projen 0.79.4__py3-none-any.whl → 0.98.25__py3-none-any.whl

projen/github/workflows/__init__.py

@@ -1,3 +1,6 @@
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -8,7 +11,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from ..._jsii import *
 
@@ -47,18 +65,32 @@ class AppPermission(enum.Enum):
     name_mapping={
         "actions": "actions",
         "administration": "administration",
+        "attestations": "attestations",
         "checks": "checks",
+        "codespaces": "codespaces",
         "contents": "contents",
+        "dependabot_secrets": "dependabotSecrets",
         "deployments": "deployments",
+        "email_addresses": "emailAddresses",
         "environments": "environments",
+        "followers": "followers",
+        "git_ssh_keys": "gitSshKeys",
+        "gpg_keys": "gpgKeys",
+        "interaction_limits": "interactionLimits",
         "issues": "issues",
         "members": "members",
         "metadata": "metadata",
         "organization_administration": "organizationAdministration",
         "organization_announcement_banners": "organizationAnnouncementBanners",
+        "organization_copilot_seat_management": "organizationCopilotSeatManagement",
+        "organization_custom_org_roles": "organizationCustomOrgRoles",
+        "organization_custom_properties": "organizationCustomProperties",
         "organization_custom_roles": "organizationCustomRoles",
+        "organization_events": "organizationEvents",
         "organization_hooks": "organizationHooks",
         "organization_packages": "organizationPackages",
+        "organization_personal_access_token_requests": "organizationPersonalAccessTokenRequests",
+        "organization_personal_access_tokens": "organizationPersonalAccessTokens",
         "organization_plan": "organizationPlan",
         "organization_projects": "organizationProjects",
         "organization_secrets": "organizationSecrets",
@@ -66,14 +98,17 @@ class AppPermission(enum.Enum):
         "orgnaization_user_blocking": "orgnaizationUserBlocking",
         "packages": "packages",
         "pages": "pages",
+        "profile": "profile",
         "pull_requests": "pullRequests",
         "repository_announcement_banners": "repositoryAnnouncementBanners",
+        "repository_custom_properties": "repositoryCustomProperties",
         "repository_hooks": "repositoryHooks",
-        "repository_project": "repositoryProject",
+        "repository_projects": "repositoryProjects",
         "secrets": "secrets",
         "secret_scanning_alerts": "secretScanningAlerts",
         "security_events": "securityEvents",
         "single_file": "singleFile",
+        "starring": "starring",
         "statuses": "statuses",
         "team_discussions": "teamDiscussions",
         "vulnerability_alerts": "vulnerabilityAlerts",
@@ -86,18 +121,32 @@ class AppPermissions:
         *,
         actions: typing.Optional[AppPermission] = None,
         administration: typing.Optional[AppPermission] = None,
+        attestations: typing.Optional[AppPermission] = None,
         checks: typing.Optional[AppPermission] = None,
+        codespaces: typing.Optional[AppPermission] = None,
         contents: typing.Optional[AppPermission] = None,
+        dependabot_secrets: typing.Optional[AppPermission] = None,
         deployments: typing.Optional[AppPermission] = None,
+        email_addresses: typing.Optional[AppPermission] = None,
         environments: typing.Optional[AppPermission] = None,
+        followers: typing.Optional[AppPermission] = None,
+        git_ssh_keys: typing.Optional[AppPermission] = None,
+        gpg_keys: typing.Optional[AppPermission] = None,
+        interaction_limits: typing.Optional[AppPermission] = None,
         issues: typing.Optional[AppPermission] = None,
         members: typing.Optional[AppPermission] = None,
         metadata: typing.Optional[AppPermission] = None,
         organization_administration: typing.Optional[AppPermission] = None,
         organization_announcement_banners: typing.Optional[AppPermission] = None,
+        organization_copilot_seat_management: typing.Optional[AppPermission] = None,
+        organization_custom_org_roles: typing.Optional[AppPermission] = None,
+        organization_custom_properties: typing.Optional[AppPermission] = None,
         organization_custom_roles: typing.Optional[AppPermission] = None,
+        organization_events: typing.Optional[AppPermission] = None,
         organization_hooks: typing.Optional[AppPermission] = None,
         organization_packages: typing.Optional[AppPermission] = None,
+        organization_personal_access_token_requests: typing.Optional[AppPermission] = None,
+        organization_personal_access_tokens: typing.Optional[AppPermission] = None,
         organization_plan: typing.Optional[AppPermission] = None,
         organization_projects: typing.Optional[AppPermission] = None,
         organization_secrets: typing.Optional[AppPermission] = None,
@@ -105,14 +154,17 @@ class AppPermissions:
         orgnaization_user_blocking: typing.Optional[AppPermission] = None,
         packages: typing.Optional[AppPermission] = None,
         pages: typing.Optional[AppPermission] = None,
+        profile: typing.Optional[AppPermission] = None,
         pull_requests: typing.Optional[AppPermission] = None,
         repository_announcement_banners: typing.Optional[AppPermission] = None,
+        repository_custom_properties: typing.Optional[AppPermission] = None,
         repository_hooks: typing.Optional[AppPermission] = None,
-        repository_project: typing.Optional[AppPermission] = None,
+        repository_projects: typing.Optional[AppPermission] = None,
         secrets: typing.Optional[AppPermission] = None,
         secret_scanning_alerts: typing.Optional[AppPermission] = None,
         security_events: typing.Optional[AppPermission] = None,
         single_file: typing.Optional[AppPermission] = None,
+        starring: typing.Optional[AppPermission] = None,
         statuses: typing.Optional[AppPermission] = None,
         team_discussions: typing.Optional[AppPermission] = None,
         vulnerability_alerts: typing.Optional[AppPermission] = None,
@@ -126,18 +178,32 @@ class AppPermissions:
 
         :param actions: 
         :param administration: 
+        :param attestations: 
         :param checks: 
+        :param codespaces: 
         :param contents: 
+        :param dependabot_secrets: 
         :param deployments: 
+        :param email_addresses: 
         :param environments: 
+        :param followers: 
+        :param git_ssh_keys: 
+        :param gpg_keys: 
+        :param interaction_limits: 
         :param issues: 
         :param members: 
         :param metadata: 
         :param organization_administration: 
         :param organization_announcement_banners: 
+        :param organization_copilot_seat_management: 
+        :param organization_custom_org_roles: 
+        :param organization_custom_properties: 
         :param organization_custom_roles: 
+        :param organization_events: 
         :param organization_hooks: 
         :param organization_packages: 
+        :param organization_personal_access_token_requests: 
+        :param organization_personal_access_tokens: 
         :param organization_plan: 
         :param organization_projects: 
         :param organization_secrets: 
@@ -145,38 +211,55 @@ class AppPermissions:
         :param orgnaization_user_blocking: 
         :param packages: 
         :param pages: 
+        :param profile: 
         :param pull_requests: 
         :param repository_announcement_banners: 
+        :param repository_custom_properties: 
         :param repository_hooks: 
-        :param repository_project: 
+        :param repository_projects: 
         :param secrets: 
         :param secret_scanning_alerts: 
         :param security_events: 
         :param single_file: 
+        :param starring: 
         :param statuses: 
         :param team_discussions: 
         :param vulnerability_alerts: 
         :param workflows: 
 
