WIP: Revert `aws-cdk-lib` bump to unblock dependency review failure #20

Closed

Copilot wants to merge 2 commits from copilot/fix-copilot-issue into dependabot/npm_and_yarn/aws-cdk-lib-2.262.1

Copilot commented

2026-07-26 05:09:38 +00:00

(Migrated from github.com)

The dependency review workflow started failing on the Dependabot update because the aws-cdk-lib@2.262.1 lockfile tree includes vulnerable brace-expansion versions flagged at high severity. This PR rolls back that single dependency bump to restore a passing dependency posture.

Scope of change
- Reverted aws-cdk-lib from 2.262.1 to 2.261.0 in root manifests.
- Updated lockfile entries to match the reverted version and its bundled transitive set.
Files touched
- package.json
- package-lock.json
Resulting dependency delta
- Removes the newly introduced vulnerable brace-expansion lineage from the bumped aws-cdk-lib package set by reverting the bump itself.

// package.json
"dependencies": {
  "aws-cdk-lib": "2.261.0",
  "constructs": "^10.7.1"
}

The dependency review workflow started failing on the Dependabot update because the `aws-cdk-lib@2.262.1` lockfile tree includes vulnerable `brace-expansion` versions flagged at high severity. This PR rolls back that single dependency bump to restore a passing dependency posture. - **Scope of change** - Reverted `aws-cdk-lib` from `2.262.1` to `2.261.0` in root manifests. - Updated lockfile entries to match the reverted version and its bundled transitive set. - **Files touched** - `package.json` - `package-lock.json` - **Resulting dependency delta** - Removes the newly introduced vulnerable `brace-expansion` lineage from the bumped `aws-cdk-lib` package set by reverting the bump itself. ```json // package.json "dependencies": { "aws-cdk-lib": "2.261.0", "constructs": "^10.7.1" } ```

amoussa1229 (Migrated from github.com) reviewed 2026-07-26 05:09:38 +00:00

amoussa1229 commented

2026-07-27 15:55:51 +00:00

(Migrated from github.com)

Closing: rustdesk-server is being decommissioned (stack teardown + repo archive, 2026-07-27). No further dependency changes needed.

This repo is archived. You cannot comment on pull requests.

No reviewers

amoussa1229