chore: Update JSII and TS

.github/workflows/build.yml

@@ -27,11 +27,13 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       # Setup caches for yarn, and go
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
           echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
@@ -52,8 +54,7 @@ jobs:
         run: yarn install
       - name: build and package
         run: |
-          yarn build
-          yarn package
+          yarn build-and-package
         env:
           SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
           GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}

.github/workflows/examples.yml

@@ -50,11 +50,13 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       # Setup caches for yarn, terraform, and go
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/terraform
           echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
@@ -81,20 +83,20 @@ jobs:
             go-${{ runner.os }}-
       - name: installing dependencies
         run: |
-          yarn install --frozen-lockfile --prefer-offline
+          yarn install --immutable
+        env:
+          YARN_ENABLE_HARDENED_MODE: 0
       - name: lint
         run: yarn lint:examples
       - name: align version (Python only)
         if: startsWith(matrix.target, '@examples/python') # lint:examples ensures this prefix
         run: tools/align-version.sh "-dev.$GITHUB_RUN_ID"
       - name: compile
-        run: yarn build
+        run: yarn build-and-package
         env:
           TERRAFORM_BINARY_NAME: "terraform${{ matrix.terraform }}"
           TF_PLUGIN_CACHE_DIR: ${{ steps.global-cache-dir-path.outputs.terraform }}
           GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}
-      - name: create bundle
-        run: yarn package
       - name: examples integration tests
         run: test/run-against-dist node tools/build-example.js ${TEST_TARGET}
         env:

.github/workflows/integration.yml

@@ -31,13 +31,15 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
       # Setup caches for yarn, and go
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
           echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
@@ -55,15 +57,14 @@ jobs:
             go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-
             go-${{ runner.os }}-
       - name: install dependencies
-        run: yarn install --frozen-lockfile --prefer-offline
+        run: yarn install --immutable
       - name: set version
         if: ${{ !inputs.skip_setup }}
         run: tools/align-version.sh "-dev.$GITHUB_RUN_ID"
       - name: build and package
         if: ${{ !inputs.skip_setup }}
         run: |
-          yarn build
-          yarn package
+          yarn build-and-package
         env:
           SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
           GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}
@@ -81,7 +82,7 @@ jobs:
           path: packages/@cdktf/provider-generator/edge-provider-bindings
       - name: installing test dependencies
         run: |
-          cd test && yarn install --frozen-lockfile --prefer-offline
+          cd test && yarn install --immutable
       - id: build-test-matrix
         run: |
           ./tools/build-test-matrix.sh
@@ -106,11 +107,13 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       # Setup caches for yarn, terraform, and go
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/terraform
           echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
@@ -182,7 +185,7 @@ jobs:
         id: global-cache-dir-path
         shell: bash
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/terraform
           echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go

.github/workflows/linting.yml

@@ -21,9 +21,11 @@ jobs:
       image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: installing dependencies
         run: |
-          yarn install --frozen-lockfile
+          yarn install --immutable
       - name: run prettier
         run: |
           yarn lint:prettier
@@ -34,9 +36,11 @@ jobs:
       image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: installing dependencies
         run: |
-          yarn install --frozen-lockfile
+          yarn install --immutable
       - name: run workspace linting
         run: |
           yarn lint:workspace

.github/workflows/provider-integration.yml

@@ -38,11 +38,13 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       # Setup caches for yarn, and go
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
           echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
@@ -62,10 +64,9 @@ jobs:
       - name: installing dependencies and build
         if: ${{ !inputs.skip_setup }}
         run: |
-          yarn install --frozen-lockfile --prefer-offline
+          yarn install --immutable
           tools/align-version.sh "-dev.$GITHUB_RUN_ID"
-          yarn build
-          yarn package
+          yarn build-and-package
         env:
           GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}
       - name: install test dependencies to warm up cache for matrix jobs to use
@@ -107,7 +108,7 @@ jobs:
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/terraform
           echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT
       # Only restoring yarn caches as the dependencies are not indiviual to each matrix job
@@ -168,7 +169,7 @@ jobs:
         id: global-cache-dir-path
         shell: bash
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/terraform
           echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT
       # Only restoring yarn caches to save available cache storage size

.github/workflows/release.yml

@@ -34,6 +34,8 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: version
         id: get_version
         run: |
@@ -54,10 +56,9 @@ jobs:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }}
       - name: create bundle
         run: |
-          yarn install --frozen-lockfile
+          yarn install --immutable
           tools/align-version.sh
-          yarn build
-          yarn package
+          yarn build-and-package
         env:
           SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
       - name: Add sourcemap and commit info to sentry
@@ -158,7 +159,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: installing dependencies
         run: |
-          yarn install --frozen-lockfile
+          yarn install --immutable
       - name: Download build artifacts
         uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
         with:

.github/workflows/release_next.yml

@@ -32,8 +32,10 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: installing dependencies
-        run: yarn install --frozen-lockfile
+        run: yarn install --immutable
       - name: Configure git user
         run: |
           git config user.name github-team-tf-cdk
@@ -61,9 +63,8 @@ jobs:
           SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }}
       - name: create bundle
         run: |
-          yarn install --frozen-lockfile
-          yarn build
-          yarn package
+          yarn install --immutable
+          yarn build-and-package
         env:
           SENTRY_DSN: ${{ secrets.SENTRY_DSN }}
       - name: Add sourcemap and commit info to sentry

.github/workflows/unit.yml

@@ -32,12 +32,14 @@ jobs:
         run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk
       - name: ensure correct user
         run: chown -R root /__w/terraform-cdk
+      - name: Enable Yarn 2
+        run: corepack enable
 
       # Setup caches for yarn, terraform, go, and provider schema
       - name: Get cache directory paths
         id: global-cache-dir-path
         run: |
-          echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT
+          echo "yarn=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/go
           echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT
           mkdir -p /usr/local/share/.cache/providerSchema
@@ -63,12 +65,11 @@ jobs:
 
       - name: installing dependencies
         run: |
-          yarn install --frozen-lockfile --prefer-offline
+          yarn install --immutable
       - name: compile
         run: |
           tools/align-version.sh
-          yarn build
-          yarn package
+          yarn build-and-package
         env:
           TERRAFORM_BINARY_NAME: "terraform${{ inputs.terraform_version }}"
           GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }}

.github/workflows/yarn-upgrade.yml

@@ -25,9 +25,11 @@ jobs:
     steps:
       - name: Check Out
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Enable Yarn 2
+        run: corepack enable
       - name: Get yarn cache directory path
         id: global-cache-dir-path
-        run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
+        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.global-cache-dir-path.outputs.dir }}
@@ -54,7 +56,7 @@ jobs:
 
       # This will ensure the current lockfile is up-to-date with the dependency specifications (necessary for "yarn upgrade" to run)
       - name: Run "yarn install"
-        run: yarn install --prefer-offline
+        run: yarn install
 
       # Next, create and upload the changes as a patch file. This will later be downloaded to create a pull request
       # Creating a pull request requires write permissions and it's best to keep write privileges isolated.
@@ -151,7 +153,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Get yarn cache directory path
         id: global-cache-dir-path
-        run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
+        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.global-cache-dir-path.outputs.dir }}
@@ -217,7 +219,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Get yarn cache directory path
         id: global-cache-dir-path
-        run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
+        run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT
       - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ${{ steps.global-cache-dir-path.outputs.dir }}

.gitignore

@@ -39,3 +39,4 @@ tsconfig.tsbuildinfo
 examples/java/gradle-shared-module/.gradle/
 
 .nx/
+.yarn

.husky/pre-commit

@@ -1,4 +1 @@
-#!/bin/sh
-. "$(dirname "$0")/_/husky.sh"
-
 npx lint-staged

.yarnrc.yml

@@ -0,0 +1,4 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
+nodeLinker: node-modules

CHANGELOG.md

@@ -1758,7 +1758,7 @@ const bucket = new s3.S3Bucket(this, "bucket");
 const firstRuleStage = Fn.lookup(
   bucket.lifecycleRule("0").tags,
   "stage",
-  "no-stage"
+  "no-stage",
 );
 const firstRuleTags = bucket.lifecycleRule("0").tags;