fix: update.py and config.py

Author: ChadKluck

SECURITY.md

@@ -2,12 +2,9 @@
 
 ## Supported Versions
 
-Use this section to tell people about which versions of your project are
-currently being supported with security updates.
-
 | Version | Supported          |
 | ------- | ------------------ |
-| 1.x.x   | :white_check_mark: |
+| 0.x.x   | :white_check_mark: |
 
 ## Reporting a Vulnerability
 

TODO.md

@@ -5,11 +5,10 @@
 - Default tags not saving to settings - Test prefix defaults, fix spacing, and showing of prefix heading when not needed.
 - Save service role after service role deploy and make sure it is loaded in
 - If deploy bucket is in param use s3 deploy and vice versa
-- CodeCommit and Repository tags being erroneously added
 - Add Pull and Commit
-- Add: ask if user wants to run the deploy command
+- Add: ask if user wants to run the deploy script
 - Documentation
-- Fix tags - converting back and forth
+- Constant internal tag conversion from dictionary to list and back seems inefficient
 
 ## Deploy
 

cli/CHANGELOG.md

@@ -1,11 +1,20 @@
-# Changelog
+# CLI Script CHANGELOG
 
 To update your local cli scripts from GitHub repository:
 
 ```bash
 ./cli/update.py
 ```
 
-## 0.0.5 (2025-06-xx)
+- The scripts are still in BETA and features are still being added and tested.
+- There may be several versions with small fixes released every few days until reaching v0.1.0.
+- After v0.1.0 all v0.0.x version change information will be removed from the Changelog.
+- Refer to [TODO](../TODO.md) for upcoming BETA fixes and features.
+- Report any issues not covered in TODO via the [Issues page in the GitHub repository](https://github.com/63Klabs/atlantis-cfn-configuration-repo-for-serverless-deployments/issues)
 
-Mostly stable.
+## v0.0.5 (2025-06-07)
+
+Mostly stable. Still in Beta.
+
+- Fixed issue where update.py was not pulling latest changes from organization's SAM config repository.
+- Fixed issue where CodeCommit and Repository tags being erroneously added to the tag prompts for the user even though they are automatically managed.

cli/config.py

@@ -1114,7 +1114,7 @@ def parse_parameter_overrides(self, parameter_string: str) -> Dict:
             Input: 'ParameterKey1=value1 ParameterKey2="value 2"'
             Output: {'ParameterKey1': 'value1', 'ParameterKey2': 'value 2'}
         """
- 
+
         parameters: Dict[str, str] = {}
 
         if not parameter_string:

cli/lib/atlantis.py

@@ -81,7 +81,7 @@ def is_atlantis_reserved_tag(key: str) -> bool:
         Returns:
             bool: True if the tag key is not a reserved Atlantis tag
         """
-        return (key.startswith('Atlantis') or key.startswith('atlantis:') or key in ['Provisioner', 'DeployedUsing', 'Name', 'Stage', 'Environment', 'AlarmNotificationEmail'])
+        return (key.startswith('Atlantis') or key.startswith('atlantis:') or key in ['Provisioner', 'DeployedUsing', 'Name', 'Stage', 'Environment', 'AlarmNotificationEmail', 'Repository', 'RepositoryBranch', 'CodeCommitRepository', 'CodeCommitBranch'])
 
     @staticmethod
     def prompt_for_tags(tags: Dict) -> Dict:

cli/update.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 
-VERSION = "v0.1.0/2025-03-30"
+VERSION = "v0.1.3/2025-06-05"
 # Created by Chad Kluck with AI assistance from Amazon Q Developer
 
 import os
@@ -532,7 +532,7 @@ def pull_changes(self) -> bool:
                 if choice not in ['YES', 'NO']:
                     click.echo(Colorize.error("Please enter 'YES' or 'NO'"))
 
-            if choice.strip().lower() == 'YES':
+            if choice.strip().upper() == 'YES':
                 ConsoleAndLog.info("Pulling latest changes...")
                 subprocess.run(
                     ["git", "pull"],

defaults/defaults.json

@@ -8,7 +8,8 @@
     "ServiceRolePath": "/service-role/",
     "S3BucketNameOrgPrefix": "xcme",
     "S3ArtifactsBucket": "cf-asdf-deployments",
-    "ParameterStoreHierarchy": "/"
+    "ParameterStoreHierarchy": "/",
+    "PermissionsBoundaryArn": "arn:aws:iam::123456789012:policy/MyPermissionsBoundary"
   },
   "tags": []
 }