mirror of https://github.com/swift-server/swift-aws-lambda-runtime.git synced 2026-06-02 07:27:33 +00:00

Files

T

Sébastien StormacqandSebastien Stormacq f86f4e202d Update CDK dependencies (#650 )

## Issue \#

Fixes Dependabot alert #11 (minimatch ReDoS) and Dependabot alert #12
(ajv ReDoS).

## Description of changes

Upgrades CDK dependencies in `Examples/CDK/infra/` to resolve two ReDoS
vulnerabilities in bundled transitive dependencies:

- `aws-cdk`: `2.1003.0` → `2.1015.0`
- `aws-cdk-lib`: `^2.189.1` → `^2.215.0` (resolves to `2.240.0`)

The new `aws-cdk-lib` bundles `minimatch@^10.2.1` (was `3.1.2`) and
`ajv@8.18.0` (was `8.17.1`), which address the reported vulnerabilities.
`npm audit` now reports 0 vulnerabilities.

## New/existing dependencies impact assessment, if applicable

No new dependencies were added. Existing dependencies `aws-cdk` and
`aws-cdk-lib` were updated to their latest versions. `package-lock.json`
was regenerated.

## Conventional Commits

`fix: upgrade CDK dependencies to resolve minimatch and ajv ReDoS
vulnerabilities`

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license.

Co-authored-by: Sebastien Stormacq <stormacq@amazon.lu>

2026-02-24 10:19:02 +01:00

bin

Replace standard documents and processes with AWS ones (#574 )

2025-10-21 23:27:30 +02:00

lib

Replace standard documents and processes with AWS ones (#574 )

2025-10-21 23:27:30 +02:00

.gitignore

[examples] Add CDK deployment example (#431 )

2024-12-21 10:39:13 +01:00

.npmignore

[examples] Add CDK deployment example (#431 )