adam/apm-wo-analysis
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/apm-wo-analysis.git synced 2026-10-07 02:22:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(deps): bump aws-cdk-lib pin to 2.257.0

Browse source 
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
This commit is contained in:
Adam Moussa 2026-06-05 13:14:47 -04:00
parent 47b6a9404f
commit 5d123b941a
2 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/dependabot.yml vendored
View file

@ -4,8 +4,6 @@ updates:
directory: "/cdk" directory: "/cdk"
schedule: schedule:
interval: "weekly" interval: "weekly"
ignore:
- dependency-name: aws-cdk-lib
groups: groups:
minor-and-patch: minor-and-patch:
update-types: update-types:

2
cdk/requirements.txt
View file

@ -1,2 +1,2 @@
aws-cdk-lib==2.253.1 aws-cdk-lib==2.257.0
constructs>=10.6.0 constructs>=10.6.0