build(deps-dev): bump the nodejs-other group across 1 directory with 3 updates #1975

dependabot · 2025-09-29T15:44:27Z

Bumps the nodejs-other group with 3 updates in the /nodejs directory: lerna, @aws-sdk/client-sts and aws-cdk-lib.

Updates lerna from 8.1.9 to 9.0.0

Release notes

v9.0.0

9.0.0 (2025-09-23)

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing

A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

v8.2.4

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

remove lodash sortBy, reduce, isEqual usage (#4206) (8889a42)

remove usage of lodash flatten (#4205) (3029033)

Features

version: update workspace specifiers in peerDependencies (#4203) (45e00ce)

... (truncated)

Changelog

Sourced from lerna's changelog.

9.0.0 (2025-09-23)

Bug Fixes

publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

support OIDC trusted publishing (d51e344)

OIDC trusted publishing is now supported by Lerna with no specification configuration required.

A new guide has been added: https://lerna.js.org/docs/recipes/oidc-trusted-publishing

A fully working example repo has been set up here https://github.com/JamesHenry/lerna-v9-oidc-publishing-example

BREAKING CHANGES

After updating we strongly recommend running lerna repair in your project. This will migrate your lerna.json to the latest and greatest and remove any outdated options.

As this is a major release there are a few breaking changes to be aware of, which may or may not affect your lerna repos, depending on how you are using the tool.

node v18 support is dropped because it is end of life

When a node version becomes end of life (EOL) it means that it does not receive any updates or maintenance whatsoever, even if critical security vulnerabilities have been uncovered.

We strongly encourage all folks here to keep up with the maintenance LTS version of Node at an absolute minimum:

https://github.com/nodejs/release#release-schedule

The versions of node supported by lerna are now ^20.19.0 || ^22.12.0 || >=24.0.0.

The @lerna/legacy-package-management package has been formally removed after 2 years of deprecation.

If you are still using lerna add, lerna bootstrap or lerna link commands, please migrate to using your package manager's long-supported workspaces feature. The updated guide should help with this https://lerna.js.org/docs/legacy-package-management**

8.2.4 (2025-07-27)

Bug Fixes

remove all remaining lodash usage (#4207) (8211512)

8.2.3 (2025-06-29)

Bug Fixes

use internal fork of unmaintained strong-log-transformer (#4195) (7115485)

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

... (truncated)

Commits

4c547b7 chore: publish v9.0.0
d51e344 feat: support OIDC trusted publishing
96095e2 feat!: drop EOL node 18, modernize dependencies, node now "^20.19.0 || ^22.12...
cf0f8e0 feat!: remove @lerna/legacy-package-management after 2 years of deprecation
a53a6dd refactor: use native object spreading (#4216)
d2ced36 chore: update uuid to v11 (#4213)
61e4bc2 chore(misc): publish 8.2.4
8211512 fix: remove all remaining lodash usage (#4207)
25331af chore(misc): publish 8.2.3
7115485 fix: use internal fork of unmaintained strong-log-transformer (#4195)
Additional commits viewable in compare view

Updates @aws-sdk/client-sts from 3.893.0 to 3.896.0

Release notes

Sourced from @aws-sdk/client-sts's releases.

v3.896.0

3.896.0(2025-09-24)

Chores

core/protocols: preparatory fixes for schemas (#7374) (5284b82d)

clients: replace 'uuid' with '@smithy/uuid' (#7372) (281c6667)

private: add 'uuid' import only when necessary (#7369) (ef48329a)

codegen: bump '@smithy/*' versions (#7370) (76ac1de2)

Documentation Changes

client-neptune: Doc-only update to address customer use. (08c43a61)

client-kms: Documentation only updates for KMS. (915892a5)

client-appstream: G6f instance support for AppStream 2.0 (ec122646)

New Features

client-cloudwatch: Fix default dualstack FIPS endpoints in AWS GovCloud(US) regions (b22faff8)

client-dax: This release adds support for IPv6-only, DUAL_STACK DAX instances (d0290d54)

Bug Fixes

lib-storage: add validation for partCount and contentLength for multipart upload (#7363) (0562a0d1)

nested-clients: update latest changes from SSO/SSOOIDC (#7371) (6800db79)

Tests

clients: update payload types in client tests (#7373) (f7eb085f)

For list of updated packages, view updated-packages.md in assets-3.896.0.zip

v3.895.0

3.895.0(2025-09-23)

Chores

util-endpoints: update aws partitions.json (e2d3b450)

endpoints: update endpoints model (6ebbaa18)

models: update API models (717ae5db)

New Features

client-entityresolution: Support incremental id mapping workflow for AWS Entity Resolution (556772aa)

client-cleanrooms: Added support for running incremental ID mapping for rule-based workflows. (f151936f)

client-sso-oidc: This release includes exception definition and documentation updates. (6106ad2c)

client-ec2: Add Amazon EC2 R8gn instance types (6368fb54)

... (truncated)

Changelog

Sourced from @aws-sdk/client-sts's changelog.

3.896.0 (2025-09-24)

Note: Version bump only for package @aws-sdk/client-sts

3.895.0 (2025-09-23)

Note: Version bump only for package @aws-sdk/client-sts

3.894.0 (2025-09-22)

Note: Version bump only for package @aws-sdk/client-sts

Commits

115af67 Publish v3.896.0
76ac1de chore(codegen): bump '@smithy/*' versions (#7370)
717bb16 Publish v3.895.0
de69eb5 Publish v3.894.0
See full diff in compare view

Updates aws-cdk-lib from 2.215.0 to 2.217.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.217.0

Features

update L1 CloudFormation resource definitions (#35491) (d095f68)

update L1 CloudFormation resource definitions (#35567) (b0ccf81)

Bug Fixes

cloudfront: Function ARN reference changed from GetAtt to Ref (#35547) (8a26869), closes #35531

core: negated gitignore patterns inside subdirectories are not including matched files (#35511) (44781ef), closes #9146 #22002

kms: Alias reference incorrectly resolves to underlying Key (#35545) (43ffcff), closes #35543

lambda: function.latestVersion points to wrong ARN (#35546) (761dde2), closes #35545

rds: cannot use connections in rds.DatabaseInstance.fromLookup (#35193) (973d234), closes #35192

Reverts

dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#35568) (b1f7f78), closes aws/aws-cdk#35144 #35144 #35551

Alpha modules (2.217.0-alpha.0)

v2.216.0

Features

apigatewayv2: add disableSchemaValidation for Websocket api (#35290) (bc391ce)

cloudfront-origins: response completion timeout (#35485) (7d70bf4)

elasticloadbalancingv2: support target group health attributes (#33351) (2de6e39), closes #31821

events: add support for Event Bus Logging Configuration (#35201) (7ceaefb), closes #35000

route53: add SVCB and HTTPS resource record classes (#34744) (8be219a), closes #34673

stepfunctions-tasks: EmrCreateClusterOptions support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy (#34677) (b3ad6f9), closes #33431

Bug Fixes

cloudformation-include: aws::novalue type validation error for non-string properties (#35425) (ce76a56), closes #18420

kinesisanalytics: deprecate using KinesisAnalyticsV2 from aws-kinesisanalytics, use aws-kinesisanalyticsv2 instead (#35519) (4255b23)

kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#35521) (c0c9933), closes #35520

secretsmanager: SecretRotationApplication creates lambda on python 3.9 which is EOL (#35528) (756b683), closes #34168

secretsmanager: secret transformation (#35202) (f4b26af), closes #34168

Alpha modules (2.216.0-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.217.0-alpha.0 (2025-09-25)

2.216.0-alpha.0 (2025-09-22)

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

bedrock-alpha: added missing validation when prompt uses default variant (#35366) (cbd271e)

2.214.0-alpha.0 (2025-09-02)

Features

bedrock-alpha: add guardrails l2 construct (#34765) (b4fdb2b)

eks-v2-alpha: support eks with k8s 1.33 (#34713) (c24565e), closes #34520 #34911

s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (2741dfb), closes #33054

2.213.0-alpha.0 (2025-08-27)

Features

s3tables-alpha: add TablePolicy support to L2 construct library (#35223) (a4aad78), closes #33054

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

eks-v2-alpha: fix helm commands not running ecr public login (#35162) (6c2a8b8)

... (truncated)

Commits

6ebe130 chore: update analytics metadata blueprints
b1f7f78 revert(dynamodb): use keyId instead of keyArn for TableV2 replica encryption ...
b0ccf81 feat: update L1 CloudFormation resource definitions (#35567)
d095f68 feat: update L1 CloudFormation resource definitions (#35491)
2a92664 chore(ec2): add r8gn instance classes (#35536)
973d234 fix(rds): cannot use connections in rds.DatabaseInstance.fromLookup (#35193)
8a26869 fix(cloudfront): Function ARN reference changed from GetAtt to Ref (#35547)
761dde2 fix(lambda): function.latestVersion points to wrong ARN (#35546)
43ffcff fix(kms): Alias reference incorrectly resolves to underlying Key (#35545)
44781ef fix(core): negated gitignore patterns inside subdirectories are not including...
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
lerna	[>= 8.a, < 9]
lerna	[>= 7.a, < 8]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…3 updates Bumps the nodejs-other group with 3 updates in the /nodejs directory: [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna), [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) and [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib). Updates `lerna` from 8.1.9 to 9.0.0 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.0/packages/lerna) Updates `@aws-sdk/client-sts` from 3.893.0 to 3.896.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.896.0/clients/client-sts) Updates `aws-cdk-lib` from 2.215.0 to 2.217.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.217.0/packages/aws-cdk-lib) --- updated-dependencies: - dependency-name: lerna dependency-version: 9.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.896.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: aws-cdk-lib dependency-version: 2.217.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other ... Signed-off-by: dependabot[bot] <[email protected]>

…3 updates (open-telemetry#1975) Bumps the nodejs-other group with 3 updates in the /nodejs directory: [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna), [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) and [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib). Updates `lerna` from 8.1.9 to 9.0.0 - [Release notes](https://github.com/lerna/lerna/releases) - [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md) - [Commits](https://github.com/lerna/lerna/commits/v9.0.0/packages/lerna) Updates `@aws-sdk/client-sts` from 3.893.0 to 3.896.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.896.0/clients/client-sts) Updates `aws-cdk-lib` from 2.215.0 to 2.217.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.217.0/packages/aws-cdk-lib) --- updated-dependencies: - dependency-name: lerna dependency-version: 9.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.896.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: aws-cdk-lib dependency-version: 2.217.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 29, 2025

dependabot bot requested a review from a team as a code owner September 29, 2025 15:44

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 29, 2025

wpessers approved these changes Oct 3, 2025

View reviewed changes

wpessers merged commit 1b61020 into main Oct 3, 2025
13 checks passed

wpessers deleted the dependabot/npm_and_yarn/nodejs/nodejs-other-57ab561c47 branch October 3, 2025 13:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the nodejs-other group across 1 directory with 3 updates #1975

build(deps-dev): bump the nodejs-other group across 1 directory with 3 updates #1975

Uh oh!

dependabot bot commented on behalf of github Sep 29, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

build(deps-dev): bump the nodejs-other group across 1 directory with 3 updates #1975

build(deps-dev): bump the nodejs-other group across 1 directory with 3 updates #1975

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 29, 2025

v9.0.0

9.0.0 (2025-09-23)

Bug Fixes

Features

BREAKING CHANGES

v8.2.4

8.2.4 (2025-07-27)

Bug Fixes

Features

9.0.0 (2025-09-23)

Bug Fixes

Features

BREAKING CHANGES

8.2.4 (2025-07-27)

Bug Fixes

8.2.3 (2025-06-29)

Bug Fixes

8.2.2 (2025-04-10)

v3.896.0

3.896.0(2025-09-24)

Chores

Documentation Changes

New Features

Bug Fixes

Tests

v3.895.0

3.895.0(2025-09-23)

Chores

New Features

3.896.0 (2025-09-24)

3.895.0 (2025-09-23)

3.894.0 (2025-09-22)

v2.217.0

Features

Bug Fixes

Reverts

Alpha modules (2.217.0-alpha.0)

v2.216.0

Features

Bug Fixes

Alpha modules (2.216.0-alpha.0)

Changelog

2.217.0-alpha.0 (2025-09-25)

2.216.0-alpha.0 (2025-09-22)

2.215.0-alpha.0 (2025-09-15)

Bug Fixes

2.214.0-alpha.0 (2025-09-02)

Features

2.213.0-alpha.0 (2025-08-27)

Features

2.212.0-alpha.0 (2025-08-20)

2.211.0-alpha.0 (2025-08-12)

2.210.0-alpha.0 (2025-08-06)

Features

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant