build(deps-dev): bump the nodejs-other group across 3 directories with 12 updates by dependabot[bot] · Pull Request #2448 · open-telemetry/opentelemetry-lambda

dependabot · 2026-07-13T12:23:28Z

Bumps the nodejs-other group with 11 updates in the /nodejs directory:

Package	From	To
@types/aws-lambda	`8.10.161`	`8.10.162`
eslint	`10.4.1`	`10.7.0`
globals	`17.6.0`	`17.7.0`
typescript	`6.0.3`	`7.0.2`
@types/sinon	`21.0.1`	`22.0.0`
ts-loader	`9.6.0`	`9.6.2`
webpack	`5.107.2`	`5.108.4`
webpack-cli	`7.0.3`	`7.2.1`
@aws-sdk/client-sts	`3.1058.0`	`3.1085.0`
@types/node	`25.9.1`	`26.1.1`
aws-cdk-lib	`2.257.0`	`2.261.0`

Bumps the nodejs-other group with 1 update in the /nodejs/packages/layer directory: @types/sinon.
Bumps the nodejs-other group with 2 updates in the /nodejs/sample-apps/aws-sdk directory: typescript and @types/node.

Updates @types/aws-lambda from 8.10.161 to 8.10.162

Commits

See full diff in compare view

Updates eslint from 10.4.1 to 10.7.0

Release notes

Sourced from eslint's releases.

v10.7.0

Features

cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032) (sethamus)

f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063) (fnx)

557fde8 feat: support computed Number.parseInt member access in radix rule (#21041) (Pixel)

0b4a73b feat: add suggestions to no-compare-neg-zero (#21034) (den$)

96cdd42 feat: report invalid signed numeric radix values in radix rule (#21030) (Pixel)

Bug Fixes

3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069) (Pixel)

0d7d70c fix: insert cause outside wrapping parens in preserve-caught-error (#21062) (Mahin Anowar)

75ec753 fix: handle static template literals in eqeqeq rule (#21058) (Pixel)

b717a22 fix: prevent eqeqeq null option from reporting non-equality operators (#21057) (Pixel)

e35b05f fix: avoid no-invalid-regexp false positive for shadowed RegExp (#21051) (Pixel)

a3172b6 fix: avoid no-control-regex false positive for shadowed RegExp (#21050) (Pixel)

d1f637e fix: parenthesize sequence expression operands in no-implicit-coercion (#21045) (spokodev)

8859baf fix: avoid prefer-numeric-literals false positive for shadowed globals (#21047) (한국)

a9e5961 fix: use-isnan false positive on shadowed NaN/Number (#20958) (sethamus)

8a240a7 fix: avoid false positives in radix rule for spread arguments (#21044) (Pixel)

Documentation

c30d808 docs: Update README (GitHub Actions Bot)

5139800 docs: document ESLint migration codemods in v9 and v10 guides (#20980) (Alex Bit)

04174cb docs: Update README (GitHub Actions Bot)

026e130 docs: update semver policy for bug fixes (#21048) (Milos Djermanovic)

9d42fef docs: Update README (GitHub Actions Bot)

b230159 docs: Update README (GitHub Actions Bot)

0129972 docs: correct **/.js glob to **/*.js in config files guide (#21036) (EduardF1)

Chores

9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076) (renovate[bot])

81a4774 chore: updates for v9.39.5 release (Jenkins)

9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071) (Francesco Trotta)

72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067) (lumir)

833ec10 chore: update dependency prettier to v3.9.4 (#21061) (renovate[bot])

7ea106d chore: update ecosystem plugins (#21059) (ESLint Bot)

8fb550e chore: add prettier update commit to .git-blame-ignore-revs (#21056) (lumir)

e4e1166 chore: update dependency prettier to v3.9.1 (#21055) (renovate[bot])

0493f53 chore: update prettier to v3.9.0 (#21054) (Pixel)

1056a99 chore: update dependency prettier to v3.8.5 (#21049) (renovate[bot])

4d4155d ci: run ecosystem tests on pull requests (#21027) (sethamus)

993539f chore: update dependency @eslint/json to ^2.0.1 (#21042) (renovate[bot])

53f8b69 test: add error locations to no-constant-binary-expression (#21039) (lumir)

5ab71d5 refactor: clean up radix rule internals (#21015) (Pixel)

a80a9a4 chore: update ecosystem plugins (#21035) (ESLint Bot)

7c9a029 ci: add Node.js 26 to CI (#20847) (lumir)

v10.6.0

Features

b1f9106 feat: detect Symbol() and BigInt() in no-constant-binary-expression (#20981) (Taejin Kim)

... (truncated)

Commits

fabd99b 10.7.0
37c5e75 Build: changelog update for 10.7.0
9489379 chore: update dependency @eslint/eslintrc to ^3.3.6 (#21076)
81a4774 chore: updates for v9.39.5 release
3e7bf15 fix: apply ignoreClassesWithImplements to class expressions (#21069)
9835414 chore: enable $ExpectType annotations in all TypeScript files (#21071)
cf2a9bf feat: add errorClassNames option to preserve-caught-error rule (#21032)
c30d808 docs: Update README
f8b873a feat: max-nested-callbacks option for constructor callbacks (#21063)
72adf6b chore: restrict markdownlint-cli2 updates in renovate (#21067)
Additional commits viewable in compare view

Updates globals from 17.6.0 to 17.7.0

Release notes

Sourced from globals's releases.

v17.7.0

Update globals (2026-06-22) (#345) 33b75f9

sindresorhus/globals@v17.6.0...v17.7.0

Commits

a19670c 17.7.0
9611620 Update actions (#346)
33b75f9 Update globals (2026-06-22) (#345)
887dd52 Fix build script (#344)
See full diff in compare view

Updates typescript from 6.0.3 to 7.0.2

Commits

See full diff in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.

Updates typescript-eslint from 8.60.1 to 8.63.0

Release notes

Sourced from typescript-eslint's releases.

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

eslint-plugin: [no-misused-promises] detect async usage of a sync dispose usage (#12426)

🩹 Fixes

eslint-plugin: [method-signature-style] suggest converting readonly function properties instead of emitting invalid syntax (#12447, #12446)

eslint-plugin: [no-unnecessary-type-assertion] handle optional-chained calls to overloaded functions (#12491, #12485)

eslint-plugin: [no-base-to-string] don't flag a shadowed String() call (#12492)

scope-manager: export ClassStaticBlockScope (#12460)

❤️ Thank You

Evyatar Daud @StyleShit

Kristjan @KristjanTammekivi

Michael Naumov @mnaoumov

Serhii Leniv @Serhii-Leniv

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

eslint-plugin: [prefer-optional-chain] use suggestion instead of autofix for trailing binary operator (#12328)

eslint-plugin: [no-unnecessary-boolean-literal-compare] preserve boolean result in fixer for nullable true comparisons (#12365)

eslint-plugin: [no-unnecessary-type-assertion] parenthesize object literal at left edge of expression statement (#12443, #12418)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

mdm317

Patrick Aleite

송재욱

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.63.0 (2026-07-06)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.1 (2026-06-29)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.62.0 (2026-06-22)

🚀 Features

remove redundant package.json "files" (#12444)

❤️ Thank You

Kirk Waiblinger @kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.1 (2026-06-15)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

8.61.0 (2026-06-08)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

Commits

290cf6c chore(release): publish 8.63.0
3ea32f4 chore(release): publish 8.62.1
54e2857 chore(release): publish 8.62.0
81e4c26 feat: remove redundant package.json "files" (#12444)
aaad718 chore(release): publish 8.61.1
16a5b24 chore(release): publish 8.61.0
See full diff in compare view

Updates @types/sinon from 21.0.1 to 22.0.0

Commits

See full diff in compare view

Updates ts-loader from 9.6.0 to 9.6.2

Release notes

Sourced from ts-loader's releases.

v9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

v9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Changelog

Sourced from ts-loader's changelog.

9.6.2

chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micromatch → picomatch - thanks @johnnyreilly

Officially ts-loader has supported 3.6.3+ versions of TypeScript. This change means that certain scenarios with older versions of TS will now certainly fail. If anyone is actually using these versions it would be surprising.

