adam/apm-wo-analysis
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/apm-wo-analysis.git synced 2026-09-30 03:03:14 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(deps): bump aws-cdk-lib pin to 2.257.0 (#20)
Some checks are pending
Deploy / deploy (push) Waiting to run
Details

Browse source 
Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
This commit is contained in:
Adam Moussa 2026-06-05 13:18:47 -04:00 • committed by GitHub
parent 47b6a9404f
commit 6c392a7362
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 1 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.github/dependabot.yml vendored
View file

@ -4,8 +4,6 @@ updates:
directory: "/cdk"
schedule:
interval: "weekly"
ignore:
- dependency-name: aws-cdk-lib
groups:
minor-and-patch:
update-types:

2
cdk/requirements.txt
View file

@ -1,2 +1,2 @@
aws-cdk-lib==2.253.1
aws-cdk-lib==2.257.0
constructs>=10.6.0