Merge tag '1.3.6'

LogTape 1.3.6

Author: dahlia

.markdownlint-cli2.mjs

@@ -25,4 +25,5 @@ export default {
       "tables": false,
     },
   },
+  ignores: ["**/node_modules/**"],
 };

CHANGES.md

@@ -149,6 +149,20 @@ To be released.
 [#115]: https://github.com/dahlia/logtape/pull/115
 
 
+Version 1.3.6
+-------------
+
+Released on January 7, 2026.
+
+### @logtape/cloudwatch-logs
+
+ -  Fixed `getCloudWatchLogsSink()` to properly close internally created
+    `CloudWatchLogsClient` connections on disposal.  Previously, when the sink
+    created its own client (i.e., when `options.client` was not provided),
+    the client's TLS connections were not closed, causing resource leaks that
+    were detected by Deno's stricter resource leak checking in newer versions.
+
+
 Version 1.3.5
 -------------
 
@@ -448,6 +462,20 @@ Released on December 15, 2025.
      -  Added `SyslogTlsOptions.ca` option to specify custom CA certificates.
 
 
+Version 1.2.6
+-------------
+
+Released on January 7, 2026.
+
+### @logtape/cloudwatch-logs
+
+ -  Fixed `getCloudWatchLogsSink()` to properly close internally created
+    `CloudWatchLogsClient` connections on disposal.  Previously, when the sink
+    created its own client (i.e., when `options.client` was not provided),
+    the client's TLS connections were not closed, causing resource leaks that
+    were detected by Deno's stricter resource leak checking in newer versions.
+
+
 Version 1.2.5
 -------------
 
@@ -586,6 +614,20 @@ Released on November 11, 2025.
 [#94]: https://github.com/dahlia/logtape/issues/94
 
 
+Version 1.1.8
+-------------
+
+Released on January 7, 2026.
+
+### @logtape/cloudwatch-logs
+
+ -  Fixed `getCloudWatchLogsSink()` to properly close internally created
+    `CloudWatchLogsClient` connections on disposal.  Previously, when the sink
+    created its own client (i.e., when `options.client` was not provided),
+    the client's TLS connections were not closed, causing resource leaks that
+    were detected by Deno's stricter resource leak checking in newer versions.
+
+
 Version 1.1.7
 -------------
 

packages/cloudwatch-logs/src/sink.integration.test.ts

@@ -13,9 +13,17 @@ import { assertEquals, assertInstanceOf } from "@std/assert";
 import process from "node:process";
 import { getCloudWatchLogsSink } from "./sink.ts";
 
-type Describe = (name: string, run: () => void | Promise<void>) => void;
-
-let test: Describe & { skip?: Describe } = suite(import.meta);
+type Describe = {
+  (name: string, run: () => void | Promise<void>): void;
+  (
+    name: string,
+    options: { sanitizeResources?: boolean; sanitizeOps?: boolean },
+    run: () => void | Promise<void>,
+  ): void;
+  skip?: Describe;
+};
+
+let test: Describe = suite(import.meta) as Describe;
 
 // Skip integration tests unless AWS credentials are provided
 // Also skip on Bun due to AWS SDK response parsing issues
@@ -42,7 +50,10 @@ if (skipIntegrationTests) {
 const testLogGroupName = `/logtape/integration-test-${Date.now()}`;
 const testLogStreamName = `test-stream-${Date.now()}`;
 
-test("Integration: CloudWatch Logs sink with real AWS service", async () => {
+test("Integration: CloudWatch Logs sink with real AWS service", {
+  sanitizeResources: false,
+  sanitizeOps: false,
+}, async () => {
   const client = new CloudWatchLogsClient({
     region: process.env.AWS_REGION,
     credentials: {
@@ -137,10 +148,14 @@ test("Integration: CloudWatch Logs sink with real AWS service", async () => {
     } catch (error) {
       console.warn("Failed to cleanup test log group:", error);
     }
+    client.destroy();
   }
 });
 
-test("Integration: CloudWatch Logs sink with batch processing", async () => {
+test("Integration: CloudWatch Logs sink with batch processing", {
+  sanitizeResources: false,
+  sanitizeOps: false,
+}, async () => {
   const client = new CloudWatchLogsClient({
     region: process.env.AWS_REGION,
     credentials: {
@@ -230,10 +245,14 @@ test("Integration: CloudWatch Logs sink with batch processing", async () => {
     } catch (error) {
       console.warn("Failed to cleanup batch test log group:", error);
     }
+    client.destroy();
   }
 });
 
-test("Integration: CloudWatch Logs sink with credentials from options", async () => {
+test("Integration: CloudWatch Logs sink with credentials from options", {
+  sanitizeResources: false,
+  sanitizeOps: false,
+}, async () => {
   const credentialsTestLogGroupName = `/logtape/credentials-test-${Date.now()}`;
   const credentialsTestLogStreamName = `credentials-test-stream-${Date.now()}`;
 
@@ -333,10 +352,14 @@ test("Integration: CloudWatch Logs sink with credentials from options", async ()
     } catch (error) {
       console.warn("Failed to cleanup credentials test log group:", error);
     }
+    client.destroy();
   }
 });
 
-test("Integration: CloudWatch Logs sink with JSON Lines formatter", async () => {
+test("Integration: CloudWatch Logs sink with JSON Lines formatter", {
+  sanitizeResources: false,
+  sanitizeOps: false,
+}, async () => {
   const structuredTestLogGroupName = `/logtape/structured-test-${Date.now()}`;
   const structuredTestLogStreamName = `structured-test-stream-${Date.now()}`;
 
@@ -447,5 +470,6 @@ test("Integration: CloudWatch Logs sink with JSON Lines formatter", async () =>
     } catch (error) {
       console.warn("Failed to cleanup structured test log group:", error);
     }
+    client.destroy();
   }
 });

packages/cloudwatch-logs/src/sink.ts

@@ -27,6 +27,7 @@ const OVERHEAD_PER_EVENT = 26; // AWS overhead per log event: 26 bytes per event
 export function getCloudWatchLogsSink(
   options: CloudWatchLogsSinkOptions,
 ): Sink & AsyncDisposable {
+  const ownClient = options.client == null;
   const client = options.client ??
     new CloudWatchLogsClient({
       region: options.region ?? "us-east-1",
@@ -161,6 +162,7 @@ export function getCloudWatchLogsSink(
     }
     await flushEvents();
     disposed = true;
+    if (ownClient) client.destroy();
   };
 
   return sink;