Upgrade: [dependabot] - bump @aws-lambda-powertools/commons from 2.25.2 to 2.26.0

[dependabot]

Bumps @aws-lambda-powertools/commons from 2.25.2 to 2.26.0.

Release notes

Sourced from @​aws-lambda-powertools/commons's releases.

v2.26.0

Summary

We're excited to announce support for API Gateway REST APIs in the Event Handler utility. This simplifies routing and processing of events in AWS Lambda functions by allowing you to define specific handlers that corresponds to routes in your REST APIs with minimal boilerplate code.

We have also integrated the Parser utility with Batch Processing, enabling automatic validation of payloads from SQS, Kinesis and DynamoDB streams.

Furthermore, we have added support for custom error handlers to the AppSync GraphQL event handler resolver, with automatic marshalling of errors to the expected AppSync format and logging built-in.

⭐ Congratulations @​dcabib for their first PR merged in the project and to @​arnabrahman for their continued contributions to AppSync event handler 🎉

Working with API Gateway REST APIs

Key Features

• Lightweight routing to reduce boilerplate code for API Gateway REST APIs
• Built-in middleware engine for executing custom logic when processing requests and responses
• Supports micro function (one or a few routes) and monolithic functions (all routes)

To get started install the Event Handler utility by running:

npm install @aws-lambda-powertools/event-handler

Docs

Registering a route

You can register routes to match HTTP verbs and specific paths. Each HTTP verb corresponds to a method on the REST handler Router class and the path is the first argument of that method

When a request is received, the event handler will automatically convert the event into a Request object and give you access to the current request context, including this request object, the raw event, a Response object, and the lambda context.

import { Router } from '@aws-lambda-powertools/event-handler/experimental-rest';
import type { Context, APIGatewayProxyEvent } from 'aws-lambda';
const app = new Router();
app.get('/ping', async (_, {request: Request, res: Response, context: Context, event: APIGatewayProxyEvent}) => {
return { message: 'pong' };
});
export const handler = async (event: unknown, context: Context) => {
return app.resolve(event, context);
};

We also support dynamic routes in the format path/:identifer, where the :identifier will be extracted as a named parameter and passed to your route handler.

</tr></table> 

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/commons's changelog.

2.26.0 (2025-09-11)

Improvements

• logger update getCodeLocation regex to improve performance (#4389) (801333d)
• batch simplified the parser integration api with batch processor (#4465) (96977ff)

Bug Fixes

• parser updated the binaryValue and stringValue in the SqsMsgAttributeSchema to nullable (#4450) (cefcbdb)
• event-handler handle nullable fields in APIGatewayProxyEvent (#4455) (200f47b)

Features

• parser integrate parser with Batch Processing (#4408) (0b6bbbb)
• parser implemented a helper function Base64Encoded to decode base64 encoded payloads (#4413) (1554360)
• parser add IPv6 support for sourceIp in API Gateway schemas (#4398) (2a94c37)
• event-handler remove undefined from Router's resolve type signature (#4463) (d36ef55)
• event-handler implement mechanism to manipulate response in middleware (#4439) (35a510d)
• event-handler add route specific middleware registration and execution (#4437) (e6ea674)
• event-handler add middleware registration and composition to rest handler (#4428) (fc87eb3)
• event-handler add support for error handling in AppSync GraphQL (#4317) (77a992f)
• event-handler add resolution logic to base router (#4349) (f1ecc6d)

Maintenance

• event-handler rename variables to reflect that options object is now a RequestContext (#4460) (5b4ee1a)
• event-handler expose rest handler functionality (#4458) (23eddfd)
• event-handler split Router tests into multiple files (#4449) (91a1ec4)
• event-handler rename BaseRouter class to Router (#4448) (b043c28)

Commits

• ddb52e3 chore(ci): bump version to 2.26.0 (#4469)
• d0bbfe0 chore(deps): bump github/codeql-action from 3.30.2 to 3.30.3 (#4467)
• 41292d5 chore(deps-dev): bump zod from 4.1.5 to 4.1.7 (#4468)
• 96977ff refactor(batch): simplified the parser integration api with batch processor (...
• b050235 docs(event-handler): add documentation for RESt API (#4464)
• 131d64b chore(deps-dev): bump @​biomejs/biome from 2.2.3 to 2.2.4 (#4461)
• d36ef55 feat(event-handler): remove undefined from Router's resolve type signature (#...
• 5b4ee1a chore(event-handler): rename variables to reflect that options object is now ...
• 23eddfd chore(event-handler): expose rest handler functionality (#4458)
• 200f47b fix(event-handler): handle nullable fields in APIGatewayProxyEvent (#4455)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[eps-autoapprove-dependabot]

I'm approving this pull request because it includes a patch or minor update

[eps-autoapprove-dependabot]

I'm approving this pull request because it includes a patch or minor update

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud