feat(release): write artifacts to new release bucket with private acls COMPASS-9238 (#6832)

This commit adjusts our release process to upload artifacts to the new
release bucket using private ACLs. Because users fetch artifacts from
our CDN, we are not allowing direct access to this bucket. If we do not
set the ACLs to private, our uploads will fail. In order to support this,
we had to update to the latest devtools-shared dl-center package.

Author: drichmdb

package-lock.json

@@ -55,7 +55,9 @@ const getKeyPrefix = (channel) => {
 const uploadAssetNew = async (channel, asset) => {
   const dlCenterNew = getDownloadCenterNew({ bucket: DOWNLOADS_BUCKET_NEW });
   const objectKey = `${getKeyPrefix(channel)}/${asset.name}`;
-  return dlCenterNew.uploadAsset(objectKey, fs.createReadStream(asset.path));
+  return dlCenterNew.uploadAsset(objectKey, fs.createReadStream(asset.path), {
+    acl: 'private',
+  });
 };
 
 const uploadAsset = async (channel, asset) => {

packages/hadron-build/lib/download-center.js

@@ -21,7 +21,7 @@
   "dependencies": {
     "@electron/rebuild": "^3.7.1",
     "@mongodb-js/devtools-github-repo": "^1.4.1",
-    "@mongodb-js/dl-center": "^1.2.0",
+    "@mongodb-js/dl-center": "^1.3.0",
     "@mongodb-js/electron-wix-msi": "^3.0.0",
     "@mongodb-js/signing-utils": "^0.3.8",
     "@npmcli/arborist": "^6.2.0",