feat: manage vended CDK project dependencies with minor-version pinning#1777

Merged

jesseturner21 merged 13 commits into

mainfrom

feat/managed-dependency-pinning

Jul 22, 2026

Commits on Jul 21, 2026

feat: manage vended CDK project dependencies with minor-version pinning
jesseturner21
committed
fix: address review findings — correct install command, non-destructive sync, preview/teardown safety, surfaced warnings, dev notices, failure telemetry
jesseturner21
committed
fix: keep dependency-sync warnings out of postDeployWarnings so informational warnings don't exit 2
jesseturner21
committed
fix: carry depSync on failure returns, restore manifest on install failure, persist dev notice, print warnings on failed deploys, never block teardown
jesseturner21
committed
fix: don't re-print dep-sync notice on failed deploys — onNotice already printed it live
jesseturner21
committed
refactor: rename dep-sync module files and fields per review; add e2e suite
jesseturner21
committed
refactor: address review round 1
jesseturner21
committed
polish: address final review nits
jesseturner21
committed
refactor: replace non-null assertion with ??= when applying planned changes
jesseturner21
committed
refactor: delegate semver parse/compare to node-semver
jesseturner21
committed
refactor: centralize deploy failure returns in fail() helper
jesseturner21
committed
refactor: drop compareVersions pass-through wrapper
jesseturner21
committed
fix: bump transitive deps to clear npm audit high findings
jesseturner21
committed