Merge branch 'main' into add-new-notification-topics

Author: aracho1

.github/workflows/cdk-test.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/fake-breaking-news.yml

@@ -25,7 +25,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/football.yml

@@ -27,7 +27,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/notification-worker-lambdas.yml

@@ -7,6 +7,7 @@ on:
       - common/**
       - commoneventconsumer/**
       - commonscheduleddynamodb/**
+      - cdk/**
       - project/**
       - build.sbt
       - .github/workflows/notification.yml
@@ -27,11 +28,27 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1
 
+      - run: corepack enable
+
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0
+        with:
+          cache: yarn
+          cache-dependency-path: cdk/yarn.lock
+          node-version-file: .nvmrc
+
+      - name: CDK synth
+        run: |
+          cd cdk
+          yarn install --immutable
+          yarn lint
+          yarn test
+          yarn synth
+
       - name: Compile, test and package
         run: sbt "project common" "compile" "test" "project commonscheduledynamodb" "compile" "test" "project notification" "compile" "test" "debian:packageBin"
 
@@ -57,4 +74,5 @@ jobs:
             notification:
               - notification/target/notification_1.0-latest_all.deb
             notification-cfn:
-              - notification/conf/notification.yaml
+              - cdk/cdk.out/Notification-CODE.template.json
+              - cdk/cdk.out/Notification-PROD.template.json

.github/workflows/notification.yml

@@ -28,7 +28,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/registration.yml

@@ -30,7 +30,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/report.yml

@@ -11,10 +11,10 @@ jobs:
     steps:
       - name: Checkout branch
         id: checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Install Java
         id: java
-        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: corretto
           java-version: 17

.github/workflows/sbt-dependency-graph.yaml

@@ -25,7 +25,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/schedule-lambda.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1