Skip to content

Conversation

npalm
Copy link
Member

@npalm npalm commented Oct 4, 2025

This pull request updates dependencies across several Lambda function and library packages to keep them current and improve compatibility and security. The main focus is on bumping development and runtime dependencies, including AWS SDK, type definitions, and various utility libraries.

Dependency updates:

  • Updated @types/aws-lambda and @types/node to the latest versions in all Lambda function and library package.json files for improved type safety and compatibility. [1] [2] [3] [4] [5] [6] [7]
  • Bumped @vercel/ncc, @middy/core, and cron-parser to newer versions in all relevant Lambda function packages to incorporate bug fixes and new features. [1] [2] [3] [4] [5] [6] [7] [8] [9]
  • Updated additional dependencies such as @aws-sdk/lib-storage and aws-sdk-client-mock-vitest in gh-agent-syncer for better performance and compatibility.
  • Updated @types/express in the webhook Lambda function for improved Express.js type support.

Monorepo and tooling updates:

  • Added new resolutions in the root lambdas/package.json for brace-expansion, @babel/helpers, and @babel/runtime to address security or compatibility issues, and updated various devDependencies including @nx/*, @swc/*, @typescript-eslint/*, chalk, eslint, nx, typescript, and vite for improved build and linting support.

These updates help ensure the codebase remains up to date with the latest features, bug fixes, and security patches.

@npalm npalm requested a review from a team as a code owner October 4, 2025 13:16
Copy link
Contributor

github-actions bot commented Oct 4, 2025

Dependency Review

The following issues were found:

  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.

View full job summary

@npalm npalm merged commit b20180a into main Oct 4, 2025
7 checks passed
@npalm npalm deleted the npalm/deps-vuln branch October 4, 2025 13:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant