Skip to content

Upgrade cdk - #10

Merged
kawaaaas merged 4 commits into
mainfrom
upgrade-cdk
Mar 1, 2026
Merged

Upgrade cdk#10
kawaaaas merged 4 commits into
mainfrom
upgrade-cdk

Conversation

@kawaaaas

@kawaaaas kawaaaas commented Mar 1, 2026

Copy link
Copy Markdown
Owner

Fixes #

kawaaaas added 4 commits March 2, 2026 01:01
- Upgrade aws-cdk-lib from 2.189.1 to 2.240.0 across all dependency configurations
- Update Node.js Lambda runtime from NODEJS_20_X to NODEJS_22_X in api, lambda-edge, and secret constructs
- Update esbuild target from node20 to node22 in lambda-edge-construct
- Update test assertions to reflect Node.js 22.x runtime expectations
- Regenerate yarn.lock with updated dependencies
- Remove npm dependency configuration from dependabot.yml, consolidating management to projen
- Update upgrade-main workflow schedule from daily to weekly (Monday only)
- Add depsUpgradeOptions to .projenrc.ts with weekly upgrade schedule
- Simplify dependabot configuration to focus on github-actions only
- Centralize dependency upgrade strategy in project configuration
- Update .prettierrc.json to use double quotes (singleQuote: false)
- Convert all import statements and string literals to double quotes in .projenrc.ts
- Update ESLint configuration and rule definitions to use double quotes
- Standardize quote style in all construct files (api, auth, certificate, database, frontend, lambda-edge, secret, serverless-spa, ssm, waf)
- Update Lambda handler files to use consistent double quote formatting
- Convert test files to use double quote style for consistency
- Update GitHub workflow configuration to use double quotes in YAML strings
- Enforce consistent code style across the entire project for improved readability
@github-actions

github-actions Bot commented Mar 1, 2026

Copy link
Copy Markdown
Contributor

⚠️ Deprecation Warning: The deny-licenses option is deprecated for possible removal in the next major release. For more information, see issue 997.

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@aws-cdk/asset-awscli-v1 2.2.263 UnknownUnknown
npm/@aws-cdk/cloud-assembly-api 2.2.0 UnknownUnknown
npm/@aws-cdk/cloud-assembly-schema 50.4.0 UnknownUnknown
npm/aws-cdk-lib 2.240.0 🟢 5.6
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
License🟢 10license file detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
SAST🟢 8SAST tool detected but not run on all commits
Binary-Artifacts⚠️ 0binaries present in source code
Fuzzing🟢 10project is fuzzed
npm/minimatch 10.2.4 🟢 6.3
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/28 approved changesets -- score normalized to 1
Maintained🟢 1020 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • yarn.lock

@kawaaaas
kawaaaas merged commit 1f558d1 into main Mar 1, 2026
9 of 10 checks passed
@kawaaaas
kawaaaas deleted the upgrade-cdk branch March 1, 2026 16:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant