -220,6 +220,6 @@
         "undici-types": "~6.21.0"
     },
     "peerDependencies": {},
-    "typesPublisherContentHash": "396d40f2ce0ddd8afa08e7ce4e4629ae9b67d6c511d0f44b0d0e511763140857",
+    "typesPublisherContentHash": "98b7a6aabffc6588a0865305b51b9dd48e81a270354b592630e8d37772f1f57a",
     "typeScriptVersion": "5.1"
 }

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/vm.d.ts

@@ -56,6 +56,11 @@ declare module "vm" {
          */
         columnOffset?: number | undefined;
     }
+    type DynamicModuleLoader<T> = (
+        specifier: string,
+        referrer: T,
+        importAttributes: ImportAttributes,
+    ) => Module | Promise<Module>;
     interface ScriptOptions extends BaseOptions {
         /**
          * Provides an optional data with V8's code cache data for the supplied source.
@@ -69,7 +74,7 @@ declare module "vm" {
          * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
          */
         importModuleDynamically?:
-            | ((specifier: string, script: Script, importAttributes: ImportAttributes) => Module | Promise<Module>)
+            | DynamicModuleLoader<Script>
             | typeof constants.USE_MAIN_CONTEXT_DEFAULT_LOADER
             | undefined;
     }
@@ -114,14 +119,30 @@ declare module "vm" {
          * Provides an optional data with V8's code cache data for the supplied source.
          */
         cachedData?: ScriptOptions["cachedData"] | undefined;
-        importModuleDynamically?: ScriptOptions["importModuleDynamically"];
+        /**
+         * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
+         * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         */
+        importModuleDynamically?:
+            | DynamicModuleLoader<Script>
+            | typeof constants.USE_MAIN_CONTEXT_DEFAULT_LOADER
+            | undefined;
     }
     interface RunningCodeInNewContextOptions extends RunningScriptInNewContextOptions {
         /**
          * Provides an optional data with V8's code cache data for the supplied source.
          */
         cachedData?: ScriptOptions["cachedData"] | undefined;
-        importModuleDynamically?: ScriptOptions["importModuleDynamically"];
+        /**
+         * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
+         * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         */
+        importModuleDynamically?:
+            | DynamicModuleLoader<Script>
+            | typeof constants.USE_MAIN_CONTEXT_DEFAULT_LOADER
+            | undefined;
     }
     interface CompileFunctionOptions extends BaseOptions {
         /**
@@ -141,6 +162,15 @@ declare module "vm" {
          * An array containing a collection of context extensions (objects wrapping the current scope) to be applied while compiling
          */
         contextExtensions?: Object[] | undefined;
+        /**
+         * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
+         * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         */
+        importModuleDynamically?:
+            | DynamicModuleLoader<ReturnType<typeof compileFunction>>
+            | typeof constants.USE_MAIN_CONTEXT_DEFAULT_LOADER
+            | undefined;
     }
     interface CreateContextOptions {
         /**
@@ -175,6 +205,15 @@ declare module "vm" {
          * If set to `afterEvaluate`, microtasks will be run immediately after the script has run.
          */
         microtaskMode?: "afterEvaluate" | undefined;
+        /**
+         * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
+         * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         */
+        importModuleDynamically?:
+            | DynamicModuleLoader<Context>
+            | typeof constants.USE_MAIN_CONTEXT_DEFAULT_LOADER
+            | undefined;
     }
     type MeasureMemoryMode = "summary" | "detailed";
     interface MeasureMemoryOptions {
@@ -865,13 +904,12 @@ declare module "vm" {
          * Called during evaluation of this module to initialize the `import.meta`.
          */
         initializeImportMeta?: ((meta: ImportMeta, module: SourceTextModule) => void) | undefined;
-        importModuleDynamically?:
-            | ((
-                specifier: string,
-                referrer: SourceTextModule,
-                importAttributes: ImportAttributes,
-            ) => Module | Promise<Module>)
-            | undefined;
+        /**
+         * Used to specify how the modules should be loaded during the evaluation of this script when `import()` is called. This option is
+         * part of the experimental modules API. We do not recommend using it in a production environment. For detailed information, see
+         * [Support of dynamic `import()` in compilation APIs](https://nodejs.org/docs/latest-v22.x/api/vm.html#support-of-dynamic-import-in-compilation-apis).
+         */
+        importModuleDynamically?: DynamicModuleLoader<SourceTextModule> | undefined;
     }
     /**
      * This feature is only available with the `--experimental-vm-modules` command

package/lib/publishing/github/node_modules/@types/jsonwebtoken/node_modules/@types/node/worker_threads.d.ts

@@ -52,14 +52,13 @@
  * @see [source](https://github.com/nodejs/node/blob/v22.x/lib/worker_threads.js)
  */
 declare module "worker_threads" {
-    import { Blob } from "node:buffer";
     import { Context } from "node:vm";
     import { EventEmitter } from "node:events";
     import { EventLoopUtilityFunction } from "node:perf_hooks";
     import { FileHandle } from "node:fs/promises";
     import { Readable, Writable } from "node:stream";
+    import { ReadableStream, TransformStream, WritableStream } from "node:stream/web";
     import { URL } from "node:url";
-    import { X509Certificate } from "node:crypto";
     const isInternalThread: boolean;
     const isMainThread: boolean;
     const parentPort: null | MessagePort;
@@ -89,7 +88,17 @@ declare module "worker_threads" {
     interface WorkerPerformance {
         eventLoopUtilization: EventLoopUtilityFunction;
     }
-    type TransferListItem = ArrayBuffer | MessagePort | FileHandle | X509Certificate | Blob;
+    type Transferable =
+        | ArrayBuffer
+        | MessagePort
+        | AbortSignal
+        | FileHandle
+        | ReadableStream
+        | WritableStream
+        | TransformStream;
+    /** @deprecated Use `import { Transferable } from "node:worker_threads"` instead. */
+    // TODO: remove in a future major @types/node version.
+    type TransferListItem = Transferable;
     /**
      * Instances of the `worker.MessagePort` class represent one end of an
      * asynchronous, two-way communications channel. It can be used to transfer
@@ -174,7 +183,7 @@ declare module "worker_threads" {
          * behind this API, see the `serialization API of the node:v8 module`.
          * @since v10.5.0
          */
-        postMessage(value: any, transferList?: readonly TransferListItem[]): void;
+        postMessage(value: any, transferList?: readonly Transferable[]): void;
         /**
          * Opposite of `unref()`. Calling `ref()` on a previously `unref()`ed port does _not_ let the program exit if it's the only active handle left (the default
          * behavior). If the port is `ref()`ed, calling `ref()` again has no effect.
@@ -261,7 +270,7 @@ declare module "worker_threads" {
         /**
          * Additional data to send in the first worker message.
          */
-        transferList?: TransferListItem[] | undefined;
+        transferList?: Transferable[] | undefined;
         /**
          * @default true
          */
@@ -409,7 +418,7 @@ declare module "worker_threads" {
          * See `port.postMessage()` for more details.
          * @since v10.5.0
          */
-        postMessage(value: any, transferList?: readonly TransferListItem[]): void;
+        postMessage(value: any, transferList?: readonly Transferable[]): void;
         /**
          * Sends a value to another worker, identified by its thread ID.
          * @param threadId The target thread ID. If the thread ID is invalid, a `ERR_WORKER_MESSAGING_FAILED` error will be thrown.
@@ -425,7 +434,7 @@ declare module "worker_threads" {
         postMessageToThread(
             threadId: number,
             value: any,
-            transferList: readonly TransferListItem[],
+            transferList: readonly Transferable[],
             timeout?: number,
         ): Promise<void>;
         /**
@@ -709,6 +718,10 @@ declare module "worker_threads" {
         MessagePort as _MessagePort,
     } from "worker_threads";
     global {
+        function structuredClone<T>(
+            value: T,
+            options?: { transfer?: Transferable[] },
+        ): T;
         /**
          * `BroadcastChannel` class is a global reference for `import { BroadcastChannel } from 'worker_threads'`
          * https://nodejs.org/api/globals.html#broadcastchannel

package/lib/publishing/maven/publish.sh

@@ -5,6 +5,11 @@ echo "Sources:"
 ls
 echo ----------------------------------------
 
+if [[ ! -d ./java ]]; then
+    echo "❌ No JARS to publish: 'java/' directory is missing."
+    exit 1
+fi
+
 echo "Getting credentials..."
 credentials=$(aws secretsmanager get-secret-value --secret-id ${MAVEN_LOGIN_SECRET} --output=text --query=SecretString)
 
@@ -12,7 +17,6 @@ export MAVEN_USERNAME=$(node -e "console.log(${credentials}.username);")
 export MAVEN_PASSWORD=$(node -e "console.log(${credentials}.password);")
 
 chmod +x $SCRIPT_DIR/with-signing-key.sh
-chmod +x $SCRIPT_DIR/publish-mvn.sh
-$SCRIPT_DIR/with-signing-key.sh $SCRIPT_DIR/publish-mvn.sh
+$SCRIPT_DIR/with-signing-key.sh npx -p publib@latest publib-maven ./java
 
 /bin/bash $SCRIPT_DIR/update-ssm.sh

package/lib/publishing/maven/with-signing-key.sh

@@ -6,15 +6,12 @@
 # 'true' or 'false'. If $KEY_AVAILABLE is 'true', the following
 # variables will be set as well:
 #
-#    $KEY_ID
-#    $KEY_PASSPHRASE
-#    $GPG_PASSPHRASE_FROM_STDIN
+#    $MAVEN_GPG_PRIVATE_KEY
+#    $MAVEN_GPG_PRIVATE_KEY_PASSPHRASE
 #
-# The environment variable KEY_PASSPHRASE will be set to
-# the key's passphrase, to pass in like so:
+# These will be used by `publib-maven`.
 #
-#    echo $KEY_PASSPHRASE | gpg ${GPG_PASSPHRASE_FROM_STDIN} \
-#        ...other gpg arguments...
+# See <https://github.com/cdklabs/publib?tab=readme-ov-file#maven>.
 set -euo pipefail
 
 if [[ "${1:-}" == "" ]]; then
@@ -39,31 +36,9 @@ else
         node -e "console.log(JSON.parse(require('fs').readFileSync('$tmpdir/secret.txt', { encoding: 'utf-8' })).$1)"
     }
 
-    export KEY_PASSPHRASE=$(value-from-secret Passphrase)
-
-    # GnuPG will occasionally bail out with "gpg: <whatever> failed: Inappropriate ioctl for device", the following attempts to fix
-    export GPG_TTY=$(tty)
-    export GNUPGHOME=$tmpdir
-
-    echo "Importing key..." >&2
-    gpg --allow-secret-key-import \
-        --batch --yes --no-tty \
-        --import <(value-from-secret PrivateKey)
-
-    export KEY_ID=$(gpg --list-keys --with-colons | grep pub | cut -d: -f5)
-
-    # Prepare environment variables with flags to GPG
-    #        --passphrase-fd 0 \
-    #        ${EXTRA_GPG_OPTS} \
-    GPG_PASSPHRASE_FROM_STDIN="--passphrase-fd 0"
-    if [[ "$(uname)" == "Darwin" ]]; then
-        # On Mac, we must pass this to disable a prompt for
-        # passphrase, but option is not recognized on Linux.
-        GPG_PASSPHRASE_FROM_STDIN="${GPG_PASSPHRASE_FROM_STDIN} --pinentry-mode loopback"
-    fi
-    export GPG_PASSPHRASE_FROM_STDIN
-
     export KEY_AVAILABLE=true
+    export MAVEN_GPG_PRIVATE_KEY=$(value-from-secret Passphrase)
+    export MAVEN_GPG_PRIVATE_KEY_PASSPHRASE=$(value-from-secret Passphrase)
 fi
 
 # Execute remaining commands

package/lib/publishing.d.ts

@@ -42,6 +42,20 @@ export interface PublishToMavenProjectProps {
      * @default "https://oss.sonatype.org"
      */
     mavenEndpoint?: string;
+    /**
+     * The server ID
+     *
+     * The only sensible value here is `central-ossrh`, which will use the new
+     * publishing endpoint that is mandatory starting June 30th.
+     *
+     * Any other value can `central-ossrh` will cause the underlying publishing
+     * library `publib` to assume publishing to a custom Nexus server, but this
+     * action currently doesn't have a way of specifying that Nexus server's
+     * endpoint.
+     *
+     * @default - Use legacy OSSRH server
+     */
+    serverId?: string;
     /**
      * The build image to do the publishing in
      *