[github-actions]

Issue

Refs #257

Summary

Prepare releases/auto-4b57341d25-663b4b05a36d.json from 663b4b05a36df3ed65a97a22a87b7a82b97402cf. Versions, internal requirements, workspace mappings, dependency sums, and accumulated module notes were generated automatically.

Module	Target	Previous release
.	v1.3.0	v1.2.0
commons/awssdk	v1.3.0	commons/awssdk/v1.2.0
commons/dynamodb	v1.3.0	commons/dynamodb/v1.2.0
commons/metadata	v1.3.0	commons/metadata/v1.2.0
commons/regex	v1.3.0	commons/regex/v1.2.0
logger	v1.3.0	logger/v1.2.0
metrics	v1.3.0	metrics/v1.2.0
parameters	v1.3.0	parameters/v1.2.0
signer	v1.3.0	signer/v1.2.0
jmespath	v1.3.0	jmespath/v1.2.0
datamasking/kms	v1.3.0	datamasking/kms/v1.2.0
datamasking	v1.3.0	datamasking/v1.2.0
kafka/protobuf	v1.3.0	kafka/protobuf/v1.2.0
kafka/avro	v1.3.0	kafka/avro/v1.2.0
kafka	v1.3.0	kafka/v1.2.0
batch	v1.3.0	batch/v1.2.0
idempotency	v1.3.0	idempotency/v1.2.0
idempotency/cache	v1.3.0	idempotency/cache/v1.2.0
parser	v1.3.0	parser/v1.2.0
validation	v1.3.0	validation/v1.2.0
eventhandler/http	v1.3.0	eventhandler/http/v1.2.0
eventhandler/appsyncevents	v1.3.0	eventhandler/appsyncevents/v1.2.0
eventhandler/appsyncgraphql	v1.3.0	eventhandler/appsyncgraphql/v1.2.0
eventhandler/bedrock	v1.3.0	eventhandler/bedrock/v1.2.0
eventhandler/http/metrics	v1.3.0	eventhandler/http/metrics/v1.2.0
eventhandler/http/tracer	v1.3.0	eventhandler/http/tracer/v1.2.0
tracer	v1.3.0	tracer/v1.2.0

Unified project version: v1.3.0. All maintained public modules are included, even when only one component changes. One project Release contains the consolidated notes and full version table; independent module tags identify the same commit.

Historical notes inferred from PR titles and changed paths: None. Review these summaries, initial scope statements, and direct-commit acknowledgements in the plan.

Testing

Internal dependency metadata was tidied with CGO disabled and no module-file replacements. Native contribution, module, and documentation PR checks are activated for this exact head; review their results before merging. If GitHub requires maintainer authorization, select Approve workflows to run in this PR.

Risks and compatibility

Automatic publication after merge and successful main checks: enabled. Merging this preparation PR authorizes the frozen release batch; the workflow publishes with GoReleaser and closes the tracking issue. Squash or merge onto the recorded source SHA. If main advances, rerun preparation against main and replace this stale PR. Tags are never rewritten.

Release notes

• repository | maintenance | Prepare reviewed module versions and accumulated release notes.
• tracer/xray | maintenance | Synchronize internal dependencies with this release batch.
• examples | maintenance | Synchronize internal dependencies with this release batch.
• integration | maintenance | Synchronize internal dependencies with this release batch.

Integration links

---

^{Need help on this PR? Tag @codesmith-bot with what you need.}

[jinxiao]

Release-plan review: v1.3.0 includes exactly the 27 maintained public modules at one version; the frozen X-Ray adapter remains excluded. The plan freezes source 663b4b0 and preserves Go 1.27.3 plus the reviewed dependency patches. Corrected the unreleased note imported from PR #242: the Logger stacks API remains Preview but is included in this new cohort, rather than claiming it is main-only. Re-rendered all notes and validated the plan against Git history and the manifest. No published Release or old notes were edited. Merge/publication remains conditional on the exact final preparation head and merged main passing all release gates.

[jinxiao]

Release review found an additional Critical advisory in the pinned protobufjs reference-tool dependency during the read-only npm audit. No tags or Release have been published. Closing this unmerged plan so the fix can ship through a source PR first, then a refreshed plan against the new main source. Keep release tracking issue #257 open and reuse it for the same v1.3.0 cohort. The Go runtime security fixes remain merged in #256.