-        :see: https://docs.github.com/en/rest/apps/apps?apiVersion=2022-11-28#create-an-installation-access-token-for-an-app
+        :see: https://github.com/actions/create-github-app-token/blob/main/action.yml#L28
         :stability: experimental
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__6e0085e134a87f8de8cb54bc56e329333881c3520710c833f5ed76097c8d1299)
             check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
             check_type(argname="argument administration", value=administration, expected_type=type_hints["administration"])
+            check_type(argname="argument attestations", value=attestations, expected_type=type_hints["attestations"])
             check_type(argname="argument checks", value=checks, expected_type=type_hints["checks"])
+            check_type(argname="argument codespaces", value=codespaces, expected_type=type_hints["codespaces"])
             check_type(argname="argument contents", value=contents, expected_type=type_hints["contents"])
+            check_type(argname="argument dependabot_secrets", value=dependabot_secrets, expected_type=type_hints["dependabot_secrets"])
             check_type(argname="argument deployments", value=deployments, expected_type=type_hints["deployments"])
+            check_type(argname="argument email_addresses", value=email_addresses, expected_type=type_hints["email_addresses"])
             check_type(argname="argument environments", value=environments, expected_type=type_hints["environments"])
+            check_type(argname="argument followers", value=followers, expected_type=type_hints["followers"])
+            check_type(argname="argument git_ssh_keys", value=git_ssh_keys, expected_type=type_hints["git_ssh_keys"])
+            check_type(argname="argument gpg_keys", value=gpg_keys, expected_type=type_hints["gpg_keys"])
+            check_type(argname="argument interaction_limits", value=interaction_limits, expected_type=type_hints["interaction_limits"])
             check_type(argname="argument issues", value=issues, expected_type=type_hints["issues"])
             check_type(argname="argument members", value=members, expected_type=type_hints["members"])
             check_type(argname="argument metadata", value=metadata, expected_type=type_hints["metadata"])
             check_type(argname="argument organization_administration", value=organization_administration, expected_type=type_hints["organization_administration"])
             check_type(argname="argument organization_announcement_banners", value=organization_announcement_banners, expected_type=type_hints["organization_announcement_banners"])
+            check_type(argname="argument organization_copilot_seat_management", value=organization_copilot_seat_management, expected_type=type_hints["organization_copilot_seat_management"])
+            check_type(argname="argument organization_custom_org_roles", value=organization_custom_org_roles, expected_type=type_hints["organization_custom_org_roles"])
+            check_type(argname="argument organization_custom_properties", value=organization_custom_properties, expected_type=type_hints["organization_custom_properties"])
             check_type(argname="argument organization_custom_roles", value=organization_custom_roles, expected_type=type_hints["organization_custom_roles"])
+            check_type(argname="argument organization_events", value=organization_events, expected_type=type_hints["organization_events"])
             check_type(argname="argument organization_hooks", value=organization_hooks, expected_type=type_hints["organization_hooks"])
             check_type(argname="argument organization_packages", value=organization_packages, expected_type=type_hints["organization_packages"])
+            check_type(argname="argument organization_personal_access_token_requests", value=organization_personal_access_token_requests, expected_type=type_hints["organization_personal_access_token_requests"])
+            check_type(argname="argument organization_personal_access_tokens", value=organization_personal_access_tokens, expected_type=type_hints["organization_personal_access_tokens"])
             check_type(argname="argument organization_plan", value=organization_plan, expected_type=type_hints["organization_plan"])
             check_type(argname="argument organization_projects", value=organization_projects, expected_type=type_hints["organization_projects"])
             check_type(argname="argument organization_secrets", value=organization_secrets, expected_type=type_hints["organization_secrets"])
@@ -184,14 +267,17 @@ class AppPermissions:
             check_type(argname="argument orgnaization_user_blocking", value=orgnaization_user_blocking, expected_type=type_hints["orgnaization_user_blocking"])
             check_type(argname="argument packages", value=packages, expected_type=type_hints["packages"])
             check_type(argname="argument pages", value=pages, expected_type=type_hints["pages"])
+            check_type(argname="argument profile", value=profile, expected_type=type_hints["profile"])
             check_type(argname="argument pull_requests", value=pull_requests, expected_type=type_hints["pull_requests"])
             check_type(argname="argument repository_announcement_banners", value=repository_announcement_banners, expected_type=type_hints["repository_announcement_banners"])
+            check_type(argname="argument repository_custom_properties", value=repository_custom_properties, expected_type=type_hints["repository_custom_properties"])
             check_type(argname="argument repository_hooks", value=repository_hooks, expected_type=type_hints["repository_hooks"])
-            check_type(argname="argument repository_project", value=repository_project, expected_type=type_hints["repository_project"])
+            check_type(argname="argument repository_projects", value=repository_projects, expected_type=type_hints["repository_projects"])
             check_type(argname="argument secrets", value=secrets, expected_type=type_hints["secrets"])
             check_type(argname="argument secret_scanning_alerts", value=secret_scanning_alerts, expected_type=type_hints["secret_scanning_alerts"])
             check_type(argname="argument security_events", value=security_events, expected_type=type_hints["security_events"])
             check_type(argname="argument single_file", value=single_file, expected_type=type_hints["single_file"])
+            check_type(argname="argument starring", value=starring, expected_type=type_hints["starring"])
             check_type(argname="argument statuses", value=statuses, expected_type=type_hints["statuses"])
             check_type(argname="argument team_discussions", value=team_discussions, expected_type=type_hints["team_discussions"])
             check_type(argname="argument vulnerability_alerts", value=vulnerability_alerts, expected_type=type_hints["vulnerability_alerts"])
@@ -201,14 +287,30 @@ class AppPermissions:
             self._values["actions"] = actions
         if administration is not None:
             self._values["administration"] = administration
+        if attestations is not None:
+            self._values["attestations"] = attestations
         if checks is not None:
             self._values["checks"] = checks
+        if codespaces is not None:
+            self._values["codespaces"] = codespaces
         if contents is not None:
             self._values["contents"] = contents
+        if dependabot_secrets is not None:
+            self._values["dependabot_secrets"] = dependabot_secrets
         if deployments is not None:
             self._values["deployments"] = deployments
+        if email_addresses is not None:
+            self._values["email_addresses"] = email_addresses
         if environments is not None:
             self._values["environments"] = environments
+        if followers is not None:
+            self._values["followers"] = followers
+        if git_ssh_keys is not None:
+            self._values["git_ssh_keys"] = git_ssh_keys
+        if gpg_keys is not None:
+            self._values["gpg_keys"] = gpg_keys
+        if interaction_limits is not None:
+            self._values["interaction_limits"] = interaction_limits
         if issues is not None:
             self._values["issues"] = issues
         if members is not None:
@@ -219,12 +321,24 @@ class AppPermissions:
             self._values["organization_administration"] = organization_administration
         if organization_announcement_banners is not None:
             self._values["organization_announcement_banners"] = organization_announcement_banners
+        if organization_copilot_seat_management is not None:
+            self._values["organization_copilot_seat_management"] = organization_copilot_seat_management
+        if organization_custom_org_roles is not None:
+            self._values["organization_custom_org_roles"] = organization_custom_org_roles
+        if organization_custom_properties is not None:
+            self._values["organization_custom_properties"] = organization_custom_properties
         if organization_custom_roles is not None:
             self._values["organization_custom_roles"] = organization_custom_roles
+        if organization_events is not None:
+            self._values["organization_events"] = organization_events
         if organization_hooks is not None:
             self._values["organization_hooks"] = organization_hooks
         if organization_packages is not None:
             self._values["organization_packages"] = organization_packages
+        if organization_personal_access_token_requests is not None:
+            self._values["organization_personal_access_token_requests"] = organization_personal_access_token_requests
+        if organization_personal_access_tokens is not None:
+            self._values["organization_personal_access_tokens"] = organization_personal_access_tokens
         if organization_plan is not None:
             self._values["organization_plan"] = organization_plan
         if organization_projects is not None:
@@ -239,14 +353,18 @@ class AppPermissions:
             self._values["packages"] = packages
         if pages is not None:
             self._values["pages"] = pages
+        if profile is not None:
+            self._values["profile"] = profile
         if pull_requests is not None:
             self._values["pull_requests"] = pull_requests
         if repository_announcement_banners is not None:
             self._values["repository_announcement_banners"] = repository_announcement_banners
+        if repository_custom_properties is not None:
+            self._values["repository_custom_properties"] = repository_custom_properties
         if repository_hooks is not None:
             self._values["repository_hooks"] = repository_hooks
-        if repository_project is not None:
-            self._values["repository_project"] = repository_project
+        if repository_projects is not None:
+            self._values["repository_projects"] = repository_projects
         if secrets is not None:
             self._values["secrets"] = secrets
         if secret_scanning_alerts is not None:
@@ -255,6 +373,8 @@ class AppPermissions:
             self._values["security_events"] = security_events
         if single_file is not None:
             self._values["single_file"] = single_file
+        if starring is not None:
+            self._values["starring"] = starring
         if statuses is not None:
             self._values["statuses"] = statuses
         if team_discussions is not None:
@@ -280,6 +400,14 @@ class AppPermissions:
         result = self._values.get("administration")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def attestations(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("attestations")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def checks(self) -> typing.Optional[AppPermission]:
         '''
@@ -288,6 +416,14 @@ class AppPermissions:
         result = self._values.get("checks")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def codespaces(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("codespaces")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def contents(self) -> typing.Optional[AppPermission]:
         '''
@@ -296,6 +432,14 @@ class AppPermissions:
         result = self._values.get("contents")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def dependabot_secrets(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("dependabot_secrets")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def deployments(self) -> typing.Optional[AppPermission]:
         '''
@@ -304,6 +448,14 @@ class AppPermissions:
         result = self._values.get("deployments")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def email_addresses(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("email_addresses")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def environments(self) -> typing.Optional[AppPermission]:
         '''
@@ -312,6 +464,38 @@ class AppPermissions:
         result = self._values.get("environments")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def followers(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("followers")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def git_ssh_keys(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("git_ssh_keys")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def gpg_keys(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("gpg_keys")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def interaction_limits(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("interaction_limits")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def issues(self) -> typing.Optional[AppPermission]:
         '''
@@ -352,6 +536,30 @@ class AppPermissions:
         result = self._values.get("organization_announcement_banners")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def organization_copilot_seat_management(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_copilot_seat_management")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def organization_custom_org_roles(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_custom_org_roles")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def organization_custom_properties(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_custom_properties")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def organization_custom_roles(self) -> typing.Optional[AppPermission]:
         '''
@@ -360,6 +568,14 @@ class AppPermissions:
         result = self._values.get("organization_custom_roles")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def organization_events(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_events")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def organization_hooks(self) -> typing.Optional[AppPermission]:
         '''
@@ -376,6 +592,24 @@ class AppPermissions:
         result = self._values.get("organization_packages")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def organization_personal_access_token_requests(
+        self,
+    ) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_personal_access_token_requests")
+        return typing.cast(typing.Optional[AppPermission], result)
+
+    @builtins.property
+    def organization_personal_access_tokens(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("organization_personal_access_tokens")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def organization_plan(self) -> typing.Optional[AppPermission]:
         '''
@@ -432,6 +666,14 @@ class AppPermissions:
         result = self._values.get("pages")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def profile(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("profile")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def pull_requests(self) -> typing.Optional[AppPermission]:
         '''
@@ -443,11 +685,21 @@ class AppPermissions:
     @builtins.property
     def repository_announcement_banners(self) -> typing.Optional[AppPermission]:
         '''
-        :stability: experimental
+        :deprecated: removed by GitHub
+
+        :stability: deprecated
         '''
         result = self._values.get("repository_announcement_banners")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def repository_custom_properties(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("repository_custom_properties")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def repository_hooks(self) -> typing.Optional[AppPermission]:
         '''
@@ -457,11 +709,11 @@ class AppPermissions:
         return typing.cast(typing.Optional[AppPermission], result)
 
     @builtins.property
-    def repository_project(self) -> typing.Optional[AppPermission]:
+    def repository_projects(self) -> typing.Optional[AppPermission]:
         '''
         :stability: experimental
         '''
-        result = self._values.get("repository_project")
+        result = self._values.get("repository_projects")
         return typing.cast(typing.Optional[AppPermission], result)
 
     @builtins.property
@@ -496,6 +748,14 @@ class AppPermissions:
         result = self._values.get("single_file")
         return typing.cast(typing.Optional[AppPermission], result)
 
+    @builtins.property
+    def starring(self) -> typing.Optional[AppPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("starring")
+        return typing.cast(typing.Optional[AppPermission], result)
+
     @builtins.property
     def statuses(self) -> typing.Optional[AppPermission]:
         '''
@@ -2039,7 +2299,7 @@ class JobMatrix:
     def __init__(
         self,
         *,
-        domain: typing.Optional[typing.Mapping[builtins.str, typing.Sequence[typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
+        domain: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, typing.Sequence[typing.Union[builtins.str, jsii.Number, builtins.bool]]]]] = None,
         exclude: typing.Optional[typing.Sequence[typing.Mapping[builtins.str, typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
         include: typing.Optional[typing.Sequence[typing.Mapping[builtins.str, typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
     ) -> None:
@@ -2067,7 +2327,7 @@ class JobMatrix:
     @builtins.property
     def domain(
         self,
-    ) -> typing.Optional[typing.Mapping[builtins.str, typing.List[typing.Union[builtins.str, jsii.Number, builtins.bool]]]]:
+    ) -> typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, typing.List[typing.Union[builtins.str, jsii.Number, builtins.bool]]]]]:
         '''(experimental) Each option you define in the matrix has a key and value.
 
         The keys you
@@ -2080,7 +2340,7 @@ class JobMatrix:
         :stability: experimental
         '''
         result = self._values.get("domain")
-        return typing.cast(typing.Optional[typing.Mapping[builtins.str, typing.List[typing.Union[builtins.str, jsii.Number, builtins.bool]]]], result)
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, typing.List[typing.Union[builtins.str, jsii.Number, builtins.bool]]]]], result)
 
     @builtins.property
     def exclude(
@@ -2152,12 +2412,14 @@ class JobPermission(enum.Enum):
     jsii_struct_bases=[],
     name_mapping={
         "actions": "actions",
+        "attestations": "attestations",
         "checks": "checks",
         "contents": "contents",
         "deployments": "deployments",
         "discussions": "discussions",
         "id_token": "idToken",
         "issues": "issues",
+        "models": "models",
         "packages": "packages",
         "pages": "pages",
         "pull_requests": "pullRequests",
@@ -2171,12 +2433,14 @@ class JobPermissions:
         self,
         *,
         actions: typing.Optional[JobPermission] = None,
+        attestations: typing.Optional[JobPermission] = None,
         checks: typing.Optional[JobPermission] = None,
         contents: typing.Optional[JobPermission] = None,
         deployments: typing.Optional[JobPermission] = None,
         discussions: typing.Optional[JobPermission] = None,
         id_token: typing.Optional[JobPermission] = None,
         issues: typing.Optional[JobPermission] = None,
+        models: typing.Optional[JobPermission] = None,
         packages: typing.Optional[JobPermission] = None,
         pages: typing.Optional[JobPermission] = None,
         pull_requests: typing.Optional[JobPermission] = None,
@@ -2192,12 +2456,14 @@ class JobPermissions:
         when none is specified.
 
         :param actions: 
+        :param attestations: 
         :param checks: 
         :param contents: 
         :param deployments: 
         :param discussions: 
         :param id_token: 
         :param issues: 
+        :param models: 
         :param packages: 
         :param pages: 
         :param pull_requests: 
@@ -2205,17 +2471,20 @@ class JobPermissions:
         :param security_events: 
         :param statuses: 
 
+        :see: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/controlling-permissions-for-github_token#defining-access-for-the-github_token-permissions
         :stability: experimental
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__5f9b6a3fbdc58e402a1aaac55747b5faedde783c61dcd4c97c759406d925e9a5)
             check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+            check_type(argname="argument attestations", value=attestations, expected_type=type_hints["attestations"])
             check_type(argname="argument checks", value=checks, expected_type=type_hints["checks"])
             check_type(argname="argument contents", value=contents, expected_type=type_hints["contents"])
             check_type(argname="argument deployments", value=deployments, expected_type=type_hints["deployments"])
             check_type(argname="argument discussions", value=discussions, expected_type=type_hints["discussions"])
             check_type(argname="argument id_token", value=id_token, expected_type=type_hints["id_token"])
             check_type(argname="argument issues", value=issues, expected_type=type_hints["issues"])
+            check_type(argname="argument models", value=models, expected_type=type_hints["models"])
             check_type(argname="argument packages", value=packages, expected_type=type_hints["packages"])
             check_type(argname="argument pages", value=pages, expected_type=type_hints["pages"])
             check_type(argname="argument pull_requests", value=pull_requests, expected_type=type_hints["pull_requests"])
@@ -2225,6 +2494,8 @@ class JobPermissions:
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if actions is not None:
             self._values["actions"] = actions
+        if attestations is not None:
+            self._values["attestations"] = attestations
         if checks is not None:
             self._values["checks"] = checks
         if contents is not None:
@@ -2237,6 +2508,8 @@ class JobPermissions:
             self._values["id_token"] = id_token
         if issues is not None:
             self._values["issues"] = issues
+        if models is not None:
+            self._values["models"] = models
         if packages is not None:
             self._values["packages"] = packages
         if pages is not None:
@@ -2258,6 +2531,14 @@ class JobPermissions:
         result = self._values.get("actions")
         return typing.cast(typing.Optional[JobPermission], result)
 
+    @builtins.property
+    def attestations(self) -> typing.Optional[JobPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("attestations")
+        return typing.cast(typing.Optional[JobPermission], result)
+
     @builtins.property
     def checks(self) -> typing.Optional[JobPermission]:
         '''
@@ -2306,6 +2587,14 @@ class JobPermissions:
         result = self._values.get("issues")
         return typing.cast(typing.Optional[JobPermission], result)
 
+    @builtins.property
+    def models(self) -> typing.Optional[JobPermission]:
+        '''
+        :stability: experimental
+        '''
+        result = self._values.get("models")
+        return typing.cast(typing.Optional[JobPermission], result)
+
     @builtins.property
     def packages(self) -> typing.Optional[JobPermission]:
         '''
@@ -2333,7 +2622,9 @@ class JobPermissions:
     @builtins.property
     def repository_projects(self) -> typing.Optional[JobPermission]:
         '''
-        :stability: experimental
+        :deprecated: removed by GitHub
+
+        :stability: deprecated
         '''
         result = self._values.get("repository_projects")
         return typing.cast(typing.Optional[JobPermission], result)
@@ -3262,6 +3553,7 @@ class StatusOptions:
         "id": "id",
         "if_": "if",
         "name": "name",
+        "shell": "shell",
         "working_directory": "workingDirectory",
     },
 )
@@ -3273,6 +3565,7 @@ class StepConfiguration:
         id: typing.Optional[builtins.str] = None,
         if_: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
+        shell: typing.Optional[builtins.str] = None,
         working_directory: typing.Optional[builtins.str] = None,
     ) -> None:
         '''(experimental) Fields that describe the How, Why, When, and Who of a Step.
@@ -3285,6 +3578,7 @@ class StepConfiguration:
         :param id: (experimental) A unique identifier for the step. You can use the id to reference the step in contexts.
         :param if_: (experimental) You can use the if conditional to prevent a job from running unless a condition is met. You can use any supported context and expression to create a conditional.
         :param name: (experimental) A name for your step to display on GitHub.
+        :param shell: (experimental) Overrides the default shell settings in the runner's operating system and the job's default. Refer to GitHub documentation for allowed values.
         :param working_directory: (experimental) Specifies a working directory for a step. Overrides a job's working directory.
 
         :stability: experimental
@@ -3295,6 +3589,7 @@ class StepConfiguration:
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
             check_type(argname="argument if_", value=if_, expected_type=type_hints["if_"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument shell", value=shell, expected_type=type_hints["shell"])
             check_type(argname="argument working_directory", value=working_directory, expected_type=type_hints["working_directory"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if env is not None:
@@ -3305,6 +3600,8 @@ class StepConfiguration:
             self._values["if_"] = if_
         if name is not None:
             self._values["name"] = name
+        if shell is not None:
+            self._values["shell"] = shell
         if working_directory is not None:
             self._values["working_directory"] = working_directory
 
@@ -3352,6 +3649,18 @@ class StepConfiguration:
         result = self._values.get("name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def shell(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Overrides the default shell settings in the runner's operating system and the job's default.
+
+        Refer to GitHub documentation for allowed values.
+
+        :see: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsshell
+        :stability: experimental
+        '''
+        result = self._values.get("shell")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def working_directory(self) -> typing.Optional[builtins.str]:
         '''(experimental) Specifies a working directory for a step.
@@ -4392,6 +4701,7 @@ class WorkflowRunOptions:
         "id": "id",
         "if_": "if",
         "name": "name",
+        "shell": "shell",
         "working_directory": "workingDirectory",
         "continue_on_error": "continueOnError",
         "timeout_minutes": "timeoutMinutes",
@@ -4405,6 +4715,7 @@ class JobStepConfiguration(StepConfiguration):
         id: typing.Optional[builtins.str] = None,
         if_: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
+        shell: typing.Optional[builtins.str] = None,
         working_directory: typing.Optional[builtins.str] = None,
         continue_on_error: typing.Optional[builtins.bool] = None,
         timeout_minutes: typing.Optional[jsii.Number] = None,
@@ -4415,6 +4726,7 @@ class JobStepConfiguration(StepConfiguration):
         :param id: (experimental) A unique identifier for the step. You can use the id to reference the step in contexts.
         :param if_: (experimental) You can use the if conditional to prevent a job from running unless a condition is met. You can use any supported context and expression to create a conditional.
         :param name: (experimental) A name for your step to display on GitHub.
+        :param shell: (experimental) Overrides the default shell settings in the runner's operating system and the job's default. Refer to GitHub documentation for allowed values.
         :param working_directory: (experimental) Specifies a working directory for a step. Overrides a job's working directory.
         :param continue_on_error: (experimental) Prevents a job from failing when a step fails. Set to true to allow a job to pass when this step fails.
         :param timeout_minutes: (experimental) The maximum number of minutes to run the step before killing the process.
@@ -4427,6 +4739,7 @@ class JobStepConfiguration(StepConfiguration):
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
             check_type(argname="argument if_", value=if_, expected_type=type_hints["if_"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument shell", value=shell, expected_type=type_hints["shell"])
             check_type(argname="argument working_directory", value=working_directory, expected_type=type_hints["working_directory"])
             check_type(argname="argument continue_on_error", value=continue_on_error, expected_type=type_hints["continue_on_error"])
             check_type(argname="argument timeout_minutes", value=timeout_minutes, expected_type=type_hints["timeout_minutes"])
@@ -4439,6 +4752,8 @@ class JobStepConfiguration(StepConfiguration):
             self._values["if_"] = if_
         if name is not None:
             self._values["name"] = name
+        if shell is not None:
+            self._values["shell"] = shell
         if working_directory is not None:
             self._values["working_directory"] = working_directory
         if continue_on_error is not None:
@@ -4490,6 +4805,18 @@ class JobStepConfiguration(StepConfiguration):
         result = self._values.get("name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def shell(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Overrides the default shell settings in the runner's operating system and the job's default.
+
+        Refer to GitHub documentation for allowed values.
+
+        :see: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsshell
+        :stability: experimental
+        '''
+        result = self._values.get("shell")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def working_directory(self) -> typing.Optional[builtins.str]:
         '''(experimental) Specifies a working directory for a step.
@@ -4760,6 +5087,7 @@ class PullRequestTargetOptions(PushOptions):
         "id": "id",
         "if_": "if",
         "name": "name",
+        "shell": "shell",
         "working_directory": "workingDirectory",
         "run": "run",
         "uses": "uses",
@@ -4774,6 +5102,7 @@ class Step(StepConfiguration):
         id: typing.Optional[builtins.str] = None,
         if_: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
+        shell: typing.Optional[builtins.str] = None,
         working_directory: typing.Optional[builtins.str] = None,
         run: typing.Optional[builtins.str] = None,
         uses: typing.Optional[builtins.str] = None,
@@ -4790,6 +5119,7 @@ class Step(StepConfiguration):
         :param id: (experimental) A unique identifier for the step. You can use the id to reference the step in contexts.
         :param if_: (experimental) You can use the if conditional to prevent a job from running unless a condition is met. You can use any supported context and expression to create a conditional.
         :param name: (experimental) A name for your step to display on GitHub.
+        :param shell: (experimental) Overrides the default shell settings in the runner's operating system and the job's default. Refer to GitHub documentation for allowed values.
         :param working_directory: (experimental) Specifies a working directory for a step. Overrides a job's working directory.
         :param run: (experimental) Runs command-line programs using the operating system's shell. If you do not provide a name, the step name will default to the text specified in the run command.
         :param uses: (experimental) Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, or in a published Docker container image.
@@ -4804,6 +5134,7 @@ class Step(StepConfiguration):
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
             check_type(argname="argument if_", value=if_, expected_type=type_hints["if_"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument shell", value=shell, expected_type=type_hints["shell"])
             check_type(argname="argument working_directory", value=working_directory, expected_type=type_hints["working_directory"])
             check_type(argname="argument run", value=run, expected_type=type_hints["run"])
             check_type(argname="argument uses", value=uses, expected_type=type_hints["uses"])
@@ -4817,6 +5148,8 @@ class Step(StepConfiguration):
             self._values["if_"] = if_
         if name is not None:
             self._values["name"] = name
+        if shell is not None:
+            self._values["shell"] = shell
         if working_directory is not None:
             self._values["working_directory"] = working_directory
         if run is not None:
@@ -4870,6 +5203,18 @@ class Step(StepConfiguration):
         result = self._values.get("name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def shell(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Overrides the default shell settings in the runner's operating system and the job's default.
+
+        Refer to GitHub documentation for allowed values.
+
+        :see: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsshell
+        :stability: experimental
+        '''
+        result = self._values.get("shell")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def working_directory(self) -> typing.Optional[builtins.str]:
         '''(experimental) Specifies a working directory for a step.
@@ -4941,6 +5286,7 @@ class Step(StepConfiguration):
         "id": "id",
         "if_": "if",
         "name": "name",
+        "shell": "shell",
         "working_directory": "workingDirectory",
         "run": "run",
         "uses": "uses",
@@ -4957,6 +5303,7 @@ class JobStep(Step, JobStepConfiguration):
         id: typing.Optional[builtins.str] = None,
         if_: typing.Optional[builtins.str] = None,
         name: typing.Optional[builtins.str] = None,
+        shell: typing.Optional[builtins.str] = None,
         working_directory: typing.Optional[builtins.str] = None,
         run: typing.Optional[builtins.str] = None,
         uses: typing.Optional[builtins.str] = None,
@@ -4970,6 +5317,7 @@ class JobStep(Step, JobStepConfiguration):
         :param id: (experimental) A unique identifier for the step. You can use the id to reference the step in contexts.
         :param if_: (experimental) You can use the if conditional to prevent a job from running unless a condition is met. You can use any supported context and expression to create a conditional.
         :param name: (experimental) A name for your step to display on GitHub.
+        :param shell: (experimental) Overrides the default shell settings in the runner's operating system and the job's default. Refer to GitHub documentation for allowed values.
         :param working_directory: (experimental) Specifies a working directory for a step. Overrides a job's working directory.
         :param run: (experimental) Runs command-line programs using the operating system's shell. If you do not provide a name, the step name will default to the text specified in the run command.
         :param uses: (experimental) Selects an action to run as part of a step in your job. An action is a reusable unit of code. You can use an action defined in the same repository as the workflow, a public repository, or in a published Docker container image.
@@ -4986,6 +5334,7 @@ class JobStep(Step, JobStepConfiguration):
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
             check_type(argname="argument if_", value=if_, expected_type=type_hints["if_"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument shell", value=shell, expected_type=type_hints["shell"])
             check_type(argname="argument working_directory", value=working_directory, expected_type=type_hints["working_directory"])
             check_type(argname="argument run", value=run, expected_type=type_hints["run"])
             check_type(argname="argument uses", value=uses, expected_type=type_hints["uses"])
@@ -5001,6 +5350,8 @@ class JobStep(Step, JobStepConfiguration):
             self._values["if_"] = if_
         if name is not None:
             self._values["name"] = name
+        if shell is not None:
+            self._values["shell"] = shell
         if working_directory is not None:
             self._values["working_directory"] = working_directory
         if run is not None:
@@ -5058,6 +5409,18 @@ class JobStep(Step, JobStepConfiguration):
         result = self._values.get("name")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def shell(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Overrides the default shell settings in the runner's operating system and the job's default.
+
+        Refer to GitHub documentation for allowed values.
+
+        :see: https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsshell
+        :stability: experimental
+        '''
+        result = self._values.get("shell")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def working_directory(self) -> typing.Optional[builtins.str]:
         '''(experimental) Specifies a working directory for a step.
@@ -5207,18 +5570,32 @@ def _typecheckingstub__6e0085e134a87f8de8cb54bc56e329333881c3520710c833f5ed76097
     *,
     actions: typing.Optional[AppPermission] = None,
     administration: typing.Optional[AppPermission] = None,
+    attestations: typing.Optional[AppPermission] = None,
     checks: typing.Optional[AppPermission] = None,
+    codespaces: typing.Optional[AppPermission] = None,
     contents: typing.Optional[AppPermission] = None,
+    dependabot_secrets: typing.Optional[AppPermission] = None,
     deployments: typing.Optional[AppPermission] = None,
+    email_addresses: typing.Optional[AppPermission] = None,
     environments: typing.Optional[AppPermission] = None,
+    followers: typing.Optional[AppPermission] = None,
+    git_ssh_keys: typing.Optional[AppPermission] = None,
+    gpg_keys: typing.Optional[AppPermission] = None,
+    interaction_limits: typing.Optional[AppPermission] = None,
     issues: typing.Optional[AppPermission] = None,
     members: typing.Optional[AppPermission] = None,
     metadata: typing.Optional[AppPermission] = None,
     organization_administration: typing.Optional[AppPermission] = None,
     organization_announcement_banners: typing.Optional[AppPermission] = None,
+    organization_copilot_seat_management: typing.Optional[AppPermission] = None,
+    organization_custom_org_roles: typing.Optional[AppPermission] = None,
+    organization_custom_properties: typing.Optional[AppPermission] = None,
     organization_custom_roles: typing.Optional[AppPermission] = None,
+    organization_events: typing.Optional[AppPermission] = None,
     organization_hooks: typing.Optional[AppPermission] = None,
     organization_packages: typing.Optional[AppPermission] = None,
+    organization_personal_access_token_requests: typing.Optional[AppPermission] = None,
+    organization_personal_access_tokens: typing.Optional[AppPermission] = None,
     organization_plan: typing.Optional[AppPermission] = None,
     organization_projects: typing.Optional[AppPermission] = None,
     organization_secrets: typing.Optional[AppPermission] = None,
@@ -5226,14 +5603,17 @@ def _typecheckingstub__6e0085e134a87f8de8cb54bc56e329333881c3520710c833f5ed76097
     orgnaization_user_blocking: typing.Optional[AppPermission] = None,
     packages: typing.Optional[AppPermission] = None,
     pages: typing.Optional[AppPermission] = None,
+    profile: typing.Optional[AppPermission] = None,
     pull_requests: typing.Optional[AppPermission] = None,
     repository_announcement_banners: typing.Optional[AppPermission] = None,
+    repository_custom_properties: typing.Optional[AppPermission] = None,
     repository_hooks: typing.Optional[AppPermission] = None,
-    repository_project: typing.Optional[AppPermission] = None,
+    repository_projects: typing.Optional[AppPermission] = None,
     secrets: typing.Optional[AppPermission] = None,
     secret_scanning_alerts: typing.Optional[AppPermission] = None,
     security_events: typing.Optional[AppPermission] = None,
     single_file: typing.Optional[AppPermission] = None,
+    starring: typing.Optional[AppPermission] = None,
     statuses: typing.Optional[AppPermission] = None,
     team_discussions: typing.Optional[AppPermission] = None,
     vulnerability_alerts: typing.Optional[AppPermission] = None,
@@ -5378,7 +5758,7 @@ def _typecheckingstub__4afc181ec4ce3844469de535090d57cb39b9f47cf28d0bdc1e7a95bf2
 
 def _typecheckingstub__27c1bb692367ba40c0c0307ec4a86916287ff1f39e99b1eeab7f30bb7886bbda(
     *,
-    domain: typing.Optional[typing.Mapping[builtins.str, typing.Sequence[typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
+    domain: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, typing.Sequence[typing.Union[builtins.str, jsii.Number, builtins.bool]]]]] = None,
     exclude: typing.Optional[typing.Sequence[typing.Mapping[builtins.str, typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
     include: typing.Optional[typing.Sequence[typing.Mapping[builtins.str, typing.Union[builtins.str, jsii.Number, builtins.bool]]]] = None,
 ) -> None:
@@ -5388,12 +5768,14 @@ def _typecheckingstub__27c1bb692367ba40c0c0307ec4a86916287ff1f39e99b1eeab7f30bb7
 def _typecheckingstub__5f9b6a3fbdc58e402a1aaac55747b5faedde783c61dcd4c97c759406d925e9a5(
     *,
     actions: typing.Optional[JobPermission] = None,
+    attestations: typing.Optional[JobPermission] = None,
     checks: typing.Optional[JobPermission] = None,
     contents: typing.Optional[JobPermission] = None,
     deployments: typing.Optional[JobPermission] = None,
     discussions: typing.Optional[JobPermission] = None,
     id_token: typing.Optional[JobPermission] = None,
     issues: typing.Optional[JobPermission] = None,
+    models: typing.Optional[JobPermission] = None,
     packages: typing.Optional[JobPermission] = None,
     pages: typing.Optional[JobPermission] = None,
     pull_requests: typing.Optional[JobPermission] = None,
@@ -5521,6 +5903,7 @@ def _typecheckingstub__044349b8d18055b991a5680dc1d218dc2901bc2369d30fa23e79229d8
     id: typing.Optional[builtins.str] = None,
     if_: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
+    shell: typing.Optional[builtins.str] = None,
     working_directory: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""
@@ -5607,6 +5990,7 @@ def _typecheckingstub__015947eea91a5bd0b89e515aeca63fc47bd80c9c63472b7c37f32a247
     id: typing.Optional[builtins.str] = None,
     if_: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
+    shell: typing.Optional[builtins.str] = None,
     working_directory: typing.Optional[builtins.str] = None,
     continue_on_error: typing.Optional[builtins.bool] = None,
     timeout_minutes: typing.Optional[jsii.Number] = None,
@@ -5640,6 +6024,7 @@ def _typecheckingstub__91711bdec7a542de93f053fdd93de2213c56069702113a10e2c71564c
     id: typing.Optional[builtins.str] = None,
     if_: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
+    shell: typing.Optional[builtins.str] = None,
     working_directory: typing.Optional[builtins.str] = None,
     run: typing.Optional[builtins.str] = None,
     uses: typing.Optional[builtins.str] = None,
@@ -5654,6 +6039,7 @@ def _typecheckingstub__0df3f4a2690eb7ddc82908948a9807cfdc9923a4466ac38225eda950e
     id: typing.Optional[builtins.str] = None,
     if_: typing.Optional[builtins.str] = None,
     name: typing.Optional[builtins.str] = None,
+    shell: typing.Optional[builtins.str] = None,
     working_directory: typing.Optional[builtins.str] = None,
     run: typing.Optional[builtins.str] = None,
     uses: typing.Optional[builtins.str] = None,