chore(release): 1.30.0

.all-contributorsrc

@@ -1112,6 +1112,53 @@
       "contributions": [
         "bug"
       ]
+    },
+    {
+      "login": "guyroberts21",
+      "name": "guyroberts21",
+      "avatar_url": "https://avatars.githubusercontent.com/u/47118902?v=4",
+      "profile": "https://github.com/guyroberts21",
+      "contributions": [
+        "doc"
+      ]
+    },
+    {
+      "login": "rectalogic",
+      "name": "Andrew Wason",
+      "avatar_url": "https://avatars.githubusercontent.com/u/11581?v=4",
+      "profile": "https://github.com/rectalogic",
+      "contributions": [
+        "bug",
+        "code"
+      ]
+    },
+    {
+      "login": "corymhall",
+      "name": "Cory Hall",
+      "avatar_url": "https://avatars.githubusercontent.com/u/43035978?v=4",
+      "profile": "https://github.com/corymhall",
+      "contributions": [
+        "bug"
+      ]
+    },
+    {
+      "login": "lzhoucs",
+      "name": "Liang Zhou",
+      "avatar_url": "https://avatars.githubusercontent.com/u/1444104?v=4",
+      "profile": "https://liangzhou.dev",
+      "contributions": [
+        "bug",
+        "code"
+      ]
+    },
+    {
+      "login": "polothy",
+      "name": "Mark Nielsen",
+      "avatar_url": "https://avatars.githubusercontent.com/u/634657?v=4",
+      "profile": "https://polothy.github.io",
+      "contributions": [
+        "code"
+      ]
     }
   ],
   "repoType": "github",
@@ -1121,4 +1168,4 @@
     "README.md"
   ],
   "contributorsPerLine": 7
-}
+}

.github/workflows/auto-approve.yml

@@ -10,6 +10,8 @@ jobs:
        (github.event.pull_request.user.login == 'aws-cdk-automation' 
         || github.event.pull_request.user.login == 'dependabot[bot]' 
         || github.event.pull_request.user.login == 'dependabot-preview[bot]')
+    permissions:
+      pull-requests: write
     runs-on: ubuntu-latest
     steps:
     - uses: hmarr/auto-approve-action@v2.1.0

.github/workflows/close-stale-issues.yml

@@ -7,6 +7,8 @@ on:
 
 jobs:
   cleanup:
+    permissions:
+      issues: write
     runs-on: ubuntu-latest
     name: Stale issue job
     steps:

.github/workflows/closed-issue-message.yml

@@ -1,17 +1,19 @@
 name: Closed Issue Message
 on:
-    issues:
-       types: [closed]
+  issues:
+    types: [closed]
 jobs:
-    auto_comment:
-        runs-on: ubuntu-latest
-        steps:
-        - uses: aws-actions/closed-issue-message@v1
-          with:
-            # These inputs are both required
-            repo-token: "${{ secrets.GITHUB_TOKEN }}"
-            message: |
-                     ### ⚠️COMMENT VISIBILITY WARNING⚠️ 
-                     Comments on closed issues are hard for our team to see. 
-                     If you need more assistance, please either tag a team member or open a new issue that references this one. 
-                     If you wish to keep having a conversation with other community members under this issue feel free to do so.
+  auto_comment:
+    permissions:
+      issues: write
+    runs-on: ubuntu-latest
+    steps:
+    - uses: aws-actions/closed-issue-message@v1
+      with:
+        # These inputs are both required
+        repo-token: "${{ secrets.GITHUB_TOKEN }}"
+        message: |
+           ### ⚠️COMMENT VISIBILITY WARNING⚠️
+           Comments on closed issues are hard for our team to see. 
+           If you need more assistance, please either tag a team member or open a new issue that references this one.
+           If you wish to keep having a conversation with other community members under this issue feel free to do so.

.github/workflows/docker-images.yml

@@ -10,6 +10,8 @@ on:
 jobs:
   superchain:
     name: jsii/superchain
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -19,7 +21,7 @@ jobs:
       DEFAULT_NODE_MAJOR_VERSION: 10
     steps:
       - name: Check out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       # Determine if we should run the validation or not
       - name: Should this run?

.github/workflows/gh-pages.yml

@@ -12,14 +12,16 @@ on:
 jobs:
   build:
     name: build
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       - name: Set up Python
         uses: actions/setup-python@v2
         with:
           python-version: '3.8'
       - name: Check out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
       - name: Locate Caches
         id: cache-locations
         run: |-
@@ -51,10 +53,12 @@ jobs:
     name: Publish
     needs: build
     if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
+    permissions:
+      contents: write
     runs-on: ubuntu-latest
     steps:
       - name: Check out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
         with:
           ref: gh-pages
           token: ${{ secrets.AUTO_APPROVE_GITHUB_TOKEN }}

.github/workflows/main.yml

@@ -19,6 +19,8 @@ env:
 jobs:
   build:
     name: Build
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       # Set up all of our standard runtimes
@@ -46,7 +48,7 @@ jobs:
       - name: Install python3-venv
         run: sudo apt install -y python3-venv
       - name: Check out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
       - name: Locate Caches
         id: cache-locations
         run: |-
@@ -111,6 +113,8 @@ jobs:
 
   create-release-package:
     name: Create Release Package
+    permissions:
+      contents: read
     runs-on: ubuntu-latest
     steps:
       # Set up all of our standard runtimes
@@ -138,7 +142,7 @@ jobs:
       - name: Install python3-venv
         run: sudo apt install -y python3-venv
       - name: Check out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
       - name: Locate Caches
         id: cache-locations
         run: |-

.github/workflows/yarn-upgrade.yml

@@ -9,11 +9,13 @@ on:
 jobs:
   upgrade:
     name: Yarn Upgrade
+    permissions:
+      content: read
     runs-on: ubuntu-latest
     steps:
 
       - name: Check Out
-        uses: actions/checkout@v2
+        uses: actions/checkout@v2.3.4
 
       - name: Set up Node
         uses: actions/setup-node@v2.1.5
@@ -104,6 +106,38 @@ jobs:
       - name: Run "yarn upgrade"
         run: yarn upgrade
 
+      # Next, create and upload the changes as a patch file. This will later be downloaded to create a pull request
+      # Creating a pull request requires write permissions and it's best to keep write privileges isolated.
+      - name: Create Patch
+        run: |-
+          git add .
+          git diff --patch --staged > ${{ runner.temp }}/upgrade.patch
+      - name: Upload Patch
+        uses: actions/upload-artifact@v2
+        with:
+          name: upgrade.patch
+          path: ${{ runner.temp }}/upgrade.patch
+
+  pr:
+    name: Create Pull Request
+    needs: upgrade
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check Out
+        uses: actions/checkout@v2
+
+      - name: Download patch
+        uses: actions/download-artifact@v2
+        with:
+          name: upgrade.patch
+          path: ${{ runner.temp }}
+
+      - name: Apply patch
+        run: '[ -s ${{ runner.temp }}/upgrade.patch ] && git apply ${{ runner.temp }}/upgrade.patch || echo "Empty patch. Skipping."'
+
       - name: Make Pull Request
         uses: peter-evans/create-pull-request@v3
         with:

.mergify/config.yml

@@ -6,7 +6,7 @@ pull_request_rules:
       label:
         add: [contribution/core]
     conditions:
-      - author~=^(eladb|RomainMuller|garnaat|nija-at|shivlaks|skinny85|rix0rrr|NGL321|Jerry-AWS|SomayaB|MrArnoldPalmer|NetaNir|iliapolo|njlynch)$
+      - author~=^(eladb|RomainMuller|garnaat|nija-at|skinny85|rix0rrr|NGL321|Jerry-AWS|SomayaB|MrArnoldPalmer|NetaNir|iliapolo|njlynch|madeline-k|BenChaimberg)$
       - -label~="contribution/core"
   - name: Tell them we're good now
     actions:

CHANGELOG.md

@@ -2,6 +2,22 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [1.30.0](https://github.com/aws/jsii/compare/v1.29.0...v1.30.0) (2021-05-27)
+
+
+### Features
+
+* **rosetta:** JSII_ROSETTA_MAX_WORKER_COUNT limits max workers ([#2816](https://github.com/aws/jsii/issues/2816)) ([c478da4](https://github.com/aws/jsii/commit/c478da482e688f763ecccf6bff52cded3758ad53))
+
+
+### Bug Fixes
+
+* **docs:** correct the "source version" in Python version mapping ([47a40f1](https://github.com/aws/jsii/commit/47a40f15195c00368c55bb9d08eded063d970dec))
+* update lineMap after altering source.text ([#2837](https://github.com/aws/jsii/issues/2837)) ([82f5d5f](https://github.com/aws/jsii/commit/82f5d5f34dee083e617f7194f7c326ff82f2cd90)), closes [#2680](https://github.com/aws/jsii/issues/2680)
+* **pacmak:** fails when package path contains space ([#2758](https://github.com/aws/jsii/issues/2758)) ([0fbba6b](https://github.com/aws/jsii/commit/0fbba6bc1af09cbab19acdabaea14e5eb1681ae3)), closes [#2748](https://github.com/aws/jsii/issues/2748)
+* **python:** classes do not correctly implement interfaces ([#2809](https://github.com/aws/jsii/issues/2809)) ([0769347](https://github.com/aws/jsii/commit/07693478ff85142cc79691539d72ce5a4169eb9d)), closes [aws/aws-cdk#13474](https://github.com/aws/aws-cdk/issues/13474)
+* **python:** module import fails: NameError: name 'List' is not defined ([#2851](https://github.com/aws/jsii/issues/2851)) ([b7b9e5f](https://github.com/aws/jsii/commit/b7b9e5f75d09543e0e48f31bcde0ee770599fe04))
+
 ## [1.29.0](https://github.com/aws/jsii/compare/v1.28.0...v1.29.0) (2021-04-21)