Merge branch 'main' into main

Author: npalm

.github/workflows/actions.yml

@@ -51,7 +51,7 @@ jobs:
           path: results.sarif
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+        uses: github/codeql-action/upload-sarif@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
         with:
           sarif_file: results.sarif
           category: actions-zizmor

.github/workflows/codeql.yml

@@ -31,12 +31,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+      uses: github/codeql-action/init@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
       with:
         languages: ${{ matrix.language }}
         build-mode: none
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3.28.14
+      uses: github/codeql-action/analyze@45775bd8235c68ba998cffa5171334d58593da47 # v3.28.15
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/release.yml

@@ -16,7 +16,7 @@ jobs:
       id-token: write
       attestations: write
     steps:
-      - uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 22
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/update-docs.yml

@@ -23,7 +23,7 @@ jobs:
       # use an app to ensure CI is triggered
       - name: Generate TF docs
         if: github.repository_owner == 'github-aws-runners'
-        uses: terraform-docs/gh-actions@aeae0038ed47a547e0c0fca5c059d3335f48fb25 # v1.3.0
+        uses: terraform-docs/gh-actions@6de6da0cefcc6b4b7a5cbea4d79d97060733093c # v1.4.1
         with:
           find-dir: .
           git-commit-message: "docs: auto update terraform docs"
@@ -33,7 +33,7 @@ jobs:
 
       - name: Generate TF docs (forks)
         if: github.repository_owner != 'github-aws-runners'
-        uses: terraform-docs/gh-actions@aeae0038ed47a547e0c0fca5c059d3335f48fb25 # v1.3.0
+        uses: terraform-docs/gh-actions@6de6da0cefcc6b4b7a5cbea4d79d97060733093c # v1.4.1
         with:
           find-dir: .
           git-commit-message: "docs: auto update terraform docs"

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [6.5.0](https://github.com/github-aws-runners/terraform-aws-github-runner/compare/v6.4.3...v6.5.0) (2025-04-15)
+
+
+### Features
+
+* migrate launch template to use SSM for AMI lookup ([#4517](https://github.com/github-aws-runners/terraform-aws-github-runner/issues/4517)) ([472cc5f](https://github.com/github-aws-runners/terraform-aws-github-runner/commit/472cc5f6175d79e26260e0ed7a9cac7fc299411f))
+
+
+### Bug Fixes
+
+* **lambda:** bump the aws group in /lambdas with 6 updates ([#4536](https://github.com/github-aws-runners/terraform-aws-github-runner/issues/4536)) ([acfb6c5](https://github.com/github-aws-runners/terraform-aws-github-runner/commit/acfb6c5deda8a273e05b7cce36c6ec655dee3f50))
+* **lambda:** bump the aws-powertools group in /lambdas with 4 updates ([#4538](https://github.com/github-aws-runners/terraform-aws-github-runner/issues/4538)) ([a308819](https://github.com/github-aws-runners/terraform-aws-github-runner/commit/a308819b00484006013ae1b3a538a0ecbe1296ce))
+* **lambda:** bump the octokit group in /lambdas with 4 updates ([#4537](https://github.com/github-aws-runners/terraform-aws-github-runner/issues/4537)) ([94f2c9d](https://github.com/github-aws-runners/terraform-aws-github-runner/commit/94f2c9de292200fb8c9d640cc26a759fc91cf0f7))
+
 ## [6.4.3](https://github.com/github-aws-runners/terraform-aws-github-runner/compare/v6.4.2...v6.4.3) (2025-04-08)
 
 

lambdas/functions/ami-housekeeper/package.json

@@ -26,8 +26,8 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-sdk/client-ec2": "^3.783.0",
-    "@aws-sdk/client-ssm": "^3.782.0",
+    "@aws-sdk/client-ec2": "^3.787.0",
+    "@aws-sdk/client-ssm": "^3.787.0",
     "cron-parser": "^5.0.4"
   },
   "nx": {

lambdas/functions/control-plane/package.json

@@ -18,7 +18,7 @@
   },
   "devDependencies": {
     "@aws-sdk/types": "^3.775.0",
-    "@octokit/types": "^13.10.0",
+    "@octokit/types": "^14.0.0",
     "@types/aws-lambda": "^8.10.147",
     "@types/node": "^22.14.0",
     "@vercel/ncc": "^0.38.3",
@@ -32,13 +32,13 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-lambda-powertools/parameters": "^2.17.0",
-    "@aws-sdk/client-ec2": "^3.783.0",
-    "@aws-sdk/client-sqs": "^3.782.0",
+    "@aws-lambda-powertools/parameters": "^2.18.0",
+    "@aws-sdk/client-ec2": "^3.787.0",
+    "@aws-sdk/client-sqs": "^3.787.0",
     "@middy/core": "^4.7.0",
-    "@octokit/auth-app": "7.2.0",
-    "@octokit/core": "6.1.4",
-    "@octokit/plugin-throttling": "9.6.1",
+    "@octokit/auth-app": "7.2.1",
+    "@octokit/core": "6.1.5",
+    "@octokit/plugin-throttling": "10.0.0",
     "@octokit/rest": "21.1.1",
     "cron-parser": "^5.0.4"
   },

lambdas/functions/gh-agent-syncer/package.json

@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
-    "@aws-sdk/client-s3": "^3.782.0",
-    "@aws-sdk/lib-storage": "^3.782.0",
+    "@aws-sdk/client-s3": "^3.787.0",
+    "@aws-sdk/lib-storage": "^3.787.0",
     "@middy/core": "^4.7.0",
     "@octokit/rest": "21.1.1",
     "axios": "^1.8.3"

lambdas/functions/termination-watcher/package.json

@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
-    "@aws-sdk/client-ec2": "^3.783.0",
+    "@aws-sdk/client-ec2": "^3.787.0",
     "@middy/core": "^4.7.0"
   },
   "nx": {

lambdas/functions/webhook/package.json

@@ -17,7 +17,7 @@
     "all": "yarn build && yarn format && yarn lint && yarn test"
   },
   "devDependencies": {
-    "@aws-sdk/client-eventbridge": "^3.783.0",
+    "@aws-sdk/client-eventbridge": "^3.787.0",
     "@octokit/webhooks-types": "^7.6.1",
     "@types/aws-lambda": "^8.10.147",
     "@types/express": "^5.0.0",
@@ -30,10 +30,10 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-sdk/client-sqs": "^3.782.0",
+    "@aws-sdk/client-sqs": "^3.787.0",
     "@middy/core": "^4.7.0",
     "@octokit/rest": "21.1.1",
-    "@octokit/types": "^13.10.0",
+    "@octokit/types": "^14.0.0",
     "@octokit/webhooks": "^13.8.0",
     "aws-lambda": "^1.0.7"
   },