seahaven-account-baseline/package.json
Adam Moussa e68df14ace
chore(deps): bump aws-cdk-lib to 2.262.0 for patched brace-expansion
Resolves Dependabot alert #4 (CVE-2026-13149, exponential-time DoS in brace-expansion expand()). The vulnerable 5.0.6 is a bundled dependency inside the aws-cdk-lib tarball, so it cannot be updated independently; 2.262.0 bundles the patched 5.0.7.

Also migrates Stack#addDependency to addStackDependency (deprecated in this release) in bin/app.ts.
2026-07-23 13:33:07 -04:00

26 lines
534 B
JSON

{
"name": "seahaven-org-baseline",
"version": "1.0.0",
"bin": {
"app": "bin/app.js"
},
"scripts": {
"build": "tsc",
"cdk": "cdk",
"synth": "cdk synth",
"deploy": "cdk deploy",
"diff": "cdk diff"
},
"devDependencies": {
"@types/node": "^24.13.3",
"@types/source-map-support": "^0.5.10",
"aws-cdk": "^2.1132.0",
"source-map-support": "^0.5.21",
"tsx": "4.23.1",
"typescript": "~7.0.2"
},
"dependencies": {
"aws-cdk-lib": "2.262.0",
"constructs": "^10.7.0"
}
}