Update sst version

.github/workflows/deploy-preview.yml

@@ -5,9 +5,7 @@ on:
     types:
       - opened
       - synchronize
-permissions:
-  id-token: write
-  contents: read
+permissions: write-all
 jobs:
   test:
     uses: ./.github/workflows/test.yml
@@ -68,7 +66,6 @@ jobs:
         run: |
           aws s3 sync --follow-symlinks --delete dist s3://${{ secrets.AWS_S3_BUCKET }}/${{ env.DEST_DIR_EMBED }}
   full-stack:
-    needs: [embed]
     if: always()
     defaults:
       run:
@@ -94,16 +91,15 @@ jobs:
         run: npm run build
       - name: configure sst secrets
         run: |
-          npm run sst secret set PartnerId ${{ secrets.PREVIEW_PARTNER_ID }} --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
-          npm run sst secret set CallbackUrl ${{ secrets.PREVIEW_CALLBACK_URL }} --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
-          npm run sst secret set SmileIdApiKey ${{ secrets.PREVIEW_SMILEID_API_KEY }} --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
-          npm run sst secret set SmileIdEnvironment ${{ secrets.PREVIEW_SMILEID_ENVIRONMENT }} --stage ${{ steps.get_branch_name.outputs.SST_STAGE }}
+          npm run sst secret set PartnerId ${{ secrets.PREVIEW_PARTNER_ID }} -- --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
+          npm run sst secret set CallbackUrl ${{ secrets.PREVIEW_CALLBACK_URL }} -- --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
+          npm run sst secret set SmileIdApiKey ${{ secrets.PREVIEW_SMILEID_API_KEY }} -- --stage ${{ steps.get_branch_name.outputs.SST_STAGE }} &&
+          npm run sst secret set SmileIdEnvironment ${{ secrets.PREVIEW_SMILEID_ENVIRONMENT }} -- --stage ${{ steps.get_branch_name.outputs.SST_STAGE }}
       - name: deploy sst app
         if: github.event.pull_request.merged != true
         id: deploy_sst_app
         run: |
-          npm run sst deploy --stage=${{ steps.get_branch_name.outputs.SST_STAGE }}
-      - name: remove sst app
-        if: github.event.pull_request.merged == true
-        run: |
-          npm run sst remove --stage=${{ steps.get_branch_name.outputs.SST_STAGE }}
+          npm run sst deploy -- --stage ${{ steps.get_branch_name.outputs.SST_STAGE }}
+  share-preview-url:
+    needs: [full-stack]
+    uses: ./.github/workflows/share-preview-url.yml

.github/workflows/destroy-preview.yml

@@ -23,7 +23,7 @@ jobs:
           aws-region: ${{ secrets.AWS_REGION }}
       - name: install sst
         run: |
-          curl -fsSL https://ion.sst.dev/install | VERSION=0.1.51 bash
+          curl -fsSL https://ion.sst.dev/install | VERSION=3.4.5 bash
       - name: set sst stage
         id: get_branch_name
         run: |
@@ -32,12 +32,6 @@ jobs:
           echo "SS_STAGE=$SANITIZED_BRANCH_NAME" >> $GITHUB_OUTPUT
       - name: install dependencies
         run: npm install
-      - name: configure sst secrets
-        run: |
-          sst secret set PartnerId ${{ secrets.PREVIEW_PARTNER_ID }} --stage=${{ steps.get_branch_name.outputs.SS_STAGE }} &&
-          sst secret set CallbackUrl ${{ secrets.PREVIEW_CALLBACK_URL }} --stage=${{ steps.get_branch_name.outputs.SS_STAGE }} &&
-          sst secret set SmileIdApiKey ${{ secrets.PREVIEW_SMILEID_API_KEY }} --stage=${{ steps.get_branch_name.outputs.SS_STAGE }} &&
-          sst secret set SmileIdEnvironment ${{ secrets.PREVIEW_SMILEID_ENVIRONMENT }} --stage=${{ steps.get_branch_name.outputs.SS_STAGE }}
       - name: remove sst app
         run: |
-          sst remove --stage=${{ steps.get_branch_name.outputs.SS_STAGE }}
+          npm run sst remove -- --stage ${{ steps.get_branch_name.outputs.SS_STAGE }}

.github/workflows/share-preview-url.yml

@@ -1,31 +1,51 @@
 name: share-preview-url
 on:
-  pull_request:
-    types:
-      - opened
-      - ready_for_review
+  workflow_dispatch:
+    inputs:
+      ref_name:
+        description: 'Branch name'
+        required: true
+        default: 'main'
+  workflow_call:
 jobs:
   comment-on-pr:
     runs-on: ubuntu-latest
     permissions: write-all
     steps:
       - name: checkout code
         uses: actions/checkout@v4
+      - name: set node version
+        uses: actions/setup-node@v4
+      - name: install dependencies
+        run: npm ci
       - name: configure aws credentials
         uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_GITHUB_ACTIONS_ROLE }}
           aws-region: ${{ secrets.AWS_REGION }}
       - name: install sst
+        continue-on-error: true
         run: |
-          curl -fsSL https://ion.sst.dev/install | VERSION=0.1.51 bash
+          curl -fsSL https://ion.sst.dev/install | VERSION=3.4.5 bash
+      - name: set branch name
+        run: |
+          if [ -n "${{ github.event.inputs.ref_name }}" ]; then
+            BRANCH_NAME="${{ github.event.inputs.ref_name }}"
+          elif [ -n "${{ github.event.workflow_run.head_branch }}" ]; then
+            BRANCH_NAME="${{ github.event.workflow_run.head_branch }}"
+          elif [ -n "${GITHUB_HEAD_REF}" ]; then
+            BRANCH_NAME="${GITHUB_HEAD_REF}"
+          else
+            BRANCH_NAME="${{ github.ref_name }}"
+          fi
+          echo "BRANCH_NAME=$BRANCH_NAME" >> $GITHUB_ENV
       - name: retrieve sst app url
+        continue-on-error: true
         id: get_app_url
         working-directory: ./previews
         run: |
-          BRANCH_NAME=${{ github.event.pull_request.head.ref }}
-          SANITIZED_BRANCH_NAME=$(echo "$BRANCH_NAME" | sed 's/[^a-zA-Z0-9]/-/g')
-          echo "SS_STAGE=$SANITIZED_BRANCH_NAME" >> $GITHUB_OUTPUT
+          APP_URL=$(npm run sst -- shell node get_app_url.js -- --stage $BRANCH_NAME --print-logs)
+          echo "PREVIEW_APP_URL=$APP_URL" >> $GITHUB_OUTPUT
       - name: get dest dir for web smart-camera-web
         id: get_dest_dir_smart_camera_web
         working-directory: ./packages/smart-camera-web