Skip to content

chore(deps): bump the all-minor-patch group across 1 directory with 17 updates - #224

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-bun-main-all-minor-patch-6abf88c157
Open

chore(deps): bump the all-minor-patch group across 1 directory with 17 updates#224
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot-bun-main-all-minor-patch-6abf88c157

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the all-minor-patch group with 17 updates in the / directory:

Package From To
@aws-sdk/client-bedrock-runtime 3.1021.0 3.1057.0
@aws-sdk/client-cloudwatch-logs 3.1021.0 3.1057.0
@aws-sdk/client-ecs 3.1021.0 3.1057.0
@aws-sdk/client-s3 3.1021.0 3.1057.0
@aws-sdk/credential-provider-node 3.972.29 3.972.47
@aws-sdk/credential-providers 3.1021.0 3.1057.0
axios 1.14.0 1.16.1
dayjs 1.11.20 1.11.21
dotenv 17.3.1 17.4.2
express-rate-limit 8.3.2 8.5.2
helmet 8.1.0 8.2.0
yaml 2.8.3 2.9.0
@aws-sdk/types 3.973.6 3.973.9
@types/bun 1.3.11 1.3.14
@typescript-eslint/eslint-plugin 8.58.0 8.60.0
@typescript-eslint/parser 8.58.0 8.60.0
prettier 3.8.1 3.8.3

Updates @aws-sdk/client-bedrock-runtime from 3.1021.0 to 3.1057.0

Release notes

Sourced from @​aws-sdk/client-bedrock-runtime's releases.

v3.1057.0

3.1057.0(2026-05-29)

Bug Fixes
  • client-rds-data:
    • ArrayValue member element types are now nullable: booleanValues is (boolean | null)[], longValues and doubleValues are (number | null)[], stringValues is (string | null)[], and arrayValues is (ArrayValue | null)[]. This reflects that SQL array responses can contain NULL elements. Existing TypeScript code that reads elements as non-nullable values won't compile; migrate by changing the target type to nullable, using the nullish coalescing operator ?? to supply a default, or using .filter(v => v !== null). (43e8abc9)
Chores
  • codegen:
New Features
  • clients: update client endpoints as of 2026-05-29 (100e59e3)
  • client-codeguru-security: Adding new BDD representation of endpoint ruleset (b5e79600)
  • client-auto-scaling-plans: Adding new BDD representation of endpoint ruleset (be4de620)
  • client-connect-contact-lens: Adding new BDD representation of endpoint ruleset (5356eaf4)
  • client-connectcampaignsv2: Adding new BDD representation of endpoint ruleset (610e00f6)
  • client-cloudsearch: Adding new BDD representation of endpoint ruleset (954a5629)
  • client-account: Adding new BDD representation of endpoint ruleset (043ec31b)
  • client-directory-service-data: Adding new BDD representation of endpoint ruleset (a4c4696b)
  • client-bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. (dc971ce1)
  • client-lex-models-v2: Adding new BDD representation of endpoint ruleset (46879a2b)
  • client-application-insights: Adding new BDD representation of endpoint ruleset (8188d14a)
  • client-quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. (62d39a81)
  • client-bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets. (ac8eac96)
  • client-codecatalyst: Adding new BDD representation of endpoint ruleset (5d0951a1)
  • client-grafana: Adding new BDD representation of endpoint ruleset (a0c1dbf4)
  • client-drs: Adding new BDD representation of endpoint ruleset (af7bbc33)
  • client-cloudsearch-domain: Adding new BDD representation of endpoint ruleset (84e5f9f0)
  • client-networkflowmonitor: Adding new BDD representation of endpoint ruleset (2571d33c)
  • client-mailmanager: Adding new BDD representation of endpoint ruleset (89075b5d)
  • client-route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. (a5c6d722)
  • client-pcs: Adding new BDD representation of endpoint ruleset (eec245d2)
  • client-inspector-scan: Adding new BDD representation of endpoint ruleset (f4eb5511)
  • client-sesv2: This release introduces support for Tenant Suppression Lists (3de2020c)
  • client-chime: Adding new BDD representation of endpoint ruleset (f8e2cde5)
  • client-proton: Adding new BDD representation of endpoint ruleset (937b25e0)
  • client-lex-runtime-v2: Adding new BDD representation of endpoint ruleset (2e4709c6)
  • client-ssm-guiconnect: Adding new BDD representation of endpoint ruleset (e5c019d3)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-runtime's changelog.

3.1057.0 (2026-05-29)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1056.0 (2026-05-28)

Features

  • client-bedrock-runtime: Support system role in message (51ddbc0)

3.1055.0 (2026-05-27)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1054.0 (2026-05-26)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1053.0 (2026-05-22)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1052.0 (2026-05-21)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

... (truncated)

Commits

Updates @aws-sdk/client-cloudwatch-logs from 3.1021.0 to 3.1057.0

Release notes

Sourced from @​aws-sdk/client-cloudwatch-logs's releases.

v3.1057.0

3.1057.0(2026-05-29)

Bug Fixes
  • client-rds-data:
    • ArrayValue member element types are now nullable: booleanValues is (boolean | null)[], longValues and doubleValues are (number | null)[], stringValues is (string | null)[], and arrayValues is (ArrayValue | null)[]. This reflects that SQL array responses can contain NULL elements. Existing TypeScript code that reads elements as non-nullable values won't compile; migrate by changing the target type to nullable, using the nullish coalescing operator ?? to supply a default, or using .filter(v => v !== null). (43e8abc9)
Chores
  • codegen:
New Features
  • clients: update client endpoints as of 2026-05-29 (100e59e3)
  • client-codeguru-security: Adding new BDD representation of endpoint ruleset (b5e79600)
  • client-auto-scaling-plans: Adding new BDD representation of endpoint ruleset (be4de620)
  • client-connect-contact-lens: Adding new BDD representation of endpoint ruleset (5356eaf4)
  • client-connectcampaignsv2: Adding new BDD representation of endpoint ruleset (610e00f6)
  • client-cloudsearch: Adding new BDD representation of endpoint ruleset (954a5629)
  • client-account: Adding new BDD representation of endpoint ruleset (043ec31b)
  • client-directory-service-data: Adding new BDD representation of endpoint ruleset (a4c4696b)
  • client-bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. (dc971ce1)
  • client-lex-models-v2: Adding new BDD representation of endpoint ruleset (46879a2b)
  • client-application-insights: Adding new BDD representation of endpoint ruleset (8188d14a)
  • client-quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. (62d39a81)
  • client-bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets. (ac8eac96)
  • client-codecatalyst: Adding new BDD representation of endpoint ruleset (5d0951a1)
  • client-grafana: Adding new BDD representation of endpoint ruleset (a0c1dbf4)
  • client-drs: Adding new BDD representation of endpoint ruleset (af7bbc33)
  • client-cloudsearch-domain: Adding new BDD representation of endpoint ruleset (84e5f9f0)
  • client-networkflowmonitor: Adding new BDD representation of endpoint ruleset (2571d33c)
  • client-mailmanager: Adding new BDD representation of endpoint ruleset (89075b5d)
  • client-route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. (a5c6d722)
  • client-pcs: Adding new BDD representation of endpoint ruleset (eec245d2)
  • client-inspector-scan: Adding new BDD representation of endpoint ruleset (f4eb5511)
  • client-sesv2: This release introduces support for Tenant Suppression Lists (3de2020c)
  • client-chime: Adding new BDD representation of endpoint ruleset (f8e2cde5)
  • client-proton: Adding new BDD representation of endpoint ruleset (937b25e0)
  • client-lex-runtime-v2: Adding new BDD representation of endpoint ruleset (2e4709c6)
  • client-ssm-guiconnect: Adding new BDD representation of endpoint ruleset (e5c019d3)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-cloudwatch-logs's changelog.

