chore(GHA): Run Java CI testing for MPL Latest Release

.github/workflows/ci_test_latest_released_mpl_java.yml

@@ -0,0 +1,32 @@
+# This workflow is for testing that the latest released version
+# of the MPL is compatible with the current DB-ESDK Head
+name: Test Latest Released MPL Java with DB-ESDK HEAD
+
+on:
+  schedule:
+    - cron: "00 16 * * 1-5"
+
+jobs:
+  getDBESDKDafnyVersion:
+    # Don't run the cron builds on forks
+    if: github.event_name != 'schedule' || github.repository_owner == 'aws'
+    uses: ./.github/workflows/dafny_version.yml
+  getVerifyDBESDKDafnyVersion:
+    if: github.event_name != 'schedule' || github.repository_owner == 'aws'
+    uses: ./.github/workflows/dafny_verify_version.yml
+  getLatestReleaseMplVersion:
+    if: github.event_name != 'schedule' || github.repository_owner == 'aws'
+    uses: ./.github/workflows/mpl_latest_release_version.yml
+  getMplDafnyVersion:
+    needs: getLatestReleaseMplVersion
+    if: github.event_name != 'schedule' || github.repository_owner == 'aws'
+    uses: ./.github/workflows/mpl_head_version.yml
+    with:
+      mpl-head: ${{needs.getLatestReleaseMplVersion.outputs.version}}
+  test-latest-released-mpl-java:
+    needs: [getDafnyVersion, getLatestReleaseMplVersion, getMplDafnyVersion]
+    uses: ./.github/workflows/dafny-interop.yml
+    with:
+      mpl-dafny: ${{needs.getLatestReleaseMplVersion.outputs.version}}
+      mpl-commit: ${{needs.getMplDafnyVersion.outputs.dafnyVersion}}
+      dbesdk-dafny: ${{needs.getDBESDKDafnyVersion.outputs.version}}

.github/workflows/dafny-interop.yml

@@ -31,23 +31,23 @@ jobs:
     with:
       mpl-dafny: ${{inputs.mpl-dafny}}
       mpl-commit: ${{inputs.mpl-commit}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       dbesdk-dafny: ${{inputs.dbesdk-dafny}}
   dafny-interop-java-test-vectors:
     needs: getMplHeadVersion
     uses: ./.github/workflows/dafny_interop_test_vector_java.yml
     with:
       mpl-dafny: ${{inputs.mpl-dafny}}
       mpl-commit: ${{inputs.mpl-commit}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       dbesdk-dafny: ${{inputs.dbesdk-dafny}}
   dafny-interop-java-examples:
     needs: getMplHeadVersion
     uses: ./.github/workflows/dafny_interop_examples_java.yml
     with:
       mpl-dafny: ${{inputs.mpl-dafny}}
       mpl-commit: ${{inputs.mpl-commit}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       dbesdk-dafny: ${{inputs.dbesdk-dafny}}
   dafny-interop-net:
     uses: ./.github/workflows/dafny_interop_test_net.yml

.github/workflows/mpl-head.yml

@@ -31,35 +31,35 @@ jobs:
     uses: ./.github/workflows/library_dafny_verification.yml
     with:
       dafny: ${{needs.getVerifyVersion.outputs.version}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       mpl-head: true
   mpl-head-ci-test-vector-verification:
     needs: [getVerifyVersion, getMplHeadVersion]
     uses: ./.github/workflows/test_vector_verification.yml
     with:
       dafny: ${{needs.getVerifyVersion.outputs.version}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       mpl-head: true
   mpl-head-ci-java:
     needs: [getVersion, getMplHeadVersion]
     uses: ./.github/workflows/ci_test_java.yml
     with:
       dafny: ${{needs.getVersion.outputs.version}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       mpl-head: true
   mpl-head-ci-java-test-vectors:
     needs: [getVersion, getMplHeadVersion]
     uses: ./.github/workflows/ci_test_vector_java.yml
     with:
       dafny: ${{needs.getVersion.outputs.version}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       mpl-head: true
   mpl-head-ci-java-examples:
     needs: [getVersion, getMplHeadVersion]
     uses: ./.github/workflows/ci_examples_java.yml
     with:
       dafny: ${{needs.getVersion.outputs.version}}
-      mpl-version: ${{needs.getMplHeadVersion.outputs.version}}
+      mpl-version: ${{needs.getMplHeadVersion.outputs.mplVersion}}
       mpl-head: true
   mpl-head-ci-net:
     needs: getVersion

.github/workflows/mpl_head_version.yml

@@ -12,9 +12,12 @@ on:
         default: main
         type: string
     outputs:
-      version:
-        description: "The dafny version for verify"
+      mplVersion:
+        description: "The MPL version"
         value: ${{ jobs.getMplHeadVersion.outputs.version }}
+      dafnyVersion:
+        description: "The dafny version for the MPL"
+        value: ${{ jobs.getMplHeadDafnyVersion.outputs.version }}
 
 jobs:
   getMplHeadVersion:
@@ -40,3 +43,27 @@ jobs:
         with:
           path: "submodules/MaterialProviders/project.properties"
           properties: "mplVersion"
+
+  getMplHeadDafnyVersion:
+    runs-on: ubuntu-22.04
+    outputs:
+      version: ${{ steps.read_property.outputs.dafnyVersion }}
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+      - name: Update MPL submodule locally if requested
+        working-directory: submodules/MaterialProviders
+        shell: bash
+        run: |
+          git checkout ${{inputs.mpl-head}}
+          git submodule update --init --recursive
+          git rev-parse HEAD
+
+      - name: Get the MPL version from the MPL submodule
+        id: read_property
+        uses: christian-draeger/[email protected]
+        with:
+          path: "submodules/MaterialProviders/project.properties"
+          properties: "dafnyVersion"

.github/workflows/mpl_latest_release_version.yml

@@ -0,0 +1,25 @@
+# This workflow reads the project.properties
+# into the environment variables
+# and then creates an output variable for `mplDependencyJavaLatestReleaseVersionTag`
+name: Latest Released MPL Version
+
+on:
+  workflow_call:
+    outputs:
+      version:
+        description: "The latest released MPL version"
+        value: ${{ jobs.getMPLVersion.outputs.version }}
+
+jobs:
+  getMPLVersion:
+    runs-on: ubuntu-22.04
+    outputs:
+      version: ${{ steps.read_property.outputs.mplDependencyJavaLatestReleaseVersionTag }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Read version from Properties-file
+        id: read_property
+        uses: christian-draeger/[email protected]
+        with:
+          path: "./project.properties"
+          properties: "mplDependencyJavaLatestReleaseVersionTag"

codebuild/staging/release-staging.yml

@@ -47,8 +47,6 @@ phases:
       - aws sts get-caller-identity
   build:
     commands:
-      # Validate the MPL submodule points to the correct release
-      - scripts/validate-mpl-submodule.sh
       # Build and deploy to maven local
       - cd DynamoDbEncryption/
       - make transpile_implementation_java

project.properties

@@ -4,3 +4,8 @@ dafnyVersion=4.9.0
 dafnyVerifyVersion=4.9.0
 dafnyRuntimeJavaVersion=4.9.0
 smithyDafnyJavaConversionVersion=0.1.1
+# mplDependencyJavaLatestReleaseVersionTag is used in ci_test_latest_released_mpl_java.yml
+# to test whether the HEAD of DB_ESDK is compatible with the latest released version of
+# the MPL or not.
+# Add here the tag of the latest released MPL version, for instance, v1.8.0
+mplDependencyJavaLatestReleaseVersionTag="v1.8.0"