An open index of dependabot pull requests across open source projects.

Bump the dev-dependencies group in /resources with 4 updates

Merged
Number: #39
Type: Pull Request
State: Merged
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 0
Created: September 30, 2025 at 08:28 PM UTC
(about 1 month ago)
Updated: September 30, 2025 at 08:30 PM UTC
(about 1 month ago)
Merged: September 30, 2025 at 08:30 PM UTC
(about 1 month ago)
by SebRamsland
Time to Close: 3 minutes
Labels:
dependencies javascript
Description:

Bumps the dev-dependencies group in /resources with 4 updates: @types/aws-lambda, @types/node, @aws-sdk/client-cognito-identity-provider and esbuild.

Updates @types/aws-lambda from 8.10.152 to 8.10.153

Commits

Updates @types/node from 24.3.0 to 24.6.0

Commits

Updates @aws-sdk/client-cognito-identity-provider from 3.879.0 to 3.899.0

Release notes

Sourced from @​aws-sdk/client-cognito-identity-provider's releases.

v3.899.0

3.899.0(2025-09-29)

Chores
New Features
  • clients: update client endpoints as of 2025-09-29 (341145bf)
  • client-imagebuilder: This release introduces several new features and improvements to enhance pipeline management, logging, and resource configuration. (3659afe3)
  • client-bedrock: Release for fixing GetFoundationModel API behavior. Imported and custom models have their own exclusive API and GetFM should not accept those ARNS as input (e8e4a5d6)
  • client-vpc-lattice: Adds support for specifying the number of IPv4 addresses in each ENI for the resource gateway for VPC Lattice. (7baea902)
  • client-bedrock-runtime: New stop reason for Converse and ConverseStream (323c12bd)
Bug Fixes
  • lib-storage: respect user-provided partSize option for Upload (#7381) (31fc9967)

For list of updated packages, view updated-packages.md in assets-3.899.0.zip

v3.898.0

3.898.0(2025-09-26)

Documentation Changes
  • client-ec2: This release includes documentation updates for Amazon EBS General Purpose SSD (gp3) volumes with larger size and higher IOPS and throughput. (bb0e673b)
New Features
  • clients: update client endpoints as of 2025-09-26 (6ffe6c11)
  • client-redshift: Support tagging and tag propagation to IAM Identity Center for Redshift Idc Applications (82795e3a)
  • client-bedrock-agent-runtime: This release enhances the information provided through Flow Traces. New information includes source/next node tracking, execution chains for complex nodes, dependency action (operation) details, and dependency traces. (0444d5c2)
  • client-dynamodb-streams: Added support for IPv6 compatible endpoints for DynamoDB Streams. (c763e405)
  • client-billing: Add ability to combine custom billing views to create new consolidated views. (dcc6ea33)
  • client-connect: Adds supports for manual contact picking (WorkList) operations on Routing Profiles, Agent Management and SearchContacts APIs. (3dbdb5f0)
  • client-cost-explorer: Support for payer account dimension and billing view health status. (8ddf547e)
  • client-bedrock-data-automation: Added support for configurable Speaker Labeling and Channel Labeling features for Audio modality. (c81765a4)

For list of updated packages, view updated-packages.md in assets-3.898.0.zip

v3.897.0

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cognito-identity-provider's changelog.

3.899.0 (2025-09-29)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.896.0 (2025-09-24)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.895.0 (2025-09-23)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.894.0 (2025-09-22)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.893.0 (2025-09-19)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.891.0 (2025-09-17)

Note: Version bump only for package @​aws-sdk/client-cognito-identity-provider

3.890.0 (2025-09-16)

... (truncated)

Commits

Updates esbuild from 0.25.9 to 0.25.10

Release notes

Sourced from esbuild's releases.

v0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
    
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    

    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }

    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;
    }

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.25.10

  • Fix a panic in a minification edge case (#4287)

    This release fixes a panic due to a null pointer that could happen when esbuild inlines a doubly-nested identity function and the final result is empty. It was fixed by emitting the value undefined in this case, which avoids the panic. This case must be rare since it hasn't come up until now. Here is an example of code that previously triggered the panic (which only happened when minifying):

    function identity(x) { return x }
    identity({ y: identity(123) })
    
  • Fix @supports nested inside pseudo-element (#4265)

    When transforming nested CSS to non-nested CSS, esbuild is supposed to filter out pseudo-elements such as ::placeholder for correctness. The CSS nesting specification says the following:

    The nesting selector cannot represent pseudo-elements (identical to the behavior of the ':is()' pseudo-class). We’d like to relax this restriction, but need to do so simultaneously for both ':is()' and '&', since they’re intentionally built on the same underlying mechanisms.

    However, it seems like this behavior is different for nested at-rules such as @supports, which do work with pseudo-elements. So this release modifies esbuild's behavior to now take that into account:

    /* Original code */
    ::placeholder {
      color: red;
      body & { color: green }
      @supports (color: blue) { color: blue }
    }
    

    /* Old output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    {
    color: blue;
    }
    }

    /* New output (with --supported:nesting=false) */
    ::placeholder {
    color: red;
    }
    body :is() {
    color: green;
    }
    @​supports (color: blue) {
    ::placeholder {
    color: blue;

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+650
Deletions:
-649
Package Dependencies
Package:
@types/node
Ecosystem:
npm
Version Change:
24.3.0 → 24.6.0
Update Type:
Minor
Path:
/resources
Package:
esbuild
Ecosystem:
npm
Version Change:
0.25.9 → 0.25.10
Update Type:
Patch
Path:
/resources
Ecosystem:
npm
Version Change:
3.879.0 → 3.899.0
Update Type:
Minor
Path:
/resources
Ecosystem:
npm
Version Change:
8.10.152 → 8.10.153
Update Type:
Patch
Path:
/resources
Technical Details
ID: 8876412
UUID: 2875930904
Node ID: PR_kwDOM-UeGc6razkY
Host: GitHub
Repository: skrastrek/terraform-modules-aws-lambda-cognito-link-federated-user
Merge State: Unknown