From 84fa901e1308fc4473e9cf59eb6717bf596deb79 Mon Sep 17 00:00:00 2001
From: Astraea Quinn S <quinsclr@amazon.com>
Date: Tue, 18 Nov 2025 13:31:14 +0000
Subject: [PATCH 1/2] Use release-plz for automated releases

---
 .github/workflows/release-plz.yml | 52 +++++++++++++++++++++++++++++++
 release-plz.toml                  | 10 ++++++
 2 files changed, 62 insertions(+)
 create mode 100644 .github/workflows/release-plz.yml
 create mode 100644 release-plz.toml

diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
new file mode 100644
index 00000000..21cbe8b0
--- /dev/null
+++ b/.github/workflows/release-plz.yml
@@ -0,0 +1,52 @@
+name: Release-plz
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release-plz-release:
+    name: Release-plz release
+    runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'aws' }}
+    permissions:
+      contents: write
+      id-token: write
+    steps:
+      - &checkout
+        name: Checkout repository
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+          persist-credentials: true
+          token: ${{ secrets.RELEASE_PLZ_TOKEN }}
+      - &install-rust
+        name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@stable
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
+
+  release-plz-pr:
+    name: Release-plz PR
+    runs-on: ubuntu-latest
+    if: ${{ github.repository_owner == 'aws' }}
+    permissions:
+      pull-requests: write
+      contents: write
+    concurrency:
+      group: release-plz-${{ github.ref }}
+      cancel-in-progress: false
+    steps:
+      - *checkout
+      - *install-rust
+      - name: Run release-plz
+        uses: release-plz/action@v0.5
+        with:
+          command: release-pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
diff --git a/release-plz.toml b/release-plz.toml
new file mode 100644
index 00000000..cd851cc2
--- /dev/null
+++ b/release-plz.toml
@@ -0,0 +1,10 @@
+[workspace]
+semver_check = true
+git_release_enable = false
+
+[[package]]
+name = "lambda-integration-tests"
+publish = false
+
+[changelog]
+protect_breaking_commits = true

From 665edc410e018d5e6e9e259f3b4bcd60602fb4a3 Mon Sep 17 00:00:00 2001
From: Astraea Quinn S <quinsclr@amazon.com>
Date: Tue, 18 Nov 2025 20:00:12 +0000
Subject: [PATCH 2/2] Add auth with crates.io step

---
 .github/workflows/release-plz.yml | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 21cbe8b0..c6f7972c 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -1,4 +1,4 @@
-name: Release-plz
+name: Publish release
 
 on:
   push:
@@ -19,17 +19,19 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
-          persist-credentials: true
-          token: ${{ secrets.RELEASE_PLZ_TOKEN }}
       - &install-rust
         name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@stable
+      - name: Authenticate to crates.io
+        uses: rust-lang/crates-io-auth-action@v1
+        id: auth
       - name: Run release-plz
         uses: release-plz/action@v0.5
         with:
           command: release
         env:
           GITHUB_TOKEN: ${{ secrets.RELEASE_PLZ_TOKEN }}
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
 
   release-plz-pr:
     name: Release-plz PR