Merge branch 'develop' into chore/maintainers-update

* develop:
  fix(ci): escape outputs as certain PRs can break GH Actions expressions
  chore(deps): bump actions/setup-node from 2 to 3 (aws-powertools#1281)
  chore(ci): auto-merge cdk lib and lambda layer construct
  fix(ci): move conditionals from yaml to code; leftover
  chore(governance): remove any step relying on master branch
  chore(ci): move all scripts under .github/scripts
  chore(ci): move error prone env to code as constants
  fix(ci): move conditionals from yaml to code

Author: heitorlessa

.github/workflows/auto-merge.yml

@@ -18,7 +18,21 @@ jobs:
         with:
           github-token: "${{ secrets.GITHUB_TOKEN }}"
       - name: Enable auto-merge for mypy-boto3 stubs Dependabot PRs
-        if: ${{contains(steps.metadata.outputs.dependency-names, 'mypy-boto3')}} # && steps.metadata.outputs.update-type == 'version-update:semver-patch'
+        if: ${{ contains(steps.metadata.outputs.dependency-names, 'mypy-boto3') && steps.metadata.outputs.update-type != 'version-update:semver-major' }}
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      # Maintenance: Experiment with literal array (toJSON('["dep1", "dep2"]')) to ease extending it
+      - name: Enable auto-merge for CDK Construct Lambda Layer Dependabot PRs
+        if: ${{ contains(steps.metadata.outputs.dependency-names, 'cdk-lambda-powertools-python-layer') && steps.metadata.outputs.update-type != 'version-update:semver-major' }}
+        run: gh pr merge --auto --squash "$PR_URL"
+        env:
+          PR_URL: ${{github.event.pull_request.html_url}}
+          GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
+      # Maintenance: Revisit if CDK Constructs make breaking changes like CDK v1
+      - name: Enable auto-merge for CDK Lib Construct
+        if: ${{ contains(steps.metadata.outputs.dependency-names, 'aws-cdk-lib') && steps.metadata.outputs.update-type != 'version-update:semver-major' }}
         run: gh pr merge --auto --squash "$PR_URL"
         env:
           PR_URL: ${{github.event.pull_request.html_url}}

.github/workflows/on_merged_pr.yml

@@ -16,14 +16,10 @@ jobs:
       token: ${{ secrets.GITHUB_TOKEN }}
   release_label_on_merge:
     needs: get_pr_details
-    # Maintenance: Conditional isn't working as expected
-    if: |
-      needs.get_pr_details.outputs.prAuthor != 'dependabot[bot]'
-      && needs.get_pr_details.outputs.prIsMerged == true
     runs-on: ubuntu-latest
     steps:
       - name: Debug outputs
-        run: echo "Outputs ${{ toJSON(needs.get_pr_details.outputs) }}"
+        run: echo 'Outputs ${{ toJSON(needs.get_pr_details.outputs) }}'
       - uses: actions/checkout@v3
       - name: "Label PR related issue for release"
         uses: actions/github-script@v6

.github/workflows/on_opened_pr.yml

@@ -6,7 +6,6 @@ on:
     types:
       - completed
 
-
 jobs:
   get_pr_details:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
@@ -20,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Debug outputs
-        run: echo "Outputs ${{ toJSON(needs.get_pr_details.outputs) }}"
+        run: echo 'Outputs ${{ toJSON(needs.get_pr_details.outputs) }}'
       - uses: actions/checkout@v3
       - name: "Ensure related issue is present"
         if: contains('["opened", "edited"]', needs.get_pr_details.outputs.prAction)

.github/workflows/publish_layer.yml

@@ -27,7 +27,7 @@ jobs:
       - name: checkout
         uses: actions/checkout@v2
       - name: Setup Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
           node-version: '16.12'
       - name: Setup python

.github/workflows/reusable_deploy_layer_stack.yml

@@ -59,7 +59,7 @@ jobs:
           aws-region: ${{ matrix.region }}
           role-to-assume: ${{ secrets.target-account-role }}
       - name: Setup Node.js
-        uses: actions/setup-node@v2
+        uses: actions/setup-node@v3
         with:
           node-version: '16.12'
       - name: Setup python