Release v6.3.0 into Main

.github/workflows/code.ai-review.yml

@@ -143,7 +143,7 @@ jobs:
             });
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v5
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           aws-region: ${{ vars.AWS_REGION }}
           role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/${{ vars.ROLE_NAME_TO_ASSUME }}

.github/workflows/code.deploy.demo.yml

@@ -20,9 +20,9 @@ jobs:
     environment: demo
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@cf459bd40262a8603163308e488de922e4eb5a95 # v4
+        uses: aws-actions/configure-aws-credentials@6e631f05b2a5f53c9f1e27150d5e8af2f907b03b # v4
         with:
           aws-region: ${{ vars.AWS_REGION }}
           role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/${{ vars.ROLE_NAME_TO_ASSUME }}
@@ -33,11 +33,11 @@ jobs:
         run: |
           echo "${{vars.CONFIG_YAML}}" > config-custom.yaml
       - name: Set up Python 3.13
-        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
         with:
           python-version: "3.13"
       - name: Use Node.js 24.x
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: 24.x
       - name: Install CDK dependencies

.github/workflows/code.deploy.dev.yml

@@ -20,9 +20,9 @@ jobs:
     environment: dev
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@cf459bd40262a8603163308e488de922e4eb5a95 # v4
+        uses: aws-actions/configure-aws-credentials@6e631f05b2a5f53c9f1e27150d5e8af2f907b03b # v4
         with:
           aws-region: ${{ vars.AWS_REGION }}
           role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/${{ vars.ROLE_NAME_TO_ASSUME }}
@@ -33,11 +33,11 @@ jobs:
         run: |
           echo "${{vars.CONFIG_YAML}}" > config-custom.yaml
       - name: Set up Python 3.13
-        uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
         with:
           python-version: "3.13"
       - name: Use Node.js 24.x
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: 24.x
       - name: Install CDK dependencies

.github/workflows/code.draft-release-and-tag.yml

@@ -16,7 +16,7 @@ jobs:
     if: (startsWith(github.event.pull_request.head.ref, 'release/' ) || startsWith(github.event.pull_request.head.ref, 'hotfix/')) && github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'main'
     steps:
       - name: Checkout Source Tag
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           ref: main
       - name: Get Version

.github/workflows/code.end-to-end-test.nightly.yml

@@ -28,11 +28,11 @@ jobs:
     runs-on: ubuntu-latest
     needs: notify_e2e_start
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
             ref: develop
       - name: Setup Node.js
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: '24'
           cache: 'npm'
@@ -47,7 +47,7 @@ jobs:
         run: npx cypress run --config-file cypress/cypress.e2e.config.ts
       - name: Archive Cypress videos & screenshots
         if: failure() || always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
         with:
           name: cypress-e2e-artifacts
           path: |

.github/workflows/code.hotfix.branch.yml

@@ -21,7 +21,7 @@ jobs:
       pull-requests: write  # Required for creating PRs
     steps:
       - name: Checkout Source Tag
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           ref: refs/tags/${{ github.event.inputs.source_tag }}
       - name: Create Hotfix Branch and Update Version

.github/workflows/code.merge.main-to-develop.yml

@@ -14,7 +14,7 @@ jobs:
       contents: write  # Required for merging branches
     steps:
       - name: Checkout main
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           ref: main
           ssh-key: ${{ secrets.DEPLOYMENT_SSH_KEY }}

.github/workflows/code.publish.yml

@@ -25,55 +25,72 @@ jobs:
       contents: write  # Required for uploading release assets
       id-token: write  # Required for npm trusted publishing (OIDC)
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      # Free up disk space (~30GB+) by removing preinstalled software we don't need
+      - name: Free disk space
+        run: |
+          sudo rm -rf /usr/share/dotnet
+          sudo rm -rf /usr/local/lib/android
+          sudo rm -rf /opt/ghc
+          sudo rm -rf /opt/hostedtoolcache/CodeQL
+          sudo rm -rf /opt/hostedtoolcache/go
+          sudo rm -rf /opt/hostedtoolcache/Ruby
+          sudo rm -rf /usr/local/share/powershell
+          sudo rm -rf /usr/local/share/chromium
+          sudo rm -rf /usr/local/lib/heroku
+          sudo rm -rf /usr/share/swift
+          sudo docker image prune --all --force
+          df -h
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       # Setup .npmrc file to publish to NpmJs Packages
-      - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+      - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: '24.x'
           registry-url: 'https://registry.npmjs.org'
 
       # Setup Python for build scripts
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.13'
 
+
       # Install npm dependencies and publish package. Auth is established with NpmJs Trusted publishing.
       # To update, modify package at https://www.npmjs.com/package/awslabs-lisa/access
       # More info: https://docs.npmjs.com/trusted-publishers
       - run: npm ci
+      # Set version from input when running in test mode
+      - name: Set test version
+        if: github.event_name == 'workflow_dispatch'
+        run: npm version "${{ inputs.version }}" --no-git-tag-version --allow-same-version
       - name: Publish NPM Package
-        if: github.event_name == 'release' || !inputs.test_mode
+        if: "!(github.event_name == 'workflow_dispatch' && inputs.test_mode == true)"
         run: npm publish
       - name: Publish NPM Package (Dry Run)
-        if: github.event_name == 'workflow_dispatch' && inputs.test_mode
+        if: github.event_name == 'workflow_dispatch' && inputs.test_mode == true
         run: npm publish --dry-run
-
-      # Build binary assets (lambda layers and container images)
-      - name: Build Lambda Layers and Container Images
-        run: |
-          # Create build directory for lambda layers
-          mkdir -p build
-
-          # Build assets (runs build-lambdas and build-images --export)
-          ./bin/build-assets
+      # Install Python dependencies needed by build scripts
+      - name: Install Python build dependencies
+        run: pip install tiktoken==0.12.0
+      # Build and export container images (separate from npm publish to avoid OOM)
+      - name: Build Container Images
+        run: ./bin/build-images --export
         env:
           PYPI_URL: https://pypi.org/simple
           LISA_VERSION: ${{ github.event_name == 'release' && github.event.release.tag_name || inputs.version }}
 
       # Upload binary assets to GitHub Release
       - name: Upload Release Assets
-        if: github.event_name == 'release' || !inputs.test_mode
+        if: github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && inputs.test_mode == false)
         uses: softprops/action-gh-release@v2
         with:
+          tag_name: ${{ github.event_name == 'release' && github.event.release.tag_name || inputs.version }}
           files: |
-            dist/layers/*.zip
             dist/images/*.tar
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       # In test mode, just list what would be uploaded
       - name: List Build Artifacts (Test Mode)
-        if: github.event_name == 'workflow_dispatch' && inputs.test_mode
+        if: github.event_name == 'workflow_dispatch' && inputs.test_mode == true
         run: |
           echo "=== Lambda Layers (dist/layers/*.zip) ==="
           ls -lh dist/layers/*.zip 2>/dev/null || echo "No zip files found"

.github/workflows/code.release.branch.yml

@@ -19,13 +19,13 @@ jobs:
       pull-requests: write  # Required for creating PRs
     steps:
       - name: Checkout Develop Branch
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           ref: develop
           fetch-depth: 0  # Fetch full history for proper branch comparison
           ssh-key: ${{ secrets.DEPLOYMENT_SSH_KEY }}
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@cf459bd40262a8603163308e488de922e4eb5a95 # v4
+        uses: aws-actions/configure-aws-credentials@6e631f05b2a5f53c9f1e27150d5e8af2f907b03b # v4
         with:
           aws-region: ${{ vars.AWS_REGION }}
           role-to-assume: arn:aws:iam::${{ vars.AWS_ACCOUNT }}:role/${{ vars.ROLE_NAME_TO_ASSUME }}

.github/workflows/code.smoke-test.yml

@@ -14,10 +14,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
 
       - name: Setup Node.js
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: '24'
           cache: 'npm'
@@ -42,7 +42,7 @@ jobs:
 
       - name: Archive Cypress videos & screenshots
         if: failure() || always()
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v4
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v4
         with:
           name: cypress-smoke-artifacts
           path: |

.github/workflows/codeql.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
 
     - name: Initialize CodeQL
       uses: github/codeql-action/init@b36bf259c813715f76eafece573914b94412cd13 # v3
@@ -40,7 +40,7 @@ jobs:
 
     - name: Set up Python 3.13
       if: matrix.language == 'python'
-      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
       with:
         python-version: "3.13"
 
@@ -58,7 +58,7 @@ jobs:
 
     - name: Use Node.js 24.x
       if: matrix.language == 'javascript'
-      uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
       with:
         node-version: 24.x
 

.github/workflows/docs.deploy.github-pages.yml

@@ -19,11 +19,11 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         with:
           fetch-depth: 0
       - name: Setup Node
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: 24
           cache: npm

.github/workflows/test-and-lint.yml

@@ -41,9 +41,9 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
       - name: Use Node.js 24.x
-        uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
         with:
           node-version: 24.x
       - name: Install dependencies
@@ -59,9 +59,9 @@ jobs:
     permissions:
       contents: read
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
     - name: Set up Python 3.13
-      uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
       with:
         python-version: "3.13"
     - name: Install dependencies
@@ -87,13 +87,13 @@ jobs:
       permissions:
         contents: read
       steps:
-        - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
+        - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
         - name: Set up Python 3.13
-          uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5
+          uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v5
           with:
             python-version: '3.13'
         - name: Use Node.js 24.x
-          uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v4
+          uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v4
           with:
             node-version: 24.x
         - name: Install CDK dependencies

.gitignore

@@ -32,6 +32,7 @@ lib/rag/ingestion/ingestion-image/build
 .DS_Store
 *.iml
 *.code-workspace
+.hf_token_cache
 
 # AI Tools
 .cursor

.pre-commit-config.yaml

@@ -52,7 +52,7 @@ repos:
   hooks:
     - id: codespell
       entry: codespell
-      args: ['--skip=*.git*,*cdk.out*,*venv*,*mypy_cache*,*package-lock*,*node_modules*,*dist/*,*poetry.lock*,*coverage*,*models/*,*htmlcov*,*TIKTOKEN_CACHE/*,*test/cdk/stacks/__baselines__/*', "-L=xdescribe,assertIn,afterAll"]
+      args: ['--skip=*.git*,*cdk.out*,*venv*,*mypy_cache*,*package-lock*,*node_modules*,*dist/*,*/public/*,*poetry.lock*,*coverage*,*models/*,*htmlcov*,*TIKTOKEN_CACHE/*,*test/cdk/stacks/__baselines__/*', "-L=xdescribe,assertIn,afterAll"]
       pass_filenames: false
 
 - repo: https://github.com/pycqa/isort

CHANGELOG.md

@@ -1,3 +1,39 @@
+# v6.3.0
+
+## UI Updates
+- Added RAG citation document preview side panel in Chat UI
+- Exposed the document preview panel in the document library for viewing documents
+- Added "Dismiss all" button for notification stacks
+- Fixed "Loading Configuration..." text styling to match LISA UI using Cloudscape components
+- Added last updated date/time to session displays
+
+## Other Key Changes
+- Updated VLLM image to latest AWS deep-learning base with GPU settings for ECS, memory reservation, and tensor parallelization from GPU count
+- Dockerfiles for embedding (instructor, tei), text generation (tgi), and VLLM now run OS package upgrades during build
+- Removed deprecated LISA Serve V1 endpoints and supporting infrastructure
+- Updated dependencies across the codebase
+
+## Bug Fixes
+- Fixed RAG pipeline collection ID resolution (find_by_id_or_name fallback) and EventBus update mismatches on deployment
+- Resolved max_tokens handling for non-Anthropic models on Anthropic routes
+- Improved RAG PDF parsing quality (excessive whitespace and invisible Unicode characters)
+- Addressed consistency of UI validation warnings for field format and required fields
+- Added missing required role for batch ingestion
+- Added cache clearing at login to prevent cache corruption issues
+
+## Documentation
+- Added Claude Code setup guide for LISA Serve integration
+- Updated deployment guide
+
+## Acknowledgements
+* @bedanley
+* @Ernest-Gray
+* @estohlmann
+* @gingerknight
+* @jmharold
+
+**Full Changelog**: https://github.com/awslabs/LISA/compare/v6.2.1..v6.3.0
+
 # v6.2.1
 
 ## Bug Fixes

VERSION

@@ -1 +1 @@
-6.2.1
+6.3.0