reapit · joshbalfour · Apr 14, 2025 · Apr 14, 2025 · Apr 14, 2025 · Apr 14, 2025
diff --git a/.github/workflows/build-pr.yml b/.github/workflows/build-pr.yml
@@ -22,9 +22,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn

diff --git a/.github/workflows/check-pr.yml b/.github/workflows/check-pr.yml
@@ -22,9 +22,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn

diff --git a/.github/workflows/lint-pr.yml b/.github/workflows/lint-pr.yml
@@ -22,9 +22,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn

diff --git a/.github/workflows/release-dev.yml b/.github/workflows/release-dev.yml
@@ -35,9 +35,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn

diff --git a/.github/workflows/release-prod.yml b/.github/workflows/release-prod.yml
@@ -42,9 +42,9 @@ jobs:
           tagRegex: '(?<package>.*)_(?<version>.*)'
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Set Version
         run: |

diff --git a/.github/workflows/rollback-prod.yml b/.github/workflows/rollback-prod.yml
@@ -30,9 +30,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn install && git checkout -- .

diff --git a/.github/workflows/test-pr.yml b/.github/workflows/test-pr.yml
@@ -23,9 +23,9 @@ jobs:
           fetch-depth: 0
 
       - name: Set Node
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
-          node-version: '18.x'
+          node-version: '22.x'
 
       - name: Install
         run: yarn

diff --git a/...-v1-npm-2.2.202-683e566b1a-3e8f1148f7.zip → ...-v1-npm-2.2.231-aeb3e693b4-66cd82fb0f.zip b/...-v1-npm-2.2.202-683e566b1a-3e8f1148f7.zip → ...-v1-npm-2.2.231-aeb3e693b4-66cd82fb0f.zip
diff --git a/.yarn/cache/@aws-cdk-asset-kubectl-v20-npm-2.1.2-2c21f927f4-a6d2cbdcd6.zip b/.yarn/cache/@aws-cdk-asset-kubectl-v20-npm-2.1.2-2c21f927f4-a6d2cbdcd6.zip
diff --git a/.yarn/cache/@aws-cdk-cloud-assembly-schema-npm-38.0.1-469647254b-fff5afc74d.zip b/.yarn/cache/@aws-cdk-cloud-assembly-schema-npm-38.0.1-469647254b-fff5afc74d.zip
diff --git a/.yarn/cache/@aws-cdk-cloud-assembly-schema-npm-41.2.0-974fbe1226-134934878d.zip b/.yarn/cache/@aws-cdk-cloud-assembly-schema-npm-41.2.0-974fbe1226-134934878d.zip
diff --git a/...lib-npm-2.162.1-0e65e0cf44-f560a47ca6.zip → ...lib-npm-2.189.0-441da9f120-fc50b59ed4.zip b/...lib-npm-2.162.1-0e65e0cf44-f560a47ca6.zip → ...lib-npm-2.189.0-441da9f120-fc50b59ed4.zip
diff --git a/.yarn/cache/aws-cdk-npm-2.1007.0-f470d3be5d-d0b0f676bc.zip b/.yarn/cache/aws-cdk-npm-2.1007.0-f470d3be5d-d0b0f676bc.zip
diff --git a/.yarn/cache/fs-extra-npm-11.3.0-a6b1b4d5ad-c9fe7b23dd.zip b/.yarn/cache/fs-extra-npm-11.3.0-a6b1b4d5ad-c9fe7b23dd.zip
diff --git a/.yarn/cache/jsonschema-npm-1.5.0-a1e4a2d9f7-46bf49b388.zip b/.yarn/cache/jsonschema-npm-1.5.0-a1e4a2d9f7-46bf49b388.zip
diff --git a/.yarn/cache/semver-npm-7.7.1-4572475307-4cfa1eb91e.zip b/.yarn/cache/semver-npm-7.7.1-4572475307-4cfa1eb91e.zip
diff --git a/...table-npm-6.8.2-e33ecc3c54-2946162eb8.zip → ...table-npm-6.9.0-5955281f93-976da6d898.zip b/...table-npm-6.8.2-e33ecc3c54-2946162eb8.zip → ...table-npm-6.9.0-5955281f93-976da6d898.zip
diff --git a/packages/app-marketplace-cms/cdk/cdk-stack.ts b/packages/app-marketplace-cms/cdk/cdk-stack.ts
@@ -35,7 +35,7 @@ export const createStack = async () => {
     undefined,
     undefined,
     undefined,
-    aws_lambda.Runtime.NODEJS_18_X,
+    aws_lambda.Runtime.NODEJS_20_X,
   )
   dynamodb.grantReadWriteData(httpLambda)
 
@@ -51,7 +51,7 @@ export const createStack = async () => {
     undefined,
     undefined,
     512,
-    aws_lambda.Runtime.NODEJS_18_X,
+    aws_lambda.Runtime.NODEJS_20_X,
   )
 
   const authorizer = new aws_apigateway.RequestAuthorizer(stack, 'app-marketplace-authorizer', {

diff --git a/packages/app-marketplace-cms/tsup.config.js b/packages/app-marketplace-cms/tsup.config.js
@@ -8,7 +8,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 export default defineConfig([
   {
     entry: {'app/http': 'src/http.ts'},
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {
@@ -46,7 +46,7 @@ export default defineConfig([
   },
   {
     entry: {'authorizer/index': '../utils-authorizer/src/handler.ts'},
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {

diff --git a/packages/cli/tsup.config.js b/packages/cli/tsup.config.js
@@ -5,7 +5,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 
 export default defineConfig({
   entry: ['src/index.ts'],
-  target: 'node18',
+  target: 'node22',
   clean: true,
   minify: true,
   esbuildOptions: (opts) => {

diff --git a/packages/cognito-custom-mail-lambda/serverless.yml b/packages/cognito-custom-mail-lambda/serverless.yml
@@ -10,7 +10,7 @@ custom:
 
 provider:
   name: aws
-  runtime: 'nodejs18.x'
+  runtime: 'nodejs22.x'
   stage: ${opt:stage, 'dev'}
   region: eu-west-2
   deploymentBucket:

diff --git a/packages/cognito-custom-mail-lambda/tsup.config.js b/packages/cognito-custom-mail-lambda/tsup.config.js
@@ -6,7 +6,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 
 export default defineConfig({
   entry: ['src/app.ts'],
-  target: 'node18',
+  target: 'node22',
   clean: true,
   minify: config.NODE_ENV === 'production',
   esbuildOptions: (opts) => {

diff --git a/packages/deployment-service/cdk/lib/cdk-stack.ts b/packages/deployment-service/cdk/lib/cdk-stack.ts
@@ -231,7 +231,7 @@ export const createStack = async () => {
     undefined,
     undefined,
     512,
-    aws_lambda.Runtime.NODEJS_18_X,
+    aws_lambda.Runtime.NODEJS_20_X,
   )
 
   const authorizer = new cdk.aws_apigateway.RequestAuthorizer(stack, 'deployment-service-authorizer', {
@@ -250,7 +250,7 @@ export const createStack = async () => {
       vpc,
       duration: options.timeout,
       ram: options.RAM,
-      runtime: aws_lambda.Runtime.NODEJS_18_X,
+      runtime: aws_lambda.Runtime.NODEJS_20_X,
     })
     options.policies.forEach((policy) => lambda.addToRolePolicy(policy))
 
@@ -283,7 +283,7 @@ export const createStack = async () => {
     name: 'cloud-deployment-migration',
     entrypoint: 'bundle/migration-run.zip',
     handler: createFileLoc('migration-run', 'migrationRun'),
-    runtime: aws_lambda.Runtime.NODEJS_18_X,
+    runtime: aws_lambda.Runtime.NODEJS_20_X,
     env,
     vpc,
   })

diff --git a/packages/deployment-service/cdk/lib/dns-certificate-update.ts b/packages/deployment-service/cdk/lib/dns-certificate-update.ts
@@ -50,7 +50,7 @@ export class DnsCertificateUpdate extends Construct {
     )
 
     const certificateUpdateLambda = new aws_lambda.Function(paasEuWest2Stack, `${id}-eventbridge-update-lambda`, {
-      runtime: aws_lambda.Runtime.NODEJS_18_X,
+      runtime: aws_lambda.Runtime.NODEJS_20_X,
       handler: 'packages/deployment-service/dist/dns-eventbridge.handle',
       vpc,
       code: aws_lambda.Code.fromAsset('bundle/dns-eventbridge.zip'),

diff --git a/packages/deployment-service/cdk/lib/resolve-production-OAC-custom-resource.ts b/packages/deployment-service/cdk/lib/resolve-production-OAC-custom-resource.ts
@@ -13,7 +13,7 @@ export class ResolveProductionOACCustomResource extends Construct {
         code: aws_lambda.Code.fromAsset('bundle/resolve-production-apply-OAC-to-all-distros.zip'),
         memorySize: 512,
         timeout: Duration.minutes(15),
-        runtime: aws_lambda.Runtime.NODEJS_18_X,
+        runtime: aws_lambda.Runtime.NODEJS_20_X,
       },
     )
 

diff --git a/...es/deployment-service/cdk/lib/resolve-production-S3-bucket-permissions-custom-resource.ts b/...es/deployment-service/cdk/lib/resolve-production-S3-bucket-permissions-custom-resource.ts
@@ -29,7 +29,7 @@ export class ResolveProductionS3BucketPermissionsCustomResource extends Construc
         code: aws_lambda.Code.fromAsset('bundle/resolve-production-s3-bucket-permissions.zip'),
         memorySize: 1024,
         timeout: Duration.seconds(60),
-        runtime: aws_lambda.Runtime.NODEJS_18_X,
+        runtime: aws_lambda.Runtime.NODEJS_20_X,
         environment: {
           PAAS_ACCOUNT_ID: scope.account,
           IAAS_ACCOUNT_ID: iaasAccountId,

diff --git a/packages/deployment-service/cdk/lib/resolve-production-S3-bucket-policies-custom-resource.ts b/packages/deployment-service/cdk/lib/resolve-production-S3-bucket-policies-custom-resource.ts
@@ -26,7 +26,7 @@ export class ResolveProductionS3BucketPoliciesCustomResource extends Construct {
       code: aws_lambda.Code.fromAsset('bundle/resolve-production-s3-bucket-policies.zip'),
       memorySize: 1024,
       timeout: Duration.seconds(60),
-      runtime: aws_lambda.Runtime.NODEJS_18_X,
+      runtime: aws_lambda.Runtime.NODEJS_20_X,
       environment: {
         PAAS_ACCOUNT_ID: scope.account,
         IAAS_ACCOUNT_ID: iaasAccountId,

diff --git a/packages/deployment-service/tsup.config.js b/packages/deployment-service/tsup.config.js
@@ -8,7 +8,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 export default defineConfig([
   {
     entry: ['src/http.ts', 'src/sqs.ts', 'src/sns.ts', 'src/migration-run.ts', 'src/dns-eventbridge.ts'],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {
@@ -45,7 +45,7 @@ export default defineConfig([
     entry: {
       'authorizer/index': '../utils-authorizer/src/handler.ts',
     },
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {
@@ -59,7 +59,7 @@ export default defineConfig([
       'src/resolve-production-s3-bucket-policies.ts',
       'src/resolve-production-apply-OAC-to-all-distros.ts',
     ],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
   },

diff --git a/packages/graphql-server/tsup.config.ts b/packages/graphql-server/tsup.config.ts
@@ -6,7 +6,7 @@ const pkgJson = JSON.parse(readFileSync('package.json', 'utf-8'))
 export default defineConfig([
   {
     entry: {'authorizer/index': '../utils-authorizer/src/handler.ts'},
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: true,
     esbuildOptions: (opts) => {
@@ -16,7 +16,7 @@ export default defineConfig([
   },
   {
     entry: {'graphql-server/index': 'src/index.ts'},
-    target: 'node18',
+    target: 'node22',
     clean: true,
     // minify: true,
     noExternal: Object.keys(pkgJson.dependencies),

diff --git a/packages/payments-service/cdk/cdk-stack.ts b/packages/payments-service/cdk/cdk-stack.ts
@@ -53,7 +53,7 @@ export const createStack = async () => {
     undefined,
     undefined,
     undefined,
-    aws_lambda.Runtime.NODEJS_18_X,
+    aws_lambda.Runtime.NODEJS_20_X,
   )
 
   const lambdaAuthorizer = createFunction(
@@ -65,7 +65,7 @@ export const createStack = async () => {
     undefined,
     undefined,
     undefined,
-    aws_lambda.Runtime.NODEJS_18_X,
+    aws_lambda.Runtime.NODEJS_20_X,
   )
 
   const authorizer = new apigateway.RequestAuthorizer(stack, 'payments-service-authorizer', {

diff --git a/packages/payments-service/tsup.config.js b/packages/payments-service/tsup.config.js
@@ -7,7 +7,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 export default defineConfig([
   {
     entry: ['src/core/server.ts'],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {
@@ -26,7 +26,7 @@ export default defineConfig([
   },
   {
     entry: ['src/core/authorizer.ts'],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: config.NODE_ENV === 'production',
     esbuildOptions: (opts) => {

diff --git a/packages/security-header-lambda/serverless.yml b/packages/security-header-lambda/serverless.yml
@@ -11,7 +11,7 @@ custom:
 
 provider:
   name: aws
-  runtime: ${opt:runtime, 'nodejs18.x' }
+  runtime: ${opt:runtime, 'nodejs22.x' }
   stage: ${opt:stage, 'dev'}
   region: 'us-east-1'
   lambdaHashingVersion: '20201221'

diff --git a/packages/security-header-lambda/tsup.config.js b/packages/security-header-lambda/tsup.config.js
@@ -6,7 +6,7 @@ const pkgJson = JSON.parse(fs.readFileSync('package.json', 'utf-8'))
 
 export default defineConfig({
   entry: ['src/index.ts'],
-  target: 'node18',
+  target: 'node22',
   clean: true,
   minify: config.NODE_ENV === 'production',
   esbuildOptions: (opts) => {

diff --git a/packages/ts-scripts/package.json b/packages/ts-scripts/package.json
@@ -57,8 +57,8 @@
     "@wyw-in-js/vite": "^0.5.5",
     "ajv": "^8.17.1",
     "autoprefixer": "^10.4.20",
-    "aws-cdk": "^2.162.1",
-    "aws-cdk-lib": "^2.162.0",
+    "aws-cdk": "^2.1007.0",
+    "aws-cdk-lib": "^2.189.0",
     "aws-jwt-verify": "^4.0.1",
     "aws-sdk": "^2.1691.0",
     "babel-jest": "^29.7.0",

diff --git a/packages/ts-scripts/src/cdk/components/lambda-function.ts b/packages/ts-scripts/src/cdk/components/lambda-function.ts
@@ -22,7 +22,7 @@ export const createFunction = (
   vpc?: ec2.Vpc,
   duration?: number,
   ram?: number,
-  runtime?: lambda.Runtime,
+  runtime?: lambda.Runtime, // @deprecated now uses lambda.Runtime.NODEJS_LATEST
 ): lambda.Function => {
   return new lambda.Function(scope, functionName, {
     timeout: cdk.Duration.seconds(duration || 30),
@@ -31,7 +31,7 @@ export const createFunction = (
     handler,
     vpc,
     code: typeof entry === 'string' ? lambda.Code.fromAsset(entry) : entry,
-    runtime: runtime || lambda.Runtime.NODEJS_18_X,
+    runtime: lambda.Runtime.NODEJS_LATEST,
     logRetention: logs.RetentionDays.ONE_MONTH,
   })
 }

diff --git a/packages/use-reapit-data/tsup.config.ts b/packages/use-reapit-data/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup'
 export default defineConfig({
     entry: ['src/index.ts'],
     format: ['cjs', 'esm'],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: true,
     dts: true,

diff --git a/packages/utils-common/tsup.config.ts b/packages/utils-common/tsup.config.ts
@@ -3,7 +3,7 @@ import { defineConfig } from 'tsup'
 export default defineConfig({
     entry: ['src/index.ts'],
     format: ['cjs', 'esm'],
-    target: 'node18',
+    target: 'node22',
     clean: true,
     minify: true,
     dts: true,