build(deps): bump the minor-and-patch group with 6 updates #34
No reviewers
Labels
No labels
app
bug
ci
compliance
dependencies
docker
docs
documentation
duplicate
enhancement
good first issue
help wanted
infra
invalid
javascript
question
wontfix
No milestone
No project
No assignees
1 participant
Due date
No due date set.
Dependencies
No dependencies set.
Reference: adam/seahaven-slack-bot#34
Loading…
Add table
Reference in a new issue
No description provided.
Delete branch "dependabot/npm_and_yarn/minor-and-patch-e3fd4ee37d"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Bumps the minor-and-patch group with 6 updates:
0.1.3160.1.3175.21.05.22.02.253.12.255.03.1045.03.1050.03.1045.03.1050.02.1121.02.1123.0Updates
@cdklabs/generative-ai-cdk-constructsfrom 0.1.316 to 0.1.317Release notes
Sourced from @cdklabs/generative-ai-cdk-constructs's releases.
Commits
b4af66afeat(cdk): upgrade cdk to latest version (#1331)cbffe44chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#1323)18a0027chore(deps): bump urllib3 (#1324)1dfae63Merge pull request #1325 from awslabs/dependabot/uv/lambda/aws-bedrock-batch-...9c1f31dMerge branch 'main' into dependabot/uv/lambda/aws-bedrock-batch-stepfn/urllib...8283726chore(deps): upgrade dependencies (#1330)6e0c504chore(deps): upgrade deps and tag (#1329)a853984chore(deps): upgrade list of models and DLC images (#1327)893dd23chore(deps): bump urllib3 in /lambda/aws-bedrock-batch-stepfndd26e06chore(project): upgrade projen and cdk versions (#1318)Updates
@notionhq/clientfrom 5.21.0 to 5.22.0Release notes
Sourced from @notionhq/client's releases.
Commits
9d36608Bump version to v5.22.0 (#721)2e0d846[AI] Addpositionfield toinsert_contentparams for update page markdown...Updates
aws-cdk-libfrom 2.253.1 to 2.255.0Release notes
Sourced from aws-cdk-lib's releases.
... (truncated)
Changelog
Sourced from aws-cdk-lib's changelog.
... (truncated)
Commits
45b8157chore: revert "feat(aws-cdk-lib): emits performance counters if synthesis is ...beb0bf0chore: update analytics metadata blueprints00cf601feat(bedrockagentcore): graduate to stable 🚀 (#37876)0d088cafeat(ec2): add C8A instance type support (#36736)464fa3dfix(core): cachedLazys use the Box API internally (#37889)ea33967feat(aws-cdk-lib): emits performance counters if synthesis is slow (#37843)65a36c5docs(ec2): remove developer preview mention (#37846)fee8b90fix(core): share a single IAM role across cross-account Fn::GetStackOutput co...0ca0835docs: document new understanding of failing resource deletes (#37886)ea769d4Merge branch 'main' into merge-back/2.254.0Updates
@aws-sdk/client-dynamodbfrom 3.1045.0 to 3.1050.0Release notes
Sourced from @aws-sdk/client-dynamodb's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/client-dynamodb's changelog.
Commits
bdc9fc6Publish v3.1050.004d52f3Publish v3.1049.0313813dPublish v3.1048.01af9047chore(codegen): updated import sources for aws-sdk core (#8015)eabae7dchore(codegen): sync for browser bundle fixes (#8022)8edb907Publish v3.1047.0a664335Publish v3.1046.09ce20f6chore(codegen): dependency version bump (#8008)acffbf9chore: update smithy/core imports (#7979)Updates
@aws-sdk/lib-dynamodbfrom 3.1045.0 to 3.1050.0Release notes
Sourced from @aws-sdk/lib-dynamodb's releases.
... (truncated)
Changelog
Sourced from @aws-sdk/lib-dynamodb's changelog.
Commits
bdc9fc6Publish v3.1050.004d52f3Publish v3.1049.0313813dPublish v3.1048.01af9047chore(codegen): updated import sources for aws-sdk core (#8015)eabae7dchore(codegen): sync for browser bundle fixes (#8022)8edb907Publish v3.1047.0a664335Publish v3.1046.09ce20f6chore(codegen): dependency version bump (#8008)acffbf9chore: update smithy/core imports (#7979)Updates
aws-cdkfrom 2.1121.0 to 2.1123.0Release notes
Sourced from aws-cdk's releases.
Commits
de82699fix(cloud-assembly-api): widen jsonschema range to fix npm ci on npm 11 (#1529)abd4f4cfeat(cli): warn on unrecognized CLI options (#1514)319e3a8chore(deps): bump@aws-sdk/client-appsyncfrom 3.1041.0 to 3.1045.0 (#1520)9165482chore(deps): upgrade dependencies (#1518)ae2349bfeat(cli): add --region as a global CLI option (#1506)c8f270cchore(deps): fix release workflow and upgrade dependencies (#1513)85751e5fix: removeuuiddependency in favor ofnode:crypto(#1511)d5f6022refactor(toolkit-lib): use stack/changeset ARNs for CloudFormation API calls ...bf04a33feat(deps): upgrade aws-cdk-lib (#1509)1ea1ae7feat: CLI send in performance profile if emitted by app (#1478)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsLGTM, routine Dependabot minor/patch group bump (6 packages).
Extended reasoning...
Overview
This PR bumps six dependencies (
@cdklabs/generative-ai-cdk-constructs,@notionhq/client,aws-cdk-lib,@aws-sdk/client-dynamodb,@aws-sdk/lib-dynamodb,aws-cdk) via Dependabot's minor-and-patch group. The diff is limited topackage.jsonandpackage-lock.json— no source code changes.Security risks
None apparent. All bumps are within the same major version, sourced from trusted publishers (AWS, Notion, cdklabs). No new top-level packages were introduced; transitive changes (e.g.,
@aws-sdk/coreminor bumps,fast-xml-parser5.7.2 → 5.7.3) are typical SDK churn with no notable CVE callouts.Level of scrutiny
Low. Dependency bumps with no consumer code changes carry minimal risk beyond CI validation. The largest semantic change (
@cdklabs/generative-ai-cdk-constructspeer-deps now requireaws-cdk-lib ^2.254.0) is satisfied by the bundled bump to2.255.0in the same PR.Other factors
No bugs were flagged by the bug hunting system, and there are no outstanding reviewer comments. Standard Dependabot grouped bump.