feat(aws): all-inclusive fork on upstream v1.52.0 with IAM AssumeRole support

.github/workflows/ci.yml

@@ -1,29 +1,62 @@
 name: CI
 on:
   push:
-    branches-ignore:
-      - 'generated'
-      - 'codegen/**'
-      - 'integrated/**'
-      - 'stl-preview-head/**'
-      - 'stl-preview-base/**'
+    branches:
+      - '**'
+      - '!integrated/**'
+      - '!stl-preview-head/**'
+      - '!stl-preview-base/**'
+      - '!generated'
+      - '!codegen/**'
+      - 'codegen/stl/**'
   pull_request:
     branches-ignore:
       - 'stl-preview-head/**'
       - 'stl-preview-base/**'
 
 jobs:
+  build:
+    timeout-minutes: 10
+    name: build
+    permissions:
+      contents: read
+      id-token: write
+    runs-on: 'ubuntu-latest'
+    if: |-
+      github.repository == 'anthropics/anthropic-sdk-go-private' &&
+      (github.event_name == 'push' || github.event.pull_request.head.repo.fork)
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Get GitHub OIDC Token
+        if: |-
+          github.repository == 'anthropics/anthropic-sdk-go-private' &&
+          !startsWith(github.ref, 'refs/heads/stl/')
+        id: github-oidc
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        with:
+          script: core.setOutput('github_token', await core.getIDToken());
+
+      - name: Upload tarball
+        if: |-
+          github.repository == 'anthropics/anthropic-sdk-go-private' &&
+          !startsWith(github.ref, 'refs/heads/stl/')
+        env:
+          URL: https://pkg.stainless.com/s
+          AUTH: ${{ steps.github-oidc.outputs.github_token }}
+          SHA: ${{ github.sha }}
+        run: ./scripts/utils/upload-artifact.sh
   lint:
     timeout-minutes: 10
     name: lint
-    runs-on: ${{ github.repository == 'stainless-sdks/anthropic-go' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
+    runs-on: 'ubuntu-latest'
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
         with:
           go-version-file: ./go.mod
 
@@ -32,13 +65,13 @@ jobs:
   test:
     timeout-minutes: 10
     name: test
-    runs-on: ${{ github.repository == 'stainless-sdks/anthropic-go' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
+    runs-on: 'ubuntu-latest'
     if: github.event_name == 'push' || github.event.pull_request.head.repo.fork
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
         with:
           go-version-file: ./go.mod
 
@@ -47,3 +80,47 @@ jobs:
 
       - name: Run tests
         run: ./scripts/test
+
+  detect_breaking_changes_vs_main:
+    timeout-minutes: 10
+    name: detect-breaking-changes-vs-main
+    runs-on: ${{ github.repository == 'stainless-sdks/anthropic-go' && 'depot-ubuntu-24.04' || 'ubuntu-latest' }}
+    # Skip on the Coder fork: this branch re-baselines onto upstream v1.52.0,
+    # so origin/main (v1.26.0) is 26 versions behind and the overlaid old
+    # tests reference symbols upstream has since renamed or removed. The
+    # comparison reports upstream's intentional API evolution, not a
+    # regression in this fork. Mirrors the repository guard the Coder fork
+    # already applies to breaking-change detection on main.
+    if: |-
+      github.repository == 'anthropics/anthropic-sdk-go' &&
+      (((github.event_name == 'push' &&
+         !startsWith(github.ref, 'refs/heads/release-please--')) ||
+        github.event.pull_request.head.repo.fork))
+    steps:
+      # fetch-depth: 0 fetches full commit history (all branches, so
+      # origin/main is available) so `git merge-base HEAD origin/main`
+      # below can resolve the fork point. filter: blob:none keeps the
+      # fetch cheap: commit metadata is downloaded eagerly, file blobs
+      # only when a later `git checkout` asks for them.
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          filter: blob:none
+
+      - name: Setup go
+        uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0
+        with:
+          go-version-file: ./go.mod
+
+      - name: Determine base SHA
+        run: |
+          BASE_SHA=$(git merge-base HEAD origin/main 2>/dev/null || echo "")
+          echo "BASE_SHA=$BASE_SHA" >> $GITHUB_ENV
+
+      - name: Detect breaking changes vs. main
+        if: env.BASE_SHA != ''
+        run: |
+          # Try to check out previous versions of the breaking change detection script. This ensures that
+          # we still detect breaking changes when entire files and their tests are removed.
+          git checkout "$BASE_SHA" -- ./scripts/detect-breaking-changes 2>/dev/null || true
+          ./scripts/detect-breaking-changes "$BASE_SHA"

.github/workflows/create-releases.yml

@@ -14,9 +14,9 @@ jobs:
     environment: production-release
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - uses: stainless-api/trigger-release-please@v1
+      - uses: stainless-api/trigger-release-please@bb6677c5a04578eec1ccfd9e1913b5b78ed64c61 # v1.4.0
         id: release
         with:
           repo: ${{ github.event.repository.full_name }}

.gitignore

@@ -1,4 +1,5 @@
 .prism.log
+.stdy.log
 codegen.log
 Brewfile.lock.json
 .idea/

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "1.26.0"
+  ".": "1.52.0"
 }

.stats.yml

@@ -1,4 +1,4 @@
-configured_endpoints: 34
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/anthropic%2Fanthropic-29a6b7ba51942cd606e5bf4b533e5aac1bef42f6d4b1f7f45f756304cf676782.yml
-openapi_spec_hash: 58021ab18daccd5c45a930ffd7d6ab4d
-config_hash: 4e204fead5f0af80eb9effa1d1e34dca
+configured_endpoints: 116
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/anthropic/anthropic-a548d120cebb4d68d46c828028d51d04b4d4abb868a7bad21dad960cb72cbd18.yml
+openapi_spec_hash: 2b3214760a4e23a9704779ac99bce417
+config_hash: ce2cd5d2f03228adacf04ebcceb14465