v0.17.4
π Security & CI Improvements
Action Pinning: Pinned all GitHub Actions in .github/workflows/publish.yml and .github/workflows/test.yaml to strict commit SHAs instead of mutable version tags.
π₯ Code Ownership
Team Transition: Reassigned repository ownership in CODEOWNERS from @citizensadvice/devops to @citizensadvice/cloud-engineering.
π¦ Dependency Updates
Direct Dependency Bump: Updated the aws-cdk-lambda-layer-kubectl-v35 requirement in pyproject.toml from >=2.1.0 to >=2.2.2.
Lockfile Refresh (uv.lock): Updated several package versions to their latest upstream releases. Major highlights include:
- AWS & CDK:
aws-cdk-lib(v2.216.0βv2.248.0), cdk8s (v2.70.15βv2.70.54), and constructs (v10.4.2βv10.6.0). - Linting & Typing:
ruff(v0.13.1βv0.15.10),mypy(v1.18.2βv1.20.0), and assortedmypy-boto3-* stubs. - Testing:
pytest(v8.4.2βv9.0.3) and syrupy (v4.9.1βv5.1.0). - Additions: Added librt (
v0.9.0) to the resolution graph.