Merge branch 'main' into dependabot/github_actions/aws-actions/stale-issue-cleanup-6

Author: jmklix

.github/actions/check-submodules/dist/index.js

@@ -143,8 +143,17 @@ const checkSubmodules = async function () {
             if (nonCrtRepo.test(submodule.name)) {
                 const isOnMain = await isAncestor(diff.thisCommit, 'origin/main', submodule.path);
                 if (!isOnMain) {
-                    core.setFailed(`Submodule ${submodule.name} is using a branch`);
-                    return;
+                    if (/^(aws-lc)$/.test(submodule.name)) {
+                        // for aws-lc we also use fips-2022-11-02 branch for FIPS support.
+                        const isOnFIPS = await isAncestor(diff.thisCommit, 'origin/fips-2022-11-02', submodule.path);
+                        if (!isOnFIPS) {
+                            core.setFailed(`Submodule ${submodule.name} is using a branch`);
+                            return;
+                        }
+                    } else {
+                        core.setFailed(`Submodule ${submodule.name} is using a branch`);
+                        return;
+                    }
                 }
             } else {
                 core.setFailed(`Submodule ${submodule.name} is not using a tagged release`);

.github/actions/check-submodules/index.js

@@ -10,10 +10,10 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@actions/core": "^1.10.0",
+    "@actions/core": "^1.10.1",
     "@actions/exec": "^1.1.1"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.36.1"
+    "@vercel/ncc": "^0.38.1"
   }
 }

.github/actions/check-submodules/package-lock.json

@@ -10,9 +10,9 @@
     "prepare": "ncc build index.js --out packed"
   },
   "dependencies": {
-    "@actions/core": "^1.10.0"
+    "@actions/core": "^1.10.1"
   },
   "devDependencies": {
-    "@vercel/ncc": "^0.36.1"
+    "@vercel/ncc": "^0.38.1"
   }
 }