Release 0.4.4: Cedar CLI integration, hierarchical S3 authorization, and failure mode testing

.github/workflows/ci.yml

@@ -36,6 +36,25 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install Cedar CLI
+        run: cargo install cedar-policy-cli
+
+      - name: Install Lua (Linux)
+        if: runner.os == 'Linux'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y lua5.1 luarocks
+          sudo luarocks install busted
+
+      - name: Install Lua (macOS)
+        if: runner.os == 'macOS'
+        run: |
+          brew install lua luarocks
+          luarocks install busted
+
       - uses: ./.github/actions/setup-raja
         with:
           python-version: ${{ matrix.python-version }}
@@ -44,7 +63,7 @@ jobs:
       - name: Run unit tests
         env:
           PYTEST_ADDOPTS: --cov=src/raja --cov-report=xml --cov-report=term --junitxml=pytest-results.xml
-        run: ./poe test-unit
+        run: ./poe test
 
       - name: Upload test results
         if: always()

.github/workflows/release.yml

@@ -24,6 +24,12 @@ jobs:
           python-version: '3.12'
           install-extras: dev
 
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install Cedar CLI
+        run: cargo install cedar-policy-cli
+
       - name: Determine tag
         shell: bash
         run: |

.gitignore

@@ -27,6 +27,10 @@ venv/
 .mypy_cache/
 .ruff_cache/
 
+# Rust build outputs
+target/
+tools/**/target/
+
 # AWS CDK
 infra/cdk*.json
 infra/cdk.out/