No commit message

.github/workflows/build.yml

@@ -1,14 +1,31 @@
 name: Build
 
 on:
-  pull_request:
+  pull_request_target:
     branches: [main]
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
 jobs:
+  verify-user-permissions:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Get User Permission
+        id: checkAccess
+        uses: actions-cool/check-user-permission@v2
+        with:
+          require: write
+          username: ${{ github.triggering_actor }}
+      - name: Check User Permission
+        if: steps.checkAccess.outputs.require-result == 'false'
+        run: |
+          echo "${{ github.triggering_actor }} does not have permissions on this repo."
+          echo "Current permission level is ${{ steps.checkAccess.outputs.user-permission }}"
+          echo "Job originally triggered by ${{ github.actor }}"
+          exit 1
+
   verify:
     runs-on: ubuntu-24.04
     steps:
@@ -359,6 +376,7 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
   cache-tests:
+    needs: verify-user-permissions
     strategy:
       matrix:
         node: [18]
@@ -384,6 +402,7 @@ jobs:
           ./scripts/build-and-test-all-packages-consistent-reads.sh
 
   test-examples:
+    needs: verify-user-permissions
     strategy:
       matrix:
         node: [16, 18, 20]
@@ -500,6 +519,7 @@ jobs:
         run: exit 1
 
   test-web-examples:
+    needs: verify-user-permissions
     strategy:
       matrix:
         node: [ 16, 18 ]
@@ -550,16 +570,13 @@ jobs:
         run: exit 1
 
   test-deno-examples:
+    needs: verify-user-permissions
     strategy:
       matrix:
         node: [ 16, 18 ]
       fail-fast: true
     name: Test Deno examples on node ${{ matrix.node }}
     runs-on: ubuntu-24.04
-    env:
-      # TODO: remove token stored as secret in favor of using a
-      # momento-local instance that can be spun up for testing
-      MOMENTO_API_KEY: ${{ secrets.ALPHA_TEST_AUTH_TOKEN }}
 
     steps:
       - name: Setup repo
@@ -657,33 +674,3 @@ jobs:
             npm i
             npm run build
           popd
-  # https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions#enable-auto-merge-on-a-pull-request
-  # dependabot-auto-merge:
-  #   name: Dependabot Auto Merge
-  #   permissions:
-  #     contents: write
-  #     pull-requests: write
-  #   runs-on: ubuntu-latest
-  #   # make sure we run all tests/examples and they pass before we try and auto approve/merge the dependabot prs
-  #   needs: [test-deno-examples, test-web-examples, test-examples, test, verify]
-  #   if: ${{ github.actor == 'dependabot[bot]' }}
-  #   steps:
-  #     - name: Dependabot metadata
-  #       id: metadata
-  #       uses: dependabot/fetch-metadata@v1
-  #       with:
-  #         github-token: "${{ secrets.GITHUB_TOKEN }}"
-  #     - name: Approve a PR
-  #       run: gh pr review --approve "$PR_URL"
-  #       env:
-  #         PR_URL: ${{github.event.pull_request.html_url}}
-  #         # need to have an approver first before dependabot can merge the pr, here we are using the shared
-  #         # momento github actions bot user
-  #         GH_TOKEN: ${{secrets.MOMENTO_MACHINE_USER_GITHUB_TOKEN}}
-  #     - name: Enable auto-merge for Dependabot PRs
-  #       if: ${{steps.metadata.outputs.update-type != 'version-update:semver-major'}}
-  #       run: gh pr merge --squash "$PR_URL"
-  #       env:
-  #         PR_URL: ${{github.event.pull_request.html_url}}
-  #         GH_TOKEN: ${{secrets.GITHUB_TOKEN}}
-

.github/workflows/update-example-deps.yml

@@ -31,7 +31,7 @@
             git status
 
         - name: Open PR
-          uses: peter-evans/create-pull-request@v5
+          uses: peter-evans/create-pull-request@v7
           with:
             token: ${{ secrets.MOMENTO_MACHINE_USER_GITHUB_TOKEN }}
             commit-message: "chore: update momento dependency in examples\n\nAutomated commit created by update-example-deps workflow"

examples/cloudflare-workers/web-sdk/package.json

@@ -14,7 +14,7 @@
   },
   "dependencies": {
     "@gomomento/sdk-core": "^1.40.0",
-    "@gomomento/sdk-web": "^1.102.3",
+    "@gomomento/sdk-web": "^1.103.0",
     "xhr4sw": "^0.0.5"
   }
 }

examples/nodejs/access-control/package.json

@@ -26,7 +26,7 @@
     "typescript": "4.9.5"
   },
   "dependencies": {
-    "@gomomento/sdk": "^1.102.3",
+    "@gomomento/sdk": "^1.103.0",
     "uuidv4": "6.2.13"
   }
 }

examples/nodejs/aws/eventbridge/cliApp/package.json

@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@aws-sdk/client-dynamodb": "^3.596.0",
-    "@gomomento/sdk": "^1.102.3",
+    "@gomomento/sdk": "^1.103.0",
     "dotenv": "^16.4.5"
   },
   "engines": {

examples/nodejs/aws/eventbridge/webapp/package.json

@@ -10,7 +10,7 @@
     "deploy": "npm install && cd - && cdk deploy"
   },
   "dependencies": {
-    "@gomomento/sdk-web": "^1.102.3",
+    "@gomomento/sdk-web": "^1.103.0",
     "aws-sdk": "^2.1628.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",

examples/nodejs/aws/lambda-examples/advanced-compression/package.json

@@ -10,7 +10,7 @@
     "typescript": "^4.9.5"
   },
   "dependencies": {
-    "@gomomento/sdk": "^1.102.3",
+    "@gomomento/sdk": "^1.103.0",
     "@gomomento/sdk-nodejs-compression-zstd": "^0.92.2",
     "@mongodb-js/zstd-linux-x64-gnu": "^1.2.0",
     "aws-lambda": "^1.0.7",