feat: release workflow

.github/workflows/run-release.yml

@@ -0,0 +1,71 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version-override:
+        type: string
+        required: false
+        description: 'Optionally specify a custom release version (minor version bump e.g.)'
+
+permissions:
+  id-token: write
+  contents: write
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout source
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
+      - name: Resolve version
+        id: resolve-version
+        run: |
+          if [ -n "${{ inputs.version-override }}" ]; then
+            echo "NEW_VERSION=${{ inputs.version-override }}" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          CURRENT_VERSION=$(git tag --sort=-creatordate | head -n 1)
+
+          IFS='.' read -r MAJOR MINOR PATCH <<< "$CURRENT_VERSION"
+          PATCH=$((PATCH + 1))
+          RESOLVED_VERSION="$MAJOR.$MINOR.$PATCH"
+
+          echo "NEW_VERSION=$RESOLVED_VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Configure git
+        run: |
+          git config user.name aws-sdk-kotlin-ci
+          git config user.email "[email protected]" 
+
+      - name: Create tag
+        env:
+          NEW_VERSION: ${{ steps.resolve-version.outputs.NEW_VERSION }}
+        run: |
+          git tag "$NEW_VERSION"
+          git push origin "$NEW_VERSION"
+
+      - name: Configure Gradle
+        uses: awslabs/aws-kotlin-repo-tools/.github/actions/configure-gradle@main
+
+      - name: Configure AWS credentials
+        uses: aws-actions/configure-aws-credentials@v4
+        with:
+          role-to-assume: ${{ secrets.PUBLISHING_ROLE_ARN }}
+          aws-region: us-west-2
+
+      - name: Run CodeBuild
+        uses: aws-actions/aws-codebuild-run-build@v1
+        with:
+          project-name: publish-aws-kotlin-repo-tools
+          source-version-override: ${{ steps.resolve-version.outputs.NEW_VERSION }}
+
+      - name: Delete failed release tag
+        if: ${{ failure() }}
+        run: |
+          git push --delete origin ${{ steps.resolve-version.outputs.NEW_VERSION }}

scripts/release.sh

@@ -20,7 +20,7 @@ export AWS_SECRET_ACCESS_KEY=$(echo "${SESSION_CREDS}" | jq -r '.Credentials.Sec
 export AWS_SESSION_TOKEN=$(echo "${SESSION_CREDS}" | jq -r '.Credentials.SessionToken')
 export RELEASE_S3_URL="s3://$RELEASE_BUCKET/releases"
 
-TEST_KEY="releases/aws/sdk/kotlin/build-plugins/$VERSION/build-plugins-$VERSION.jar"
+TEST_KEY="releases/aws/sdk/kotlin/gradle/build-support/$VERSION/build-support-$VERSION.jar"
 
 if aws s3api head-object --bucket $RELEASE_BUCKET --key $TEST_KEY; then
     echo "failing release; $VERSION already exists!"