3.1057.0 (2026-05-29)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1056.0 (2026-05-28)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1055.0 (2026-05-27)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1054.0 (2026-05-26)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1053.0 (2026-05-22)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1052.0 (2026-05-21)

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

3.1051.0 (2026-05-20)

... (truncated)

Commits

Updates @aws-sdk/client-ecs from 3.1021.0 to 3.1057.0

Release notes

Sourced from @​aws-sdk/client-ecs's releases.

v3.1057.0

3.1057.0(2026-05-29)

Bug Fixes
  • client-rds-data:
    • ArrayValue member element types are now nullable: booleanValues is (boolean | null)[], longValues and doubleValues are (number | null)[], stringValues is (string | null)[], and arrayValues is (ArrayValue | null)[]. This reflects that SQL array responses can contain NULL elements. Existing TypeScript code that reads elements as non-nullable values won't compile; migrate by changing the target type to nullable, using the nullish coalescing operator ?? to supply a default, or using .filter(v => v !== null). (43e8abc9)
Chores
  • codegen:
New Features
  • clients: update client endpoints as of 2026-05-29 (100e59e3)
  • client-codeguru-security: Adding new BDD representation of endpoint ruleset (b5e79600)
  • client-auto-scaling-plans: Adding new BDD representation of endpoint ruleset (be4de620)
  • client-connect-contact-lens: Adding new BDD representation of endpoint ruleset (5356eaf4)
  • client-connectcampaignsv2: Adding new BDD representation of endpoint ruleset (610e00f6)
  • client-cloudsearch: Adding new BDD representation of endpoint ruleset (954a5629)
  • client-account: Adding new BDD representation of endpoint ruleset (043ec31b)
  • client-directory-service-data: Adding new BDD representation of endpoint ruleset (a4c4696b)
  • client-bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. (dc971ce1)
  • client-lex-models-v2: Adding new BDD representation of endpoint ruleset (46879a2b)
  • client-application-insights: Adding new BDD representation of endpoint ruleset (8188d14a)
  • client-quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. (62d39a81)
  • client-bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets. (ac8eac96)
  • client-codecatalyst: Adding new BDD representation of endpoint ruleset (5d0951a1)
  • client-grafana: Adding new BDD representation of endpoint ruleset (a0c1dbf4)
  • client-drs: Adding new BDD representation of endpoint ruleset (af7bbc33)
  • client-cloudsearch-domain: Adding new BDD representation of endpoint ruleset (84e5f9f0)
  • client-networkflowmonitor: Adding new BDD representation of endpoint ruleset (2571d33c)
  • client-mailmanager: Adding new BDD representation of endpoint ruleset (89075b5d)
  • client-route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. (a5c6d722)
  • client-pcs: Adding new BDD representation of endpoint ruleset (eec245d2)
  • client-inspector-scan: Adding new BDD representation of endpoint ruleset (f4eb5511)
  • client-sesv2: This release introduces support for Tenant Suppression Lists (3de2020c)
  • client-chime: Adding new BDD representation of endpoint ruleset (f8e2cde5)
  • client-proton: Adding new BDD representation of endpoint ruleset (937b25e0)
  • client-lex-runtime-v2: Adding new BDD representation of endpoint ruleset (2e4709c6)
  • client-ssm-guiconnect: Adding new BDD representation of endpoint ruleset (e5c019d3)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ecs's changelog.

3.1057.0 (2026-05-29)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1056.0 (2026-05-28)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1055.0 (2026-05-27)

Features

  • client-ecs: Add support for Neuron device resource requirements for Amazon ECS (aef0e10)

3.1054.0 (2026-05-26)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1053.0 (2026-05-22)

Note: Version bump only for package @​aws-sdk/client-ecs

3.1052.0 (2026-05-21)

Note: Version bump only for package @​aws-sdk/client-ecs

... (truncated)

Commits

Updates @aws-sdk/client-s3 from 3.1021.0 to 3.1057.0

Release notes

Sourced from @​aws-sdk/client-s3's releases.

v3.1057.0

3.1057.0(2026-05-29)

Bug Fixes
  • client-rds-data:
    • ArrayValue member element types are now nullable: booleanValues is (boolean | null)[], longValues and doubleValues are (number | null)[], stringValues is (string | null)[], and arrayValues is (ArrayValue | null)[]. This reflects that SQL array responses can contain NULL elements. Existing TypeScript code that reads elements as non-nullable values won't compile; migrate by changing the target type to nullable, using the nullish coalescing operator ?? to supply a default, or using .filter(v => v !== null). (43e8abc9)
Chores
  • codegen:
New Features
  • clients: update client endpoints as of 2026-05-29 (100e59e3)
  • client-codeguru-security: Adding new BDD representation of endpoint ruleset (b5e79600)
  • client-auto-scaling-plans: Adding new BDD representation of endpoint ruleset (be4de620)
  • client-connect-contact-lens: Adding new BDD representation of endpoint ruleset (5356eaf4)
  • client-connectcampaignsv2: Adding new BDD representation of endpoint ruleset (610e00f6)
  • client-cloudsearch: Adding new BDD representation of endpoint ruleset (954a5629)
  • client-account: Adding new BDD representation of endpoint ruleset (043ec31b)
  • client-directory-service-data: Adding new BDD representation of endpoint ruleset (a4c4696b)
  • client-bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. (dc971ce1)
  • client-lex-models-v2: Adding new BDD representation of endpoint ruleset (46879a2b)
  • client-application-insights: Adding new BDD representation of endpoint ruleset (8188d14a)
  • client-quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. (62d39a81)
  • client-bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets. (ac8eac96)
  • client-codecatalyst: Adding new BDD representation of endpoint ruleset (5d0951a1)
  • client-grafana: Adding new BDD representation of endpoint ruleset (a0c1dbf4)
  • client-drs: Adding new BDD representation of endpoint ruleset (af7bbc33)
  • client-cloudsearch-domain: Adding new BDD representation of endpoint ruleset (84e5f9f0)
  • client-networkflowmonitor: Adding new BDD representation of endpoint ruleset (2571d33c)
  • client-mailmanager: Adding new BDD representation of endpoint ruleset (89075b5d)
  • client-route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. (a5c6d722)
  • client-pcs: Adding new BDD representation of endpoint ruleset (eec245d2)
  • client-inspector-scan: Adding new BDD representation of endpoint ruleset (f4eb5511)
  • client-sesv2: This release introduces support for Tenant Suppression Lists (3de2020c)
  • client-chime: Adding new BDD representation of endpoint ruleset (f8e2cde5)
  • client-proton: Adding new BDD representation of endpoint ruleset (937b25e0)
  • client-lex-runtime-v2: Adding new BDD representation of endpoint ruleset (2e4709c6)
  • client-ssm-guiconnect: Adding new BDD representation of endpoint ruleset (e5c019d3)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-s3's changelog.

3.1057.0 (2026-05-29)

Note: Version bump only for package @​aws-sdk/client-s3

3.1056.0 (2026-05-28)

Note: Version bump only for package @​aws-sdk/client-s3

3.1055.0 (2026-05-27)

Note: Version bump only for package @​aws-sdk/client-s3

3.1054.0 (2026-05-26)

Note: Version bump only for package @​aws-sdk/client-s3

3.1053.0 (2026-05-22)

Note: Version bump only for package @​aws-sdk/client-s3

3.1052.0 (2026-05-21)

Note: Version bump only for package @​aws-sdk/client-s3

3.1051.0 (2026-05-20)

... (truncated)

Commits

Updates @aws-sdk/credential-provider-node from 3.972.29 to 3.972.47

Changelog

Sourced from @​aws-sdk/credential-provider-node's changelog.

3.972.47 (2026-05-29)

Chores

  • codegen: smithy-aws-typescript-codegen 0.50.0 (#8056) (050bee1)

3.972.46 (2026-05-27)

Chores

  • codegen: sync for cyclic file dependency fixes (#8051) (7ae617c)

3.972.45 (2026-05-26)

Chores

  • credential-provider-node: update dependencies.

3.972.44 (2026-05-20)

Chores

3.972.43 (2026-05-18)

Chores

  • credential-provider-node: update dependencies.

3.972.42 (2026-05-14)

Chores

3.972.41 (2026-05-14)

Chores

  • credential-provider-node: update dependencies.

3.972.40 (2026-05-12)

Chores

3.972.39 (2026-05-01)

... (truncated)

Commits

Updates @aws-sdk/credential-providers from 3.1021.0 to 3.1057.0

Release notes

Sourced from @​aws-sdk/credential-providers's releases.

v3.1057.0

3.1057.0(2026-05-29)

Bug Fixes
  • client-rds-data:
    • ArrayValue member element types are now nullable: booleanValues is (boolean | null)[], longValues and doubleValues are (number | null)[], stringValues is (string | null)[], and arrayValues is (ArrayValue | null)[]. This reflects that SQL array responses can contain NULL elements. Existing TypeScript code that reads elements as non-nullable values won't compile; migrate by changing the target type to nullable, using the nullish coalescing operator ?? to supply a default, or using .filter(v => v !== null). (43e8abc9)
Chores
  • codegen:
New Features
  • clients: update client endpoints as of 2026-05-29 (100e59e3)
  • client-codeguru-security: Adding new BDD representation of endpoint ruleset (b5e79600)
  • client-auto-scaling-plans: Adding new BDD representation of endpoint ruleset (be4de620)
  • client-connect-contact-lens: Adding new BDD representation of endpoint ruleset (5356eaf4)
  • client-connectcampaignsv2: Adding new BDD representation of endpoint ruleset (610e00f6)
  • client-cloudsearch: Adding new BDD representation of endpoint ruleset (954a5629)
  • client-account: Adding new BDD representation of endpoint ruleset (043ec31b)
  • client-directory-service-data: Adding new BDD representation of endpoint ruleset (a4c4696b)
  • client-bedrock: Automated Reasoning checks - Added two build workflows for policies. Iterative Refine Policy uses AI to update policy definitions based on test results and feedback. Resolve Policy Ambiguities consolidates ambiguous variables in Automated Reasoning policies, a common source of ambiguous validation. (dc971ce1)
  • client-lex-models-v2: Adding new BDD representation of endpoint ruleset (46879a2b)
  • client-application-insights: Adding new BDD representation of endpoint ruleset (8188d14a)
  • client-quicksight: Adds support for creating, updating, describing, listing, and deleting an OAuthClientApplication resource, a new quicksight resource that allows customers to store OAuth configurations to connect to their databases via 3 Legged OAuth. (62d39a81)
  • client-bedrock-agentcore-control: Reference your own AWS Secrets Manager secrets when configuring credential providers, giving you control over encryption, rotation, and access policies instead of using service-managed secrets. (ac8eac96)
  • client-codecatalyst: Adding new BDD representation of endpoint ruleset (5d0951a1)
  • client-grafana: Adding new BDD representation of endpoint ruleset (a0c1dbf4)
  • client-drs: Adding new BDD representation of endpoint ruleset (af7bbc33)
  • client-cloudsearch-domain: Adding new BDD representation of endpoint ruleset (84e5f9f0)
  • client-networkflowmonitor: Adding new BDD representation of endpoint ruleset (2571d33c)
  • client-mailmanager: Adding new BDD representation of endpoint ruleset (89075b5d)
  • client-route53resolver: Added BatchCreateFirewallRule, BatchUpdateFirewallRule, BatchDeleteFirewallRule, and ListFirewallRuleTypes APIs. Added FirewallRuleType support to Firewall Rule APIs. (a5c6d722)
  • client-pcs: Adding new BDD representation of endpoint ruleset (eec245d2)
  • client-inspector-scan: Adding new BDD representation of endpoint ruleset (f4eb5511)
  • client-sesv2: This release introduces support for Tenant Suppression Lists (3de2020c)
  • client-chime: Adding new BDD representation of endpoint ruleset (f8e2cde5)
  • client-proton: Adding new BDD representation of endpoint ruleset (937b25e0)
  • client-lex-runtime-v2: Adding new BDD representation of endpoint ruleset (2e4709c6)
  • client-ssm-guiconnect: Adding new BDD representation of endpoint ruleset (e5c019d3)

... (truncated)

Changelog

Sourced from @​aws-sdk/credential-providers's changelog.

3.1057.0 (2026-05-29)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1056.0 (2026-05-28)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1055.0 (2026-05-27)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1054.0 (2026-05-26)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1053.0 (2026-05-22)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1052.0 (2026-05-21)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1051.0 (2026-05-20)

... (truncated)

Commits

Updates axios from 1.14.0 to 1.16.1

Release notes

Sourced from axios's releases.

v1.16.1 — May 13, 2026

This release ships a defence-in-depth fix for prototype pollution in formDataToJSON, hardens proxy and CI workflows, restores Webpack 4 compatibility for the fetch adapter, and includes several small bug fixes and maintenance improvements.

🔒 Security Fixes

  • Prototype Pollution Defence-in-Depth: Hardened formDataToJSON against already-polluted Object.prototypeDescription has been truncated

@dependabot
chore(deps): bump the all-minor-patch group across 1 directory with 1…
0c75572 
…7 updates

Bumps the all-minor-patch group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-bedrock-runtime](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-bedrock-runtime) | `3.1021.0` | `3.1057.0` |
| [@aws-sdk/client-cloudwatch-logs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cloudwatch-logs) | `3.1021.0` | `3.1057.0` |
| [@aws-sdk/client-ecs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ecs) | `3.1021.0` | `3.1057.0` |
| [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1021.0` | `3.1057.0` |
| [@aws-sdk/credential-provider-node](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-node) | `3.972.29` | `3.972.47` |
| [@aws-sdk/credential-providers](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-providers) | `3.1021.0` | `3.1057.0` |
| [axios](https://github.com/axios/axios) | `1.14.0` | `1.16.1` |
| [dayjs](https://github.com/iamkun/dayjs) | `1.11.20` | `1.11.21` |
| [dotenv](https://github.com/motdotla/dotenv) | `17.3.1` | `17.4.2` |
| [express-rate-limit](https://github.com/express-rate-limit/express-rate-limit) | `8.3.2` | `8.5.2` |
| [helmet](https://github.com/helmetjs/helmet) | `8.1.0` | `8.2.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.8.3` | `2.9.0` |
| [@aws-sdk/types](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/types) | `3.973.6` | `3.973.9` |
| [@types/bun](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/bun) | `1.3.11` | `1.3.14` |
| [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) | `8.58.0` | `8.60.0` |
| [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) | `8.58.0` | `8.60.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.1` | `3.8.3` |



Updates `@aws-sdk/client-bedrock-runtime` from 3.1021.0 to 3.1057.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-bedrock-runtime/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1057.0/clients/client-bedrock-runtime)

Updates `@aws-sdk/client-cloudwatch-logs` from 3.1021.0 to 3.1057.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cloudwatch-logs/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1057.0/clients/client-cloudwatch-logs)

Updates `@aws-sdk/client-ecs` from 3.1021.0 to 3.1057.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ecs/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1057.0/clients/client-ecs)

Updates `@aws-sdk/client-s3` from 3.1021.0 to 3.1057.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1057.0/clients/client-s3)

Updates `@aws-sdk/credential-provider-node` from 3.972.29 to 3.972.47
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-node/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-node)

Updates `@aws-sdk/credential-providers` from 3.1021.0 to 3.1057.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-providers/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1057.0/packages/credential-providers)

Updates `axios` from 1.14.0 to 1.16.1
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.14.0...v1.16.1)

Updates `dayjs` from 1.11.20 to 1.11.21
- [Release notes](https://github.com/iamkun/dayjs/releases)
- [Changelog](https://github.com/iamkun/dayjs/blob/dev/CHANGELOG.md)
- [Commits](iamkun/dayjs@v1.11.20...v1.11.21)

Updates `dotenv` from 17.3.1 to 17.4.2
- [Changelog](https://github.com/motdotla/dotenv/blob/master/CHANGELOG.md)
- [Commits](motdotla/dotenv@v17.3.1...v17.4.2)

Updates `express-rate-limit` from 8.3.2 to 8.5.2
- [Release notes](https://github.com/express-rate-limit/express-rate-limit/releases)
- [Commits](express-rate-limit/express-rate-limit@v8.3.2...v8.5.2)

Updates `helmet` from 8.1.0 to 8.2.0
- [Changelog](https://github.com/helmetjs/helmet/blob/main/CHANGELOG.md)
- [Commits](helmetjs/helmet@v8.1.0...v8.2.0)

Updates `yaml` from 2.8.3 to 2.9.0
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.8.3...v2.9.0)

Updates `@aws-sdk/types` from 3.973.6 to 3.973.9
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/types/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/types)

Updates `@types/bun` from 1.3.11 to 1.3.14
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/bun)

Updates `@typescript-eslint/eslint-plugin` from 8.58.0 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.58.0 to 8.60.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.60.0/packages/parser)

Updates `prettier` from 3.8.1 to 3.8.3
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.1...3.8.3)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-bedrock-runtime"
  dependency-version: 3.1057.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/client-cloudwatch-logs"
  dependency-version: 3.1057.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/client-ecs"
  dependency-version: 3.1057.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/client-s3"
  dependency-version: 3.1057.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/credential-provider-node"
  dependency-version: 3.972.47
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/credential-providers"
  dependency-version: 3.1057.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: axios
  dependency-version: 1.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: dayjs
  dependency-version: 1.11.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-minor-patch
- dependency-name: dotenv
  dependency-version: 17.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: express-rate-limit
  dependency-version: 8.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: helmet
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: yaml
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@aws-sdk/types"
  dependency-version: 3.973.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-patch
- dependency-name: "@types/bun"
  dependency-version: 1.3.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-patch
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-version: 8.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: "@typescript-eslint/parser"
  dependency-version: 8.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-minor-patch
- dependency-name: prettier
  dependency-version: 3.8.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-minor-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 31, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) May 31, 2026 23:11
@chrisleekr

chrisleekr commented Jul 18, 2026

Copy link
Copy Markdown
Owner

@chrisleekr-bot review

@chrisleekr

chrisleekr commented Jul 18, 2026 •
edited
Loading

Copy link
Copy Markdown
Owner

bot workflow review, succeeded

🔍 Code review complete, 2 files, +110/-218.

Summary

Dependabot bumps 17 minor/patch dependencies (AWS SDK v3 client/credential set, axios 1.14.0→1.16.1, dayjs, dotenv, express-rate-limit, helmet, yaml, @aws-sdk/types, @types/bun, @typescript-eslint/{eslint-plugin,parser} 8.58.0→8.60.0, prettier 3.8.1→3.8.3). Only package.json and bun.lock change. Locally reproduced: typecheck, prettier --check, and bun test (19/19 pass) all succeed, but bun run lint fails with 4 @typescript-eslint/no-unnecessary-type-assertion errors and the required GitHub Lint & Test check is already red — so the bump regresses CI without a follow-up lint-fix commit. Once the four auto-fixable assertions are removed, the group is safe to merge; no behavioural surprises from axios (no formDataToJSON/Object.setPrototypeOf usage), helmet, express-rate-limit, dayjs, dotenv, yaml, or the AWS SDK upgrades in this repo's call sites.

What was checked

  • git diff origin/main...HEAD --stat: only package.json (+17/-17) and bun.lock (+93/-201) modified; source tree untouched.
  • Read package.json in full and confirmed every dependency delta corresponds to a Dependabot entry.
  • Cross-referenced every bumped runtime library against source usage:
    • axios → src/core/server/auth/services/providers/auth0.ts (POST/GET, no form-data, so the 1.16.1 prototype-pollution defence-in-depth fix is not user-visible here).
    • dayjs → src/utils/date.ts (utc + timezone plugins, .format('YYYY-MM-DDTHH:mm:ssZ'), unaffected by 1.11.20→1.11.21 patch).
    • dotenv → src/index.ts (import 'dotenv/config'), no dotenv.config