Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the npm group with 15 updates

Merged
Number: #157
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: May 20, 2025 at 07:14 PM UTC
(4 months ago)
Updated: May 20, 2025 at 07:14 PM UTC
(4 months ago)
Merged: May 20, 2025 at 07:14 PM UTC
(4 months ago)
by github-actions[bot]
Time to Close: less than a minute
Labels:
dependencies javascript
Assignees:
poad
Description:

Bumps the npm group with 15 updates:

Package From To
@octokit/core 6.1.5 7.0.2
@octokit/plugin-paginate-graphql 5.2.4 6.0.0
@octokit/plugin-paginate-rest 12.0.0 13.0.0
aws-cdk-lib 2.196.0 2.196.1
@aws-lambda-powertools/logger 2.19.1 2.20.0
@types/node 22.15.19 22.15.20
@aws-lambda-powertools/commons 2.19.1 2.20.0
@octokit/auth-token 5.1.2 6.0.0
@octokit/endpoint 10.1.4 11.0.0
@octokit/graphql 8.2.2 9.0.1
@octokit/request-error 6.1.8 7.0.0
@octokit/request 9.2.3 10.0.2
before-after-hook 3.0.2 4.0.0
fast-content-type-parse 2.0.1 3.0.0
universal-user-agent 7.0.2 7.0.3

Updates @octokit/core from 6.1.5 to 7.0.2

Release notes

Sourced from @​octokit/core's releases.

v7.0.2

7.0.2 (2025-05-20)

Bug Fixes

  • deps: update octokit monorepo (major) (#742) (629fa4e)

v7.0.1

7.0.1 (2025-05-20)

Bug Fixes

  • deps: update dependency before-after-hook to v4 (#739) (2abf89e)

v7.0.0

7.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • 629fa4e fix(deps): update octokit monorepo (major) (#742)
  • 1aba598 chore(deps): update dependency undici to v7 (#711)
  • 2abf89e fix(deps): update dependency before-after-hook to v4 (#739)
  • 78747bf ci: stop testing against NodeJS v18 (#738)
  • 38dd554 chore(deps): update dependency undici to v6.21.2 [security] (#741)
  • f7cb18f build: remove glob (#737)
  • 22243bd chore(deps): bump vite from 6.2.6 to 6.3.4 (#735)
  • e0d36c5 ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a tok...
  • e72addd chore(deps): bump vite from 6.2.5 to 6.2.6 (#733)
  • See full diff in compare view

Updates @octokit/plugin-paginate-graphql from 5.2.4 to 6.0.0

Release notes

Sourced from @​octokit/plugin-paginate-graphql's releases.

v6.0.0

6.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18
Commits
  • 4cddbd7 ci: stop testing against NodeJS v18 (#286)
  • 197da5d build(deps): lock file maintenance (#287)
  • 09cfe93 chore(deps): bump vite from 6.3.2 to 6.3.5 (#285)
  • 7e4e9c5 build(deps): lock file maintenance (#283)
  • 8fc186e build(deps): lock file maintenance (#282)
  • abd1e27 chore(deps): bump vite from 6.2.5 to 6.2.6 (#281)
  • 38b2f76 chore(deps): update dependency @​octokit/plugin-rest-endpoint-methods to v14 (...
  • a558b1e chore(deps): bump vite from 6.2.2 to 6.2.5 (#279)
  • 6a48c9c build(deps): lock file maintenance (#277)
  • 8c90e8f chore(deps): update dependency prettier to v3.5.3 (#275)
  • Additional commits viewable in compare view

Updates @octokit/plugin-paginate-rest from 12.0.0 to 13.0.0

Release notes

Sourced from @​octokit/plugin-paginate-rest's releases.

v13.0.0

13.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • 0b0bb9c ci: stop testing against NodeJS v18 (#677)
  • 953a47e build(deps): bump vite from 6.2.6 to 6.3.4 (#675)
  • 0d99874 chore(deps): update dependency npm-run-all2 to v8 (#676)
  • bc23874 chore(deps): update dependency github-openapi-graphql-query to v5 (#674)
  • a7ee299 ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a tok...
  • 6697b2f build(deps): bump vite from 6.2.5 to 6.2.6 (#672)
  • See full diff in compare view

Updates aws-cdk-lib from 2.196.0 to 2.196.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.196.1

Bug Fixes

  • lambda-nodejs: instantiating NodejsFunction without the entry property fails (#34498) (27e0f3a)

Alpha modules (2.196.1-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.196.1-alpha.0 (2025-05-19)

2.196.0-alpha.0 (2025-05-15)

Features

Bug Fixes

  • ec2: dual-stack vpc without private subnets creates EgressOnlyInternetGateway (under feature flag) (#34437) (35e818b), closes #30981
  • ec2-alpha: fix resource id references and tags for migration behind feature flag (#34377) (aa73534)

2.195.0-alpha.0 (2025-05-07)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

  • iot: By default, deviceDertificateAgeCheck is automatically enabled.

Features

Bug Fixes

  • amplify-alpha: example code for adding a custom rule is wrong (#34353) (8ab2606), closes #34351

2.194.0-alpha.0 (2025-05-01)

2.193.0-alpha.0 (2025-04-30)

Features

  • pipes-targets-alpha: support Amazon Data Firehose target (#33860) (ebf1ea2)

2.192.0-alpha.0 (2025-04-24)

... (truncated)

Commits
  • 27e0f3a fix(lambda-nodejs): instantiating NodejsFunction without the entry proper...
  • See full diff in compare view

Updates @aws-lambda-powertools/logger from 2.19.1 to 2.20.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.20.0

Summary

This release enhances Idempotency to support Valkey- and Redis OSS-compatible databases as a persistence layer. We’ve also added new schemas for AppSync Events APIs and updated existing ones for Amazon DynamoDB and Amazon Kinesis streams.

⭐ A big thank you to @​arnabrahman for working on the Idempotency feature, and @​kiitosu for their contributions!

Using cache databases with Idempotency

Docs

You can now use Valkey- and Redis OSS-compatible databases as a persistence layer for your applications with the Idempotency utility. This allows you to leverage managed services like ElastiCache Serverless, which can scale to hundreds of millions of operations per second with microsecond latency.

To get started, install the latest version of Idempotency along with a cache client:

npm i @aws-lambda-powertools/idempotency @valkey/valkey-glide

Configure the client and pass it to the new CachePersistenceLayer class:

carbon-4

Pass the new persistence layer to any of the Idempotency methods, for example:

carbon-4

If you are currently using Idempotency with Amazon DynamoDB, you can use the new CachePersistenceLayer as a drop-in replacement in your functions.

New and Improved Parser Schemas

Docs

We’ve added two new schemas for AppSync Events APIs and updated two existing ones for Amazon DynamoDB and Amazon Kinesis streams:

Schema Name Description
🆕 AppSyncEventsPublishSchema New schema to parse PUBLISH operation
🆕 AppSyncEventsSubscribeSchema New schema to parse SUBSCRIBE operation
DynamoDBStreamSchema Added window, state, isFinalInvokeForWindow, isWindowTerminatedEarly, and eventSourceArn fields
KinesisDataStreamSchema Added window, state, isFinalInvokeForWindow, isWindowTerminatedEarly, and eventSourceArn fields

Changes

🌟New features and non-breaking changes

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.20.0 (2025-05-20)

Features

  • idempotency: support for Valkey- and Redis OSS-compatible cache (#3896) (3352b90)
  • parser: add schemas for AppSync Events (#3907) (2554800)
  • parser: add support for tumbling windows in Kinesis and DynamoDB events (#3931) (0205a87)
Commits
  • 23aa1d9 chore(ci): bump version to 2.20.0 (#3943)
  • e2c7e87 chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0...
  • 0c189fd chore(deps): bump the aws-sdk-v3 group across 1 directory with 9 updates (#3939)
  • 6703248 chore(deps): bump @​types/node from 22.15.18 to 22.15.19 (#3941)
  • 63072ee docs(idempotency): add idempotency doc for CachePersistenceLayer (#3937)
  • 0205a87 feat(parser): add support for tumbling windows in Kinesis and DynamoDB events...
  • a2cb47d chore(deps): bump the aws-cdk group across 1 directory with 3 updates (#3935)
  • afaa243 chore(deps): bump github/codeql-action from 3.28.17 to 3.28.18 (#3936)
  • 1ac4bdd chore(deps): bump aws-actions/configure-aws-credentials from 4.2.0 to 4.2.1 (...
  • 7ef1630 chore(deps): bump the aws-sdk-v3 group across 1 directory with 9 updates (#3932)
  • Additional commits viewable in compare view

Updates @types/node from 22.15.19 to 22.15.20

Commits

Updates @aws-lambda-powertools/commons from 2.19.1 to 2.20.0

Release notes

Sourced from @​aws-lambda-powertools/commons's releases.

v2.20.0

Summary

This release enhances Idempotency to support Valkey- and Redis OSS-compatible databases as a persistence layer. We’ve also added new schemas for AppSync Events APIs and updated existing ones for Amazon DynamoDB and Amazon Kinesis streams.

⭐ A big thank you to @​arnabrahman for working on the Idempotency feature, and @​kiitosu for their contributions!

Using cache databases with Idempotency

Docs

You can now use Valkey- and Redis OSS-compatible databases as a persistence layer for your applications with the Idempotency utility. This allows you to leverage managed services like ElastiCache Serverless, which can scale to hundreds of millions of operations per second with microsecond latency.

To get started, install the latest version of Idempotency along with a cache client:

npm i @aws-lambda-powertools/idempotency @valkey/valkey-glide

Configure the client and pass it to the new CachePersistenceLayer class:

carbon-4

Pass the new persistence layer to any of the Idempotency methods, for example:

carbon-4

If you are currently using Idempotency with Amazon DynamoDB, you can use the new CachePersistenceLayer as a drop-in replacement in your functions.

New and Improved Parser Schemas

Docs

We’ve added two new schemas for AppSync Events APIs and updated two existing ones for Amazon DynamoDB and Amazon Kinesis streams:

Schema Name Description
🆕 AppSyncEventsPublishSchema New schema to parse PUBLISH operation
🆕 AppSyncEventsSubscribeSchema New schema to parse SUBSCRIBE operation
DynamoDBStreamSchema Added window, state, isFinalInvokeForWindow, isWindowTerminatedEarly, and eventSourceArn fields
KinesisDataStreamSchema Added window, state, isFinalInvokeForWindow, isWindowTerminatedEarly, and eventSourceArn fields

Changes

🌟New features and non-breaking changes

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/commons's changelog.

2.20.0 (2025-05-20)

Features

  • idempotency: support for Valkey- and Redis OSS-compatible cache (#3896) (3352b90)
  • parser: add schemas for AppSync Events (#3907) (2554800)
  • parser: add support for tumbling windows in Kinesis and DynamoDB events (#3931) (0205a87)
Commits
  • 23aa1d9 chore(ci): bump version to 2.20.0 (#3943)
  • e2c7e87 chore(deps): bump zgosalvez/github-actions-ensure-sha-pinned-actions from 3.0...
  • 0c189fd chore(deps): bump the aws-sdk-v3 group across 1 directory with 9 updates (#3939)
  • 6703248 chore(deps): bump @​types/node from 22.15.18 to 22.15.19 (#3941)
  • 63072ee docs(idempotency): add idempotency doc for CachePersistenceLayer (#3937)
  • 0205a87 feat(parser): add support for tumbling windows in Kinesis and DynamoDB events...
  • a2cb47d chore(deps): bump the aws-cdk group across 1 directory with 3 updates (#3935)
  • afaa243 chore(deps): bump github/codeql-action from 3.28.17 to 3.28.18 (#3936)
  • 1ac4bdd chore(deps): bump aws-actions/configure-aws-credentials from 4.2.0 to 4.2.1 (...
  • 7ef1630 chore(deps): bump the aws-sdk-v3 group across 1 directory with 9 updates (#3932)
  • Additional commits viewable in compare view

Updates @octokit/auth-token from 5.1.2 to 6.0.0

Release notes

Sourced from @​octokit/auth-token's releases.

v6.0.0

6.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • 86e1a2f ci: stop testing against NodeJS v18 (#448)
  • a4be067 build(deps): bump vite from 6.2.6 to 6.3.4 (#447)
  • db17cfb build(deps): bump vite from 6.2.5 to 6.2.6 (#446)
  • ab9723f ci(prettier): use Node LTS instead of pinning to a specific version (#442)
  • d269e35 chore(deps): update dependency @​octokit/types to v14 (#445)
  • 9c8d051 build(deps): bump vite from 6.1.0 to 6.2.5 (#444)
  • 080bcfc chore(deps): update dependency prettier to v3.5.3 (#438)
  • 356b1f5 chore(deps): update dependency prettier to v3.5.2 (#437)
  • dcf9157 chore(deps): update dependency prettier to v3.5.1 (#436)
  • 3f5cf51 chore(deps): update dependency esbuild to ^0.25.0 (#435)
  • Additional commits viewable in compare view

Updates @octokit/endpoint from 10.1.4 to 11.0.0

Release notes

Sourced from @​octokit/endpoint's releases.

v11.0.0

11.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits

Updates @octokit/graphql from 8.2.2 to 9.0.1

Release notes

Sourced from @​octokit/graphql's releases.

v9.0.1

9.0.1 (2025-05-20)

Bug Fixes

  • deps: update dependency @​octokit/request to v10 (#659) (737812f)

v9.0.0

9.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • 737812f fix(deps): update dependency @​octokit/request to v10 (#659)
  • d9856f5 ci: stop testing against NodeJS v18 (#657)
  • 972ad64 build(deps): lock file maintenance (#658)
  • 6b98c29 build(deps): bump vite from 6.3.2 to 6.3.5 (#656)
  • 22c0e65 build(deps): lock file maintenance (#653)
  • e4a3c30 build(deps): lock file maintenance (#652)
  • f4e5f02 ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a tok...
  • 7ddb03b build(deps): bump vite from 6.2.5 to 6.2.6 (#651)
  • See full diff in compare view

Updates @octokit/request-error from 6.1.8 to 7.0.0

Release notes

Sourced from @​octokit/request-error's releases.

v7.0.0

7.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • 8eee0c1 ci: stop testing against NodeJS v18 (#512)
  • fafa83c build(deps): lock file maintenance (#513)
  • 3023ebe build(deps): bump vite from 6.3.2 to 6.3.5 (#511)
  • 5ea1f60 build(deps): lock file maintenance (#509)
  • dbf0d55 build(deps): lock file maintenance (#508)
  • cf753a6 ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a tok...
  • 201d185 build(deps): bump vite from 6.2.5 to 6.2.6 (#507)
  • See full diff in compare view

Updates @octokit/request from 9.2.3 to 10.0.2

Release notes

Sourced from @​octokit/request's releases.

v10.0.2

10.0.2 (2025-05-20)

Bug Fixes

v10.0.1

10.0.1 (2025-05-20)

Bug Fixes

  • deps: update dependency fast-content-type-parse to v3 (#747) (8cf6d84)

v10.0.0

10.0.0 (2025-05-20)

Continuous Integration

BREAKING CHANGES

  • Drop support for NodeJS v18

  • build: set minimal node version in build script to v20

  • ci: stop testing against NodeJS v18

Commits
  • fe8bb4b fix(deps): update octokit monorepo (major) (#759)
  • a4c1f27 chore(deps): update dependency undici to v7 (#761)
  • 8cf6d84 fix(deps): update dependency fast-content-type-parse to v3 (#747)
  • 1eefea8 ci: stop testing against NodeJS v18 (#756)
  • b73d921 chore(deps): update dependency undici to v6.21.2 [security] (#758)
  • 9820bbe build(deps): bump vite from 6.2.6 to 6.3.4 (#755)
  • 6150627 ci: replace OCTOKITBOT_PROJECT_ACTION_TOKEN and OCTOKITBOT_PAT with a tok...
  • bcd76d7 build(deps): bump vite from 6.2.5 to 6.2.6 (#754)
  • See full diff in compare view

Updates before-after-hook from 3.0.2 to 4.0.0

Release notes

Sourced from before-after-hook's releases.

v4.0.0

4.0.0 (2025-05-12)

chore

BREAKING CHANGES

  • drop support for Node 16 and Node 18
Commits
  • 37b8490 chore: refactor (#122)
  • a5b7b58 build(deps-dev): bump braces from 3.0.2 to 3.0.3
  • 1bc74e7 docs(SECURITY): use tidelift's vulnerability disclosure process
  • 646e3ef docs(SECURITY): add disclosure URL (#120)
  • 53cc9d7 docs(SECURITY): initial version
  • See full diff in compare view

Updates fast-content-type-parse from 2.0.1 to 3.0.0

Release notes

Sourced from fast-content-type-parse's releases.

v3.0.0

What's Changed

New Contributors

Full Changelog: https://github.com/fastify/fast-content-type-parse/compare/v2.0.1...v3.0.0

Commits

Updates universal-user-agent from 7.0.2 to 7.0.3

Release notes

Sourced from universal-user-agent's releases.

v7.0.3

7.0.3 (2025-05-12)

Bug Fixes

Commits
  • 14e6715 ci(release): update permissions
  • ef3dc69 ci: verify correct behavior in bun and deno (#83)
  • f103a76 fix(release): enable npm provenance (#82)
  • 9f94fd0 build(deps-dev): bump braces from 3.0.2 to 3.0.3
  • 11761d2 docs(SECURITY): Tidelift security process
  • 96a40cc ci(test): update yml syntax (#79)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+114
Deletions:
-114
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
22.15.19 → 22.15.20
Update Type:
Patch
Package:
aws-cdk-lib
Ecosystem:
npm
Version Change:
2.196.0 → 2.196.1
Update Type:
Patch
Package:
@octokit/plugin-paginate-rest
Ecosystem:
npm
Version Change:
12.0.0 → 13.0.0
Update Type:
Major
Package:
@octokit/request
Ecosystem:
npm
Version Change:
9.2.3 → 10.0.2
Update Type:
Major
Package:
@octokit/request-error
Ecosystem:
npm
Version Change:
6.1.8 → 7.0.0
Update Type:
Major
Package:
@octokit/core
Ecosystem:
npm
Version Change:
6.1.5 → 7.0.2
Update Type:
Major
Package:
@aws-lambda-powertools/logger
Ecosystem:
npm
Version Change:
2.19.1 → 2.20.0
Update Type:
Minor
Package:
@octokit/graphql
Ecosystem:
npm
Version Change:
8.2.2 → 9.0.1
Update Type:
Major
Package:
@aws-lambda-powertools/commons
Ecosystem:
npm
Version Change:
2.19.1 → 2.20.0
Update Type:
Minor
Package:
@octokit/endpoint
Ecosystem:
npm
Version Change:
10.1.4 → 11.0.0
Update Type:
Major
Package:
universal-user-agent
Ecosystem:
npm
Version Change:
7.0.2 → 7.0.3
Update Type:
Patch
Package:
before-after-hook
Ecosystem:
npm
Version Change:
3.0.2 → 4.0.0
Update Type:
Major
Package:
@octokit/plugin-paginate-graphql
Ecosystem:
npm
Version Change:
5.2.4 → 6.0.0
Update Type:
Major
Package:
@octokit/auth-token
Ecosystem:
npm
Version Change:
5.1.2 → 6.0.0
Update Type:
Major
Package:
fast-content-type-parse
Ecosystem:
npm
Version Change:
2.0.1 → 3.0.0
Update Type:
Major
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 530092
UUID: 2532415947
Node ID: PR_kwDOMiUr3s6W8ZnL
Host: GitHub
Repository: poad/github-sbom-viewer
Merge State: Unknown