9.6.1

fix: rspack support - thanks @johnnyreilly and @bhollis

Commits

b347bb7 chore: trim runtime dependencies — remove enhanced-resolve/semver, swap micro...
32d82e6 fix: rspack support (#1699)
6bd992e chore: Update GitHub Actions workflow for release
See full diff in compare view

Updates webpack from 5.107.2 to 5.108.4

Release notes

Sourced from webpack's releases.

v5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

v5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

v5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

v5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

v5.108.0

Minor Changes

Treat top-level await and import.meta as ES module markers, matching Node.js syntax detection so no explicit module type is needed. (by @alexander-akait in #21218)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.108.4

Patch Changes

Speed up non-CSS-Modules parsing by not building unused selector AST nodes. (by @alexander-akait in #21324)

Speed up non-CSS-Modules CSS parsing by dropping value tokens nothing reads. (by @alexander-akait in #21324)

Resolve HTML asset URLs against the document <base href>. (by @alexander-akait in #21329)

Add HTML integration tests: generateError output, ignored src, null-char parse. (by @aryanraj45 in #21328)

Reduce CPU and memory overhead of HTML and CSS parsing and code generation. (by @alexander-akait in #21332)

Reduce HTML parser memory and CPU by skipping unused AST nodes. (by @alexander-akait in #21323)

Reduce HTML parser memory by storing the AST in struct-of-arrays form. (by @alexander-akait in #21331)

Key the provided-exports cache on a lazy barrel's still-lazy re-export targets. (by @hai-x in #21326)

Default output.globalObject to globalThis for universal targets. (by @alexander-akait in #21314)

Pass through new URL(...) directory references instead of resolving them. (by @alexander-akait in #21312)

5.108.3

Patch Changes

Speed up CSS parsing and reduce CSS AST node memory. (by @alexander-akait in #21285)

Fix HMR codegen crash for harmony accept with unresolved imports. (by @xiaoxiaojx in #21302)

Match harmony accept dependencies by module reference so HMR codegen handles imports without a module or chunk id. (by @alexander-akait in #21303)

5.108.2

Patch Changes

Fix lazy barrel deferral of ungrouped side-effect imports. (by @hai-x in #21291)

Respect the node: prefix for node.js core modules used as externals. (by @alexander-akait in #21286)

5.108.1

Patch Changes

Fix invalid property access for escaped namespace imports with multi-character mangled export names. (by @xiaoxiaojx in #21280)

Add frames to ProfilingPlugin TracingStartedInBrowser event so the trace loads in Chrome DevTools. (by @alexander-akait in #21269)

... (truncated)

Commits

bb9ccfd chore(release): new release (#21319)
7639066 fix: invalidate provided-exports cache with lazy barrel (#21326)
ae28c54 perf: reduce CPU and memory overhead of the HTML and CSS pipelines (#21332)
e6fb547 perf: re-encode the HTML AST as struct-of-arrays behind a path-based visitor ...
5ce1c22 fix(html): resolve asset URLs against <base href> (#21329)
0e43c4a test(html): cover generateError, ignored-source, and null-character parse pat...
cebd793 refactor: build export-presence guards from a lazy boolean formula (#21320)
c2628cf fix: don't resolve new URL() directory references as modules (#21312)
00d8b2f perf: speed up non-CSS-Modules CSS parsing by skipping unused AST work (#21324)
f7a3f6d perf: reduce HTML parser memory and CPU with parser-level skip options (#21323)
Additional commits viewable in compare view

Updates webpack-cli from 7.0.3 to 7.2.1

Release notes

Sourced from webpack-cli's releases.

webpack-cli@7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

webpack-cli@7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

webpack-cli@7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Changelog

Sourced from webpack-cli's changelog.

7.2.1

Patch Changes

fix: CLIPlugin dynamic import interop under Bun (by @alexander-akait in #4799)

7.2.0

Minor Changes

feat: allow webpack-dev-server v6 as an optional peer dependency (^5.0.0 || ^6.0.0) (by @bjohansebas in #4793)

Support tsx as a fallback loader for TypeScript and JSX configuration files (.ts, .tsx, .cts, .mts and .jsx), used when none of the loaders known to interpret (such as ts-node) are installed. (by @alexander-akait in #4796)

7.1.0

Minor Changes

feat(cli): refresh the --help output using commander's configureHelp API — branded headers, section dividers, colorized terms and a clearer footer. Colors and chrome collapse to plain text when output is piped or --no-color is used, so scripts keep working. (by @alexander-akait in #4779)

feat: support .json5, .yaml/.yml and .toml configuration files by parsing them directly, with the parser package (json5, js-yaml, toml) installed on demand by the user and declared as optional peerDependencies so the parsers resolve correctly under Yarn PnP (by @alexander-akait in #4777)

Commits

71e34db chore(release): new release (#4800)
97c5541 fix: CLIPlugin dynamic import interop under Bun (#4799)
40b631f chore(release): new release (#4794)
f896a9c chore(deps-dev): bump the dependencies group across 1 directory with 4 update...
b4ea5a7 test: update target flag tests for webpack 5.108 (#4797)
9a5fef9 feat: support tsx as a fallback loader for TypeScript and JSX configs (#4796)
6cafa00 chore(deps): bump http-proxy-middleware from 2.0.9 to 2.0.10 (#4795)
3bfa81c docs: update (#4789)
d122911 chore: update webpack-dev-server peer dependency version (#4793)
3cd7423 chore(release): new release (#4778)
Additional commits viewable in compare view

Updates @aws-sdk/client-sts from 3.1058.0 to 3.1085.0

Release notes

Sourced from @aws-sdk/client-sts's releases.

v3.1085.0

3.1085.0(2026-07-10)

New Features

clients: update client endpoints as of 2026-07-10 (dffbeab0)

client-quicksight: Provides CreateKnowledgeBase and UpdateKnowledgeBase APIs (42de5523)

client-inspector2: Support for 3 day and 7 day ECR re-scan durations (4b0b5c86)

client-lambda: Added TelemetryConfig support for Managed Instances Capacity Provider, enabling customers to configure system log level and custom log group for managed instance logging. (63388139)

client-sagemaker: Release support for g4d, c6g, c7g, c8g instance types for SageMaker HyperPod (800976de)

client-ec2: New Amazon EC2 instances. M9g, M9gd, C9g, and C9gd on AWS Graviton5. C8in, M8in, and R8in add 600 Gbps network. C8ib, M8ib, and R8ib add 300 Gbps EBS. C8ine, M8ine, M8idn, R8idn, M8idb, and R8idb round out Intel Xeon 6. Mac-m3ultra with Apple M3 Ultra. G7 with NVIDIA RTX PRO 4500 Blackwell GPUs. (35aaf387)

client-license-manager: Added the ResetUsage field to the CreateLicenseVersion API. When set to true, the entitlement usage counts for the license are reset to 0. If it is false or not specified, entitlement usage is left unchanged. (52f1c9c0)

client-cloudwatch: CloudWatch now assigns a unique identifier to each anomaly detector. PutAnomalyDetector and DescribeAnomalyDetectors return this AnomalyDetectorId, which you can use to describe or delete a specific anomaly detector directly. (36fc0ee5)

For list of updated packages, view updated-packages.md in assets-3.1085.0.zip

v3.1084.0

3.1084.0(2026-07-09)

New Features

client-connect: Amazon Connect - Added DeleteContactData API to support PII deletion of customer endpoint, additional email recipients and email subject. (87f4ae0e)

client-guardduty: Adding "AI Analyst" enum value for detector (20518a4f)

client-synthetics: CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection. (c7379151)

client-ec2: Added support for additional override parameters in CreateFleet, including LaunchTemplateSpecificationUserData, KeyName, IamInstanceProfile, and MetadataOptions. The CreateFleet response now also includes SubnetId, AvailabilityZone, and AvailabilityZoneId for launched instances. (6fcc95d1)

client-ivs: adds support for AWS IVS ad configuration APIs to allow for a postRollConfiguration object on the ad configuration resource (7dd93c48)

Tests

client-kinesis: aggregate HTTP/2 sessions across all endpoint pools (#8181) (84b2b62c)

For list of updated packages, view updated-packages.md in assets-3.1084.0.zip

v3.1083.0

3.1083.0(2026-07-08)

Chores

core/client: remove TypeScript version user-agent metric (#8177) (9d72bc29)

New Features

client-signin: Adds support for OAuth 2.0 token operations in AWS Sign-In, CreateOAuth2TokenWithIAM (client credentials flow), IntrospectOAuth2TokenWithIAM (token inspection), and RevokeOAuth2TokenWithIAM (token revocation). (bc64f6b2)

... (truncated)

Changelog

Sourced from @aws-sdk/client-sts's changelog.

3.1085.0 (2026-07-10)

Note: Version bump only for package @aws-sdk/client-sts

3.1084.0 (2026-07-09)

Note: Version bump only for package @aws-sdk/client-sts

3.1083.0 (2026-07-08)

Note: Version bump only for package @aws-sdk/client-sts

3.1082.0 (2026-07-08)

Note: Version bump only for package @aws-sdk/client-sts

3.1081.0 (2026-07-07)

Note: Version bump only for package @aws-sdk/client-sts

3.1080.0 (2026-07-06)

Note: Version bump only for package @aws-sdk/client-sts

3.1079.0 (2026-07-02)

... (truncated)

Commits

8d0b498 Publish v3.1085.0
c34ce8a Publish v3.1084.0
ceb9aee Publish v3.1083.0
9d72bc2 chore(core/client): remove TypeScript version user-agent metric (#8177)
afc3740 Publish v3.1082.0
f8b4987 chore(codegen): sync for isolatedModules tsconfig and server metrics recorder...
8f43c79 chore(deps): bump '@smithy/core' to ^3.29.1 (#8167)
02d5abf Publish v3.1081.0
be034d9 Publish v3.1080.0
74dc940 Publish v3.1079.0
Additional commits viewable in compare view

Updates @types/node from 25.9.1 to 26.1.1

Commits

See full diff in compare view

Updates aws-cdk-lib from 2.257.0 to 2.261.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.261.0

⚠ BREAKING CHANGES

** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type.

aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName.

Features

update L1 CloudFormation resource definitions (#38189) (5aabd32)

core: add git source metadata to CloudFormation templates (#37368) (765271b)

rds: support native Secrets Manager integration for RDS Cluster and Instance (#35734) (07d5623), closes #29239

Bug Fixes

improve internal path detection (#38205) (6a1934d)

ecr-assets: tarball asset build command not escaped (#38171) (bad8a3a)

print validation errors according to new style (#38166) (031aba8)

Alpha modules (2.261.0-alpha.0)

Features

metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

v2.260.0

Features

update L1 CloudFormation resource definitions (#38151) (f266a47), closes /docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3

core: add external traces to ConstructError (#38131) (e360dd9)

core: append external stack traces to metadata if available (#38124) (c77a08c)

Bug Fixes

bundling: docker build can be skipped if already performed (#38134) (2f9ae95)

core: stack traces contain decorator paths (#38130) (318f645)

core: weak cross-stack references fail for list attributes (#37948) (6bb9d75), closes #37910

lambda-nodejs: reuse posixShellEscape for Docker bundling file operations (#38133) (baa9e1d)

Alpha modules (2.260.0-alpha.0)

v2.259.0

⚠ BREAKING CHANGES

lambda: Runtime.NODEJS_LATEST now resolves to nodejs24.x in every region. Customers who pin to a concrete runtime (Runtime.NODEJS_22_X, useLatestRuntimeVersion: false in aws-lambda-nodejs.NodejsFunction) are unaffected. Existing AWS::Lambda::Function resources synthesized with NODEJS_LATEST will see Runtime: nodejs22.x → Runtime: nodejs24.x on next deploy. Lambda accepts runtime updates in place.

Customer-code compatibility — IMPORTANT: Node.js 24 removes support for callback-style asynchronous handlers ((event, context, callback) => {...}) per the launch blog. Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to async (event, context) => {...} or pin to Runtime.NODEJS_22_X explicitly.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.261.0-alpha.0 (2026-07-02)

Features

metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

…h 12 updates Bumps the nodejs-other group with 11 updates in the /nodejs directory: | Package | From | To | | --- | --- | --- | | [@types/aws-lambda](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/aws-lambda) | `8.10.161` | `8.10.162` | | [eslint](https://github.com/eslint/eslint) | `10.4.1` | `10.7.0` | | [globals](https://github.com/sindresorhus/globals) | `17.6.0` | `17.7.0` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon) | `21.0.1` | `22.0.0` | | [ts-loader](https://github.com/TypeStrong/ts-loader) | `9.6.0` | `9.6.2` | | [webpack](https://github.com/webpack/webpack) | `5.107.2` | `5.108.4` | | [webpack-cli](https://github.com/webpack/webpack-cli) | `7.0.3` | `7.2.1` | | [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) | `3.1058.0` | `3.1085.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.1` | `26.1.1` | | [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.257.0` | `2.261.0` | Bumps the nodejs-other group with 1 update in the /nodejs/packages/layer directory: [@types/sinon](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/sinon). Bumps the nodejs-other group with 2 updates in the /nodejs/sample-apps/aws-sdk directory: [typescript](https://github.com/microsoft/TypeScript) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@types/aws-lambda` from 8.10.161 to 8.10.162 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/aws-lambda) Updates `eslint` from 10.4.1 to 10.7.0 - [Release notes](https://github.com/eslint/eslint/releases) - [Commits](eslint/eslint@v10.4.1...v10.7.0) Updates `globals` from 17.6.0 to 17.7.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v17.6.0...v17.7.0) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `typescript-eslint` from 8.60.1 to 8.63.0 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.63.0/packages/typescript-eslint) Updates `@types/sinon` from 21.0.1 to 22.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `ts-loader` from 9.6.0 to 9.6.2 - [Release notes](https://github.com/TypeStrong/ts-loader/releases) - [Changelog](https://github.com/TypeStrong/ts-loader/blob/main/CHANGELOG.md) - [Commits](TypeStrong/ts-loader@v9.6.0...v9.6.2) Updates `webpack` from 5.107.2 to 5.108.4 - [Release notes](https://github.com/webpack/webpack/releases) - [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md) - [Commits](webpack/webpack@v5.107.2...v5.108.4) Updates `webpack-cli` from 7.0.3 to 7.2.1 - [Release notes](https://github.com/webpack/webpack-cli/releases) - [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md) - [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@7.0.3...webpack-cli@7.2.1) Updates `@aws-sdk/client-sts` from 3.1058.0 to 3.1085.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1085.0/clients/client-sts) Updates `@types/node` from 25.9.1 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `aws-cdk-lib` from 2.257.0 to 2.261.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.261.0/packages/aws-cdk-lib) Updates `@types/sinon` from 21.0.1 to 22.0.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/sinon) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `@types/node` from 25.9.1 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/aws-lambda" dependency-version: 8.10.162 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs-other - dependency-name: eslint dependency-version: 10.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: globals dependency-version: 17.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: typescript-eslint dependency-version: 8.63.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: "@types/sinon" dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: ts-loader dependency-version: 9.6.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: nodejs-other - dependency-name: webpack dependency-version: 5.108.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: webpack-cli dependency-version: 7.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.1085.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: aws-cdk-lib dependency-version: 2.261.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: nodejs-other - dependency-name: "@types/sinon" dependency-version: 22.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: nodejs-other ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-13T21:15:24Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 13, 2026

dependabot Bot requested a review from a team as a code owner July 13, 2026 12:23

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 13, 2026

wpessers closed this Jul 13, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/nodejs/nodejs-other-3120a7e73d branch July 13, 2026 21:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps-dev): bump the nodejs-other group across 3 directories with 12 updates#2448

build(deps-dev): bump the nodejs-other group across 3 directories with 12 updates#2448
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nodejs/nodejs-other-3120a7e73d

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

dependabot Bot commented on behalf of github Jul 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 13, 2026

v10.7.0

Features

Bug Fixes

Documentation

Chores

v10.6.0

Features

v17.7.0

v8.63.0

8.63.0 (2026-07-06)

🚀 Features

🩹 Fixes

❤️ Thank You

v8.62.1

8.62.1 (2026-06-29)

🩹 Fixes

❤️ Thank You

v8.62.0

8.62.0 (2026-06-22)

🚀 Features

8.63.0 (2026-07-06)

8.62.1 (2026-06-29)

8.62.0 (2026-06-22)

🚀 Features

❤️ Thank You

8.61.1 (2026-06-15)

8.61.0 (2026-06-08)

v9.6.2

v9.6.1

9.6.2

9.6.1

v5.108.4

Patch Changes

v5.108.3

Patch Changes

v5.108.2

Patch Changes

v5.108.1

Patch Changes

v5.108.0

Minor Changes

5.108.4

Patch Changes

5.108.3

Patch Changes

5.108.2

Patch Changes

5.108.1

Patch Changes

webpack-cli@7.2.1

Patch Changes

webpack-cli@7.2.0

Minor Changes

webpack-cli@7.1.0

Minor Changes

7.2.1

Patch Changes

7.2.0

Minor Changes

7.1.0

Minor Changes

v3.1085.0

3.1085.0(2026-07-10)

New Features

v3.1084.0

3.1084.0(2026-07-09)

New Features

Tests

v3.1083.0

3.1083.0(2026-07-08)

Chores

New Features

3.1085.0 (2026-07-10)

3.1084.0 (2026-07-09)

3.1083.0 (2026-07-08)

3.1082.0 (2026-07-08)

3.1081.0 (2026-07-07)