chore(main): release 5.20.0 (#4272)

🤖 I have created a release *beep* *boop*
---


##
[5.20.0](v5.19.0...v5.20.0)
(2024-11-19)


### Features

* **runners:** add support to disable default labels (Linux)
([#3491](#3491))
([772e1a5](772e1a5))
@jgutierrezglez
* **runners:** add support to disable default labels (Windows)
([#4261](#4261))
([ad9bcc4](ad9bcc4))
@jgutierrezglez


### Bug Fixes

* **lambda:** bump cross-spawn from 7.0.3 to 7.0.6 in /lambdas
([#4273](#4273))
([dcec236](dcec236))
* **lambda:** bump the aws group in /lambdas with 7 updates
([#4266](#4266))
([849549e](849549e))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.19.0 (#4256)

🤖 I have created a release *beep* *boop*
---


##
[5.19.0](v5.18.4...v5.19.0)
(2024-11-12)


### Features

* remove deprecated bata feature workflow job queue
([#4249](#4249))
([4066c4e](4066c4e))


### Bug Fixes

* dispatch only queued events to runners
([#4257](#4257))
([a0a8322](a0a8322))
* **lambda:** bump @octokit/auth-app from 6.1.2 to 6.1.3 in /lambdas in
the octokit group
([#4252](#4252))
([25f3538](25f3538))
* **lambda:** bump the aws group in /lambdas with 7 updates
([#4251](#4251))
([6a98712](6a98712))


### Migration notes

This release removes experimental / beta feature
`enable_workflow_job_events_queue`. When depending on the events on this
queue you can migrate to using the EventBridgge.

#### Enable eventbridge

```hcl
module "runners" {

  ...
  eventbridge {
    enable = true
  }
  ...

```


#### Add rule to forward events to a queue

```hcl

resource "aws_cloudwatch_event_rule" "workflow_job_in_progress" {
  name           = "workflow-job-in-progress"
  event_bus_name = modules.runners.webhook.eventbridge.name # The name of the event bus output by the module

  event_pattern = <<EOF
{
  "detail-type": ["workflow_job"],
  "detail": {
    "action": ["in_progress"]
  }
}
EOF
}

resource "aws_sqs_queue" "workflow_job_in_progress" {
  name = "workflow_job_in_progress
}


resource "aws_sqs_queue_policy" "workflow_job_in_progress" {
  queue_url = aws_sqs_queue.workflow_job_in_progress.id
  policy    = data.aws_iam_policy_document.sqs_policy.json
}

data "aws_iam_policy_document" "sqs_policy" {
  statement {
    sid     = "AllowFromEventBridge"
    actions = ["sqs:SendMessage"]

    principals {
      type        = "Service"
      identifiers = ["events.amazonaws.com"]
    }

    resources = [aws_sqs_queue.workflow_job_in_progress.arn]

    condition {
      test     = "ArnEquals"
      variable = "aws:SourceArn"
      values   = [aws_cloudwatch_event_rule.workflow_job_in_progress.arn]
    }
  }
}
```


---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.18.4 (#4244)

🤖 I have created a release *beep* *boop*
---


##
[5.18.4](v5.18.3...v5.18.4)
(2024-11-07)


### Bug Fixes

* trigger cold start dispatcher after update SSM parameters
([#4243](#4243))
([580d24b](580d24b))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.18.3 (#4241)

🤖 I have created a release *beep* *boop*
---


##
[5.18.3](v5.18.2...v5.18.3)
(2024-11-05)


### Bug Fixes

* **lambda:** bump the aws group in /lambdas with 6 updates
([#4235](#4235))
([ef89b98](ef89b98))
* remove unused example spot_instance_termination_watcher
([#4226](#4226))
([ad865a7](ad865a7))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.18.2 (#4225)

🤖 I have created a release *beep* *boop*
---


##
[5.18.2](v5.18.1...v5.18.2)
(2024-10-31)


### Bug Fixes

* **webhook:** add missing permission to workflow job queue
(EventBridge)
([#4224](#4224))
([d7e516c](d7e516c))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.18.1 (#4217)

🤖 I have created a release *beep* *boop*
---


##
[5.18.1](v5.18.0...v5.18.1)
(2024-10-29)


### Bug Fixes

* **lambda:** bump the aws group in /lambdas with 7 updates
([#4211](#4211))
([d18dcaa](d18dcaa))
* **lambda:** bump the aws-powertools group in /lambdas with 4 updates
([#4212](#4212))
([9c9219b](9c9219b))
* **webhook:** grant KMS permission to decrypt wehn using EventBridge
([#4220](#4220))
([380bcaf](380bcaf))
* **webhook:** result message webhook
([#4221](#4221))
([8099c17](8099c17))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.18.0 (#4207)

🤖 I have created a release *beep* *boop*
---


##
[5.18.0](v5.17.3...v5.18.0)
(2024-10-28)


### Features

* support AWS EventBridge
([#4188](#4188))
([9607ca6](9607ca6))

### Migration directions

This release is adding optional the
[EventBridge](https://philips-labs.github.io/terraform-aws-github-runner/configuration/#eventbridge)
as option to the webhook. No matter if the feature is enabled or not
resources are moved internally. Which will destroy all webhook related
resources update to this verions.

To retain data for the Loggroup of the webhook or mmetrics for the
webhook the resources not to be moved in the Terraform state. You can
add HCL moved blocked to your deployment to instruct Terraform to move
the resources instead of re-create.

<details>

<summary>Examples Terraform `moved` blockes</summary>


#### With module defaults or eventbridge is not eanavbled

```hcl
# log group
moved {
   from = module.<runner-module-name>.module.webhook.aws_cloudwatch_log_group.webhook
   to = module.<runner-module-name>.module.webhook.module.direct[0].aws_cloudwatch_log_group.webhook
}

# lambda
moved {
   from = module.<runner-module-name>.module.webhook.aws_lambda_function.webhook
   to = module.<runner-module-name>.module.webhook.module.direct[0].aws_lambda_function.webhook
}

```

#### With EventBridge enabled

```hcl
# log group
moved {
   from = module.<runner-module-name>.module.webhook.aws_cloudwatch_log_group.webhook
   to = module.<runner-module-name>.module.webhook.module.direct[0].aws_cloudwatch_log_group.webhook
}

# lambda
moved {
   from = module.<runner-module-name>.module.webhook.aws_lambda_function.webhook
   to = module.<runner-module-name>.module.webhook.module.direct[0].aws_lambda_function.webhook
}
```

#### Ater upgrade swithcing between webhook to EventBridge

When enable mode `eventbridge`

```hcl
# log group
moved {
  from = module.runners.module.webhook.module.direct[0].aws_cloudwatch_log_group.webhook
  to = module.runners.module.webhook.module.eventbridge[0].aws_cloudwatch_log_group.webhook
}

# lambda
moved {
  from = module.runners.module.webhook.module.direct[0].aws_lambda_function.webhook
  to = module.runners.module.webhook.module.eventbridge[0].aws_lambda_function.webhook
}
```

Or vice versa for moving from `eventbride` to `webhook`

</details>



---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.17.3 (#4202)

🤖 I have created a release *beep* *boop*
---


##
[5.17.3](v5.17.2...v5.17.3)
(2024-10-23)


### Bug Fixes

* **lambda:** bump the aws group across 1 directory with 5 updates
([#4203](#4203))
([e12ee80](e12ee80))
* **lambda:** bump typescript from 5.5.4 to 5.6.3 in /lambdas
([#4200](#4200))
([cb0c1ff](cb0c1ff))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.17.2 (#4196)

🤖 I have created a release *beep* *boop*
---


##
[5.17.2](v5.17.1...v5.17.2)
(2024-10-21)


### Bug Fixes

* spot termination watcher output multi runner
([#4194](#4194))
([367b1b3](367b1b3))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>

chore(main): release 5.17.1 (#4190)

🤖 I have created a release *beep* *boop*
---


##
[5.17.1](v5.17.0...v5.17.1)
(2024-10-17)


### Bug Fixes

* **lambda:** bump @octokit/types from 13.5.0 to 13.6.1 in /lambdas in
the octokit group
([#4183](#4183))
([f24469f](f24469f))
* **lambda:** bump the aws group across 1 directory with 5 updates
([#4191](#4191))
([bf8a924](bf8a924))
* **lambda:** bump the aws-powertools group in /lambdas with 4 updates
([#4184](#4184))
([e18ac60](e18ac60))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: forest-releaser[bot] <80285352+forest-releaser[bot]@users.noreply.github.com>