Merge branch 'main' into python-dafny-changes

Author: imabhichow

.github/actions/install_smithy_dafny_codegen_dependencies/action.yml

@@ -30,16 +30,6 @@ runs:
         python -m pip install --upgrade black
         python -m pip install --upgrade docformatter
 
-    - name: Install Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: "1.23"
-
-    - name: Install Go imports
-      shell: bash
-      run: |
-        go install golang.org/x/tools/cmd/goimports@latest
-
     # Without this the if-dafny-at-least command includes "Downloading ..." output
     - name: Arbitrary makefile target to force downloading Gradle
       shell: bash

.github/actions/polymorph_codegen/action.yml

@@ -141,6 +141,12 @@ runs:
       run: |
         make polymorph_dotnet ${{ steps.dependencies.outputs.PROJECT_DEPENDENCIES }}
 
+    - name: Regenerate Go code using smithy-dafny
+      working-directory: ./${{ inputs.library }}
+      shell: bash
+      run: |
+        make polymorph_go
+
     - name: Check regenerated code against commited code
       # Composite action inputs seem to not actually support booleans properly for some reason
       if: inputs.diff-generated-code == 'true'

.github/workflows/ci_codegen.yml

@@ -18,6 +18,7 @@ jobs:
         # in this workflow
         dotnet-version: ["6.0.x"]
         os: [ubuntu-22.04]
+        go-version: [1.23]
     runs-on: ${{ matrix.os }}
     defaults:
       run:
@@ -48,6 +49,15 @@ jobs:
         with:
           dotnet-version: ${{ matrix.dotnet-version }}
 
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: ${{ matrix.go-version }}
+
+      - name: Install Go imports
+        run: |
+          go install golang.org/x/tools/cmd/goimports@latest
+
       - name: Create temporary global.json
         run: echo '{"sdk":{"rollForward":"latestFeature","version":"6.0.0"}}' > ./global.json
 

.github/workflows/ci_examples_java.yml

@@ -26,7 +26,6 @@ on:
 jobs:
   testJava:
     strategy:
-      max-parallel: 1
       matrix:
         java-version: [8, 11, 16, 17]
         os: [macos-13]

.github/workflows/ci_test_go.yml

@@ -26,10 +26,11 @@ on:
 jobs:
   testGo:
     strategy:
+      fail-fast: false
       matrix:
         library: [DynamoDbEncryption, TestVectors]
         os: [ubuntu-22.04, macos-13]
-        go-version: ["1.23"]
+        go-version: ["1.23", "1.24"]
     runs-on: ${{ matrix.os }}
     permissions:
       id-token: write
@@ -108,6 +109,11 @@ jobs:
       - name: Install Smithy-Dafny codegen dependencies
         uses: ./.github/actions/install_smithy_dafny_codegen_dependencies
 
+      - name: Install Go imports
+        shell: bash
+        run: |
+          go install golang.org/x/tools/cmd/goimports@latest
+
       - name: Build ${{ matrix.library }} implementation
         shell: bash
         working-directory: ./${{ matrix.library }}

.github/workflows/ci_test_java.yml

@@ -26,6 +26,7 @@ on:
 jobs:
   testJava:
     strategy:
+      fail-fast: false
       matrix:
         library: [DynamoDbEncryption]
         java-version: [8, 11, 16, 17]

.github/workflows/daily_ci.yml

@@ -76,3 +76,27 @@ jobs:
     uses: ./.github/workflows/ci_examples_net.yml
     with:
       dafny: ${{needs.getVersion.outputs.version}}
+  notify:
+    needs:
+      [
+        getVersion,
+        getVerifyVersion,
+        daily-ci-format,
+        daily-ci-codegen,
+        daily-ci-verification,
+        daily-ci-test-vector-verification,
+        daily-ci-java,
+        daily-ci-java-test-vectors,
+        daily-ci-java-examples,
+        daily-ci-net,
+        daily-ci-rust,
+        daily-ci-go,
+        daily-ci-net-test-vectors,
+        daily-ci-net-examples,
+      ]
+    if: ${{ failure() }}
+    uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main
+    with:
+      message: "Daily CI failed on `${{ github.repository }}`. View run: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+    secrets:
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_CI }}

.github/workflows/go-release.yml

@@ -0,0 +1,114 @@
+name: Go Release Automation
+
+on:
+  workflow_dispatch:
+    inputs:
+      project-name:
+        description: "Project name (e.g., DynamoDbEncryption)"
+        required: true
+        type: string
+      version:
+        description: "Version (e.g., v0.1.0)"
+        required: true
+        type: string
+
+jobs:
+  get-dafny-version:
+    uses: ./.github/workflows/dafny_version.yml
+
+  go-release:
+    needs: get-dafny-version
+    runs-on: macos-13
+    permissions:
+      contents: write
+      pull-requests: write
+      id-token: write
+
+    steps:
+      - name: Support longpaths on Git checkout
+        run: |
+          git config --global core.longpaths true
+
+      # KMS and MPL tests need to use credentials which can call KMS
+      - name: Configure AWS Credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: us-west-2
+          role-to-assume: arn:aws:iam::370957321024:role/GitHub-CI-DDBEC-Dafny-Role-us-west-2
+          role-session-name: GoRelease-DBESDK-Tests
+
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Update submodules
+        run: |
+          git submodule update --init --recursive
+
+      - name: Setup Dafny
+        uses: dafny-lang/[email protected]
+        with:
+          dafny-version: ${{ needs.get-dafny-version.outputs.version }}
+
+      - name: Install Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: "1.23"
+
+      - name: Install Go imports
+        run: |
+          go install golang.org/x/tools/cmd/goimports@latest
+
+      - name: Install Smithy-Dafny codegen dependencies
+        uses: ./.github/actions/install_smithy_dafny_codegen_dependencies
+
+      - name: Configure Git
+        run: |
+          git config --global user.name "GitHub Actions"
+          git config --global user.email "[email protected]"
+
+      - name: Get release directory name
+        id: release-dir
+        run: |
+          chmod +x ./scripts/go-release-automation.sh
+          RELEASE_DIR_NAME=$(./scripts/go-release-automation.sh get_release_dir_name "${{ github.event.inputs.project-name }}" "${{ github.event.inputs.version }}")
+          echo "releaseDirName=$RELEASE_DIR_NAME" >> $GITHUB_OUTPUT
+
+      - name: Generate a changelog
+        uses: orhun/git-cliff-action@v4
+        with:
+          config: releases/go/.git-cliff.toml
+          args: --bump -u --prepend releases/go/${{ steps.release-dir.outputs.releaseDirName }}/CHANGELOG.md
+
+      - name: Run Go release automation script
+        run: |
+          chmod +x ./scripts/go-release-automation.sh
+          ./scripts/go-release-automation.sh run_release_script ${{ github.event.inputs.project-name }} ${{ github.event.inputs.version }}
+
+      - name: Create Pull Request
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          PROJECT_NAME="${{ github.event.inputs.project-name }}"
+          VERSION="${{ github.event.inputs.version }}"
+
+          # Get the release directory name using the sourced function
+          RELEASE_DIR_NAME="${{ steps.release-dir.outputs.releaseDirName }}"
+
+          BRANCH_NAME="golang-release-staging-branch/$RELEASE_DIR_NAME/$VERSION"
+
+          DIFF_FILES=$(diff -qr $PROJECT_NAME/runtimes/go/ImplementationFromDafny-go releases/go/$RELEASE_DIR_NAME || true)
+
+          # Create PR using GitHub CLI
+          gh pr create \
+            --title "chore(go): Release $RELEASE_DIR_NAME Go module $VERSION" \
+            --body "This PR was automatically created by the Go Release Automation workflow. It releases version $VERSION of the $RELEASE_DIR_NAME Go module. The diff between $PROJECT_NAME/runtimes/go/ImplementationFromDafny-go and releases/go/$RELEASE_DIR_NAME is below: 
+
+          $DIFF_FILES
+            " \
+            --base main \
+            --head "$BRANCH_NAME" \
+            --label "golang" \
+            --draft

.github/workflows/issue-notification.yml

@@ -0,0 +1,23 @@
+name: Issue Created Notification
+on:
+  issues:
+    types: [opened, reopened]
+  issue_comment:
+    types: [created]
+
+jobs:
+  notify-issue:
+    if: github.event_name == 'issues'
+    uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main
+    with:
+      message: "New github issue `${{ github.event.issue.title }}`. Link: ${{ github.event.issue.html_url }}"
+    secrets:
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_GHI }}
+
+  notify-comment:
+    if: github.event_name == 'issue_comment' && !github.event.issue.pull_request
+    uses: aws/aws-cryptographic-material-providers-library/.github/workflows/slack-notification.yml@main
+    with:
+      message: "New comment on issue `${{ github.event.issue.title }}`. Link: ${{ github.event.comment.html_url }}"
+    secrets:
+      SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL_GHI }}

CHANGELOG.md

@@ -1,5 +1,26 @@
 # Changelog
 
+## [3.9.0](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.8.1...v3.9.0) (2025-06-25)
+
+This release is available in the following languages:
+
+- Java
+
+### Maintenance
+
+- **dafny:** Add ExecuteStatement test ([#1932](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1932)) ([66a19ab](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/66a19ab7d9ddea1018cbb01da053020148e4a1e7))
+- **dafny:** Add Update and delete test ([#1942](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1942)) ([3bd48ba](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/3bd48bacc6e9ca458931031062ee97f351f9de32))
+- **dafny:** change nat to uint64 in many places ([#1852](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1852)) ([ec22b7d](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/ec22b7d316678f4d836837e751bdfcf41f461441))
+- **dafny:** further performance enhancements ([#1834](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1834)) ([ea94693](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/ea9469327109a61e544425479dfb2c6be514ce5a))
+- **dafny:** improve performance ([#1900](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1900)) ([ccf61d6](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/ccf61d6a9c49385f1cccde0cda9c0609ba050455))
+- **dafny:** improve performance of searchable encryption ([#1931](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1931)) ([8b71004](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/8b710042e1bc0516b70a9f9674edab7f775d236f))
+- **dafny:** reduce use of BigInteger ([#1872](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1872)) ([eb7679a](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/eb7679afa9fb6383a76fd71f9e7a4e40bbe53c8a))
+- **dafny:** test ExecuteTransaction and BatchExecuteStatement ([#1941](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1941)) ([69c37c6](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/69c37c6a8491b2a5aadf74c4f80355b0593aed32))
+- **deps:** Bump MPL version to 1.11.0 ([#1945](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1945)) ([efdd373](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/efdd373ab91fc7465be0f0d05d8018f59131ee6f))
+- further performance improvements ([#1826](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1826)) ([3194054](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/3194054eea95c640d0ac469911e950fc76953dd6))
+- improve performance ([#1622](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1622)) ([8ca2883](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/8ca288345fe7371711c1c51e1d064538686e25f1))
+- update README for missing info ([#1939](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1939)) ([354f4f6](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/354f4f6c48ed6c60914f5ce0feaba64de7ed2587))
+
 ## [3.8.1](https://github.com/aws/aws-database-encryption-sdk-dynamodb/compare/v3.8.0...v3.8.1) (2025-04-01)
 
 This release is available in the following languages: