Skip to content

chore(deps): bump the all-npm-dependencies group across 1 directory with 12 updates#101

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-npm-dependencies-666da255c3
Open

chore(deps): bump the all-npm-dependencies group across 1 directory with 12 updates#101
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/all-npm-dependencies-666da255c3

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 17, 2026

Bumps the all-npm-dependencies group with 12 updates in the / directory:

Package From To
@aws-sdk/client-controltower 3.1000.0 3.1010.0
@aws-sdk/client-organizations 3.1000.0 3.1010.0
@aws-sdk/client-sns 3.1000.0 3.1010.0
@aws-sdk/client-sqs 3.1000.0 3.1010.0
@aws-sdk/util-arn-parser 3.972.2 3.972.3
aws-cdk-lib 2.241.0 2.243.0
esbuild 0.27.3 0.27.4
@types/node 25.3.3 25.5.0
aws-cdk 2.1108.0 2.1111.0
eslint 10.0.2 10.0.3
jest 30.2.0 30.3.0
typescript-eslint 8.56.1 8.57.1

Updates @aws-sdk/client-controltower from 3.1000.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-controltower's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features
  • clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
  • client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
  • client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
  • client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
  • client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
  • middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)
Tests

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores
  • codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)
Documentation Changes
  • client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
  • client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
  • clients: generate readme block about protocols (#7839) (21ffcafc)
New Features
  • clients: update client endpoints as of 2026-03-13 (079cb594)
  • client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
  • client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
  • client-connect: Deprecating PredefinedNotificationID field (20194f10)
  • client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
  • client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
  • client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
  • client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
  • client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
  • client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-controltower's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-controltower

3.1004.0 (2026-03-06)

... (truncated)

Commits

Updates @aws-sdk/client-organizations from 3.1000.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-organizations's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features
  • clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
  • client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
  • client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
  • client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
  • client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
  • middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)
Tests

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores
  • codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)
Documentation Changes
  • client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
  • client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
  • clients: generate readme block about protocols (#7839) (21ffcafc)
New Features
  • clients: update client endpoints as of 2026-03-13 (079cb594)
  • client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
  • client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
  • client-connect: Deprecating PredefinedNotificationID field (20194f10)
  • client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
  • client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
  • client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
  • client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
  • client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
  • client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-organizations's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-organizations

3.1004.0 (2026-03-06)

... (truncated)

Commits

Updates @aws-sdk/client-sns from 3.1000.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-sns's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features
  • clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
  • client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
  • client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
  • client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
  • client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
  • middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)
Tests

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores
  • codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)
Documentation Changes
  • client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
  • client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
  • clients: generate readme block about protocols (#7839) (21ffcafc)
New Features
  • clients: update client endpoints as of 2026-03-13 (079cb594)
  • client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
  • client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
  • client-connect: Deprecating PredefinedNotificationID field (20194f10)
  • client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
  • client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
  • client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
  • client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
  • client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
  • client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sns's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-sns

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-sns

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-sns

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-sns

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-sns

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-sns

3.1004.0 (2026-03-06)

... (truncated)

Commits

Updates @aws-sdk/client-sqs from 3.1000.0 to 3.1010.0

Release notes

Sourced from @​aws-sdk/client-sqs's releases.

v3.1010.0

3.1010.0(2026-03-16)

New Features
  • clients: update client endpoints as of 2026-03-16 (6ae1dd8a)
  • client-ecs: Amazon ECS now supports configuring whether tags are propagated to the EC2 Instance Metadata Service (IMDS) for instances launched by the Managed Instances capacity provider. This gives customers control over tag visibility in IMDS when using ECS Managed Instances. (f165f183)
  • client-bedrock-agentcore-control: Supporting hosting of public ECR Container Images in AgentCore Runtime (a3ca4b6e)
  • client-bedrock: You can now generate policy scenarios on demand using the new GENERATE POLICY SCENARIOS build workflow type. Scenarios will no longer be automatically generated during INGEST CONTENT, REFINE POLICY, and IMPORT POLICY workflows, resulting in faster completion times for these operations. (e9c8b9ce)
  • client-bedrock-agentcore: Provide support to perform deterministic operations on agent runtime through shell command executions via the new InvokeAgentRuntimeCommand API (14fb5577)
  • middleware-flexible-checksums: allow custom checksums to be used in responses (#7849) (213defa2)
Tests

For list of updated packages, view updated-packages.md in assets-3.1010.0.zip

v3.1009.0

3.1009.0(2026-03-13)

Chores
  • codegen: sync for retry strategy lifecycle fix (#7842) (7bf8888b)
Documentation Changes
  • client-medialive: Documents the VideoDescription.ScalingBehavior.SMART(underscore)CROP enum value. (fa49aa1b)
  • client-sqs: document that SQS supports AWS Query protocol, non-default (#7847) (90772af6)
  • clients: generate readme block about protocols (#7839) (21ffcafc)
New Features
  • clients: update client endpoints as of 2026-03-13 (079cb594)
  • client-api-gateway: API Gateway now supports an additional security policy "SecurityPolicy-TLS13-1-2-FIPS-PFS-PQ-2025-09" for REST APIs and custom domain names. The new policy is compliant with TLS 1.3, Federal Information Processing Standards (FIPS), Perfect Forward Secrecy (PFS), and post-quantum (PQ) cryptography (663ec588)
  • client-gameliftstreams: Feature launch that enables customers to connect streaming sessions to their own VPCs running in AWS. (9b2dfe80)
  • client-connect: Deprecating PredefinedNotificationID field (20194f10)
  • client-ivs-realtime: Updates maximum reconnect window seconds from 60 to 300 for participant replication (e384ea14)
  • client-glue: Add QuerySessionContext to BatchGetPartitionRequest (e39731fa)
  • client-mediaconvert: This update adds support for Dolby AC-4 audio output, frame rate conversion between non-Dolby Vision inputs to Dolby Vision outputs, and clear lead CMAF HLS output. (11615b9f)
  • client-quicksight: The change adds a new capability named ManageSharedFolders in Custom Permissions (cffca16f)
  • client-mgn: Network Migration APIs are now publicly available for direct programmatic access. Customers can now call Network Migration APIs directly without going through AWS Transform (ATX), enabling automation, integration with existing tools, and self-service migration workflows. (2c814ea8)
  • client-config-service: Fix pagination support for DescribeConformancePackCompliance, and update OrganizationConfigRule InputParameters max length to match ConfigRule. (469faf6f)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sqs's changelog.

3.1010.0 (2026-03-16)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1009.0 (2026-03-13)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1008.0 (2026-03-12)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1007.0 (2026-03-11)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1006.0 (2026-03-10)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1005.0 (2026-03-09)

Note: Version bump only for package @​aws-sdk/client-sqs

3.1004.0 (2026-03-06)

... (truncated)

Commits
  • 2aa1e6c Publish v3.1010.0
  • 7888030 Publish v3.1009.0
  • 90772af docs(client-sqs): document that SQS supports AWS Query protocol, non-default ...
  • 7bf8888 chore(codegen): sync for retry strategy lifecycle fix (#7842)
  • 21ffcaf docs(clients): generate readme block about protocols (#7839)
  • 543c385 Publish v3.1008.0
  • 7718940 Publish v3.1007.0
  • fa4dc50 Publish v3.1006.0
  • 0e58193 test(snapshot-testing): error response snapshots (#7836)
  • e692718 Publish v3.1005.0
  • Additional commits viewable in compare view

Updates @aws-sdk/util-arn-parser from 3.972.2 to 3.972.3

Changelog

Sourced from @​aws-sdk/util-arn-parser's changelog.

3.972.3 (2026-03-04)

Chores

  • set downlevel types to be used in typescript@'<4.5' (#7817) (03dad66)
Commits

Updates aws-cdk-lib from 2.241.0 to 2.243.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.243.0

Features

  • update L1 CloudFormation resource definitions (#37201) (85daaf5)
  • cfn-property-mixins: graduate to stable @​aws-cdk/cfn-property-mixins package (#37215) (f071e67)

Bug Fixes

  • dynamodb: resource policies don't have the index ARNs when indexes are added after granting permissions (#37213) (eb37071)

Alpha modules (2.243.0-alpha.0)

v2.242.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.

Features

Bug Fixes

  • aws-cdk-lib: Asset uses a lot of memory (#37186) (70cae75)
  • large amounts of metadata can break 512MB string limit (#34480) (20c3154)
  • opensearchservice: enableAutoSoftwareUpdate: false is not reflected in the CloudFormation template (#37152) (dec8e6f), closes #36382
  • s3: discover existing bucket policies in default trait factory (#37166) (f090816)

Alpha modules (2.242.0-alpha.0)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.243.0-alpha.0 (2026-03-11)

2.242.0-alpha.0 (2026-03-10)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

2.241.0-alpha.0 (2026-03-02)

Features

  • mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#37042) (dd94c31)
  • mixins-preview: cross account delivery destinations (#36827) (a759eb6)

2.240.0-alpha.0 (2026-02-23)

2.239.0-alpha.0 (2026-02-19)

⚠ BREAKING CHANGES

redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE

Features

  • bedrock-agentcore-alpha: add fromCodeAsset method to create runtime artifact with local code assets (#36472) (c5a87e6), closes #36473
  • bedrock-agentcore-alpha: added new target type (api gateway) in agentcore gateway target. (#36841) (0842754), closes #36817
  • mixins-preview: add ECS ClusterSettingsMixin (#36796) (b8ab5be)
  • mixins-preview: add s3 bucket mixin for publicAccessBlock (#36905) (feed4b2)
  • mixins-preview: send Vended Logs to pre-created DeliveryDestination using toDestination() (#36896) (48f1fe6)

Bug Fixes

  • redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE (#36516) (ea19e5c), closes #36416

2.238.0-alpha.0 (2026-02-09)

Features

  • eks-v2-alpha: add support for bootstrapSelfManagedAddons (#36740) (1ffe38d)

... (truncated)

Commits
  • 85daaf5 feat: update L1 CloudFormation resource definitions (#37201)
  • b6f01df Merge branch 'main' into merge-back/2.242.0
  • eb37071 fix(dynamodb): resource policies don't have the index ARNs when indexes are a...
  • 5e49f50 chore: update analytics metadata blueprints
  • 3189116 feat(ecr): add RepositoryAutoDeleteImages mixin (#37176)
  • 793ad97 feat(core): support PropertyMergeStrategy to merge arbitrary CFN property o...
  • 70cae75 fix(aws-cdk-lib): Asset uses a lot of memory (#37186)
  • 1dfaf5f feat: update L1 CloudFormation resource definitions (#37173)
  • 20c3154 fix: large amounts of metadata can break 512MB string limit (#34480)
  • e5ddd79 feat(s3): graduate BucketAutoDeleteObjects mixin into aws-cdk-lib (#37161)
  • Additional commits viewable in compare view

Updates esbuild from 0.27.3 to 0.27.4

Release notes

Sourced from esbuild's releases.

v0.27.4

  • Fix a regression with CSS media queries (#4395, #4405, #4406)

    Version 0.25.11 of esbuild introduced support for parsing media queries. This unintentionally introduced a regression with printing media queries that use the <media-type> and <media-condition-without-or> grammar. Specifically, esbuild was failing to wrap an or clause with parentheses when inside <media-condition-without-or>. This release fixes the regression.

    Here is an example:

    /* Original code */
@media only screen and ((min-width: 10px) or (min-height: 10px)) {
  a { color: red }
}
/* Old output (incorrect) */
@​media only screen and (min-width: 10px) or (min-height: 10px) {
a {
color: red;
}
}
/* New output (correct) */
@​media only screen and ((min-width: 10px) or (min-height: 10px)) {
a {
color: red;
}
}

  • Fix an edge case with the inject feature (#4407)

    This release fixes an edge case where esbuild's inject feature could not be used with arbitrary module namespace names exported using an export {} from statement with bundling disabled and a target environment where arbitrary module namespace names is unsupported.

    With the fix, the following inject file:

    import jquery from 'jquery';
export { jquery as 'window.jQuery' };

    Can now always be rewritten as this without esbuild sometimes incorrectly generating an error:

    export { default as 'window.jQuery' } from 'jquery';

  • Attempt to improve API handling of huge metafiles (#4329, #4415)

    This release contains a few changes that attempt to improve the behavior of esbuild's JavaScript API with huge metafiles (esbuild's name for the build metadata, formatted as a JSON object). The JavaScript API is designed to return the metafile JSON as a JavaScript object in memory, which makes it easy to access from within a JavaScript-based plugin. Multiple people have encountered issues where this API breaks down with a pathologically-large metafile.

    The primary issue is that V8 has an implementation-specific maximum string length, so using the JSON.parse API with large enough strings is impossible. This release will now attempt to use a fallback JavaScript-based JSON parser that operates directly on the UTF8-encoded JSON bytes instead of using JSON.parse when the JSON metafile is too big to fit in a JavaScript string. The new fallback path has not yet been heavily-tested. The metafile will also now be generated with whitespace removed if the bundle is significantly large, which will reduce the size of the metafile JSON slightly.

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.27.4

  • Fix a regression with CSS media queries (#4395, #4405, #4406)

    Version 0.25.11 of esbuild introduced support for parsing media queries. This unintentionally introduced a regression with printing media queries that use the <media-type> and <media-condition-without-or> grammar. Specifically, esbuild was failing to wrap an or clause with parentheses when inside <media-condition-without-or>. This release fixes the regression.

    Here is an example:

    /* Original code */
@media only screen and ((min-width: 10px) or (min-height: 10px)) {
  a { color: red }
}
/* Old output (incorrect) */
@​media only screen and (min-width: 10px) or (min-height: 10px) {
a {
color: red;
}
}
/* New output (correct) */
@​media only screen and ((min-width: 10px) or (min-height: 10px)) {
a {
color: red;
}
}

  • Fix an edge case with the inject feature (#4407)

    This release fixes an edge case where esbuild's inject feature could not be used with arbitrary module namespace names exported using an export {} from statement with bundling disabled and a target environment where arbitrary module namespace names is unsupported.

    With the fix, the following inject file:

    import jquery from 'jquery';
export { jquery as 'window.jQuery' };

    Can now always be rewritten as this without esbuild sometimes incorrectly generating an error:

    export { default as 'window.jQuery' } from 'jquery';

  • Attempt to improve API handling of huge metafiles (#4329, #4415)

    This release contains a few changes that attempt to improve the behavior of esbuild's JavaScript API with huge metafiles (esbuild's name for the build metadata, formatted as a JSON object). The JavaScript API is designed to return the metafile JSON as a JavaScript object in memory, which makes it easy to access from within a JavaScript-based plugin. Multiple people have encountered issues where this API breaks down with a pathologically-large metafile.

... (truncated)

Commits

@dependabot
chore(deps): bump the all-npm-dependencies group across 1 directory w…
e4ece67 
…ith 12 updates

Bumps the all-npm-dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-controltower](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-controltower) | `3.1000.0` | `3.1010.0` |
| [@aws-sdk/client-organizations](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-organizations) | `3.1000.0` | `3.1010.0` |
| [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1000.0` | `3.1010.0` |
| [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1000.0` | `3.1010.0` |
| [@aws-sdk/util-arn-parser](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/util-arn-parser) | `3.972.2` | `3.972.3` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.241.0` | `2.243.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.27.3` | `0.27.4` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.3.3` | `25.5.0` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1108.0` | `2.1111.0` |
| [eslint](https://github.com/eslint/eslint) | `10.0.2` | `10.0.3` |
| [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) | `30.2.0` | `30.3.0` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.56.1` | `8.57.1` |



Updates `@aws-sdk/client-controltower` from 3.1000.0 to 3.1010.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-controltower/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1010.0/clients/client-controltower)

Updates `@aws-sdk/client-organizations` from 3.1000.0 to 3.1010.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-organizations/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1010.0/clients/client-organizations)

Updates `@aws-sdk/client-sns` from 3.1000.0 to 3.1010.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1010.0/clients/client-sns)

Updates `@aws-sdk/client-sqs` from 3.1000.0 to 3.1010.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1010.0/clients/client-sqs)

Updates `@aws-sdk/util-arn-parser` from 3.972.2 to 3.972.3
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/util-arn-parser/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/util-arn-parser)

Updates `aws-cdk-lib` from 2.241.0 to 2.243.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.243.0/packages/aws-cdk-lib)

Updates `esbuild` from 0.27.3 to 0.27.4
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.27.3...v0.27.4)

Updates `@types/node` from 25.3.3 to 25.5.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `aws-cdk` from 2.1108.0 to 2.1111.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1111.0/packages/aws-cdk)

Updates `eslint` from 10.0.2 to 10.0.3
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.0.2...v10.0.3)

Updates `jest` from 30.2.0 to 30.3.0
- [Release notes](https://github.com/jestjs/jest/releases)
- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jestjs/jest/commits/v30.3.0/packages/jest)

Updates `typescript-eslint` from 8.56.1 to 8.57.1
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.57.1/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-controltower"
  dependency-version: 3.1010.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@aws-sdk/client-organizations"
  dependency-version: 3.1010.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@aws-sdk/client-sns"
  dependency-version: 3.1010.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@aws-sdk/client-sqs"
  dependency-version: 3.1010.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: "@aws-sdk/util-arn-parser"
  dependency-version: 3.972.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: aws-cdk-lib
  dependency-version: 2.243.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: esbuild
  dependency-version: 0.27.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: "@types/node"
  dependency-version: 25.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: aws-cdk
  dependency-version: 2.1111.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: eslint
  dependency-version: 10.0.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-npm-dependencies
- dependency-name: jest
  dependency-version: 30.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
- dependency-name: typescript-eslint
  dependency-version: 8.57.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-npm-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 17, 2026
@github-actions
Copy link

github-actions bot commented Mar 17, 2026

🚦 Test run complete

  • Status: success
  • Commit: bd54b38aac68582d9fcbcdf9fa8a7b5924ac8f0d

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants