fix: set dist-tag to the major version to avoid overwriting latest tag

buildspec.yml

@@ -9,6 +9,8 @@ batch:
         image: aws/codebuild/standard:5.0
     - identifier: testNodejs12
       buildspec: codebuild/nodejs12.yml
+      env:
+        image: aws/codebuild/standard:5.0
     - identifier: testNodejs14
       buildspec: codebuild/nodejs14.yml
       env:
@@ -23,9 +25,13 @@ batch:
         image: aws/codebuild/standard:5.0
     - identifier: testVectorsNodejs12
       buildspec: codebuild/test_vectors/nodejs12.yml
+      env:
+        image: aws/codebuild/standard:5.0
     - identifier: testVectorsNodejs14
       buildspec: codebuild/test_vectors/nodejs14.yml
       env:
         image: aws/codebuild/standard:5.0
     - identifier: testVectorsBrowser
       buildspec: codebuild/test_vectors/browser.yml
+      env:
+        image: aws/codebuild/standard:5.0

codebuild/release/prod-release.yml

@@ -57,7 +57,9 @@ phases:
       # This is going to use the OTP generated above and the NPM_TOKEN
       # environment variable. This will only publish things that are
       # missing from npm. It is therefore safe to run repeatedly.
-      - npx lerna publish from-package --yes --otp $OTP
+      # We make sure to specify a tag, otherwise the default is latest.
+      # This branch is no longer the latest MV so it must be avoided.
+      - npx lerna publish from-package --yes --otp $OTP --dist-tag '2.x'
       # remove after publishing
       - rm .npmrc
       # Clear out the verdaccio cache so that we get the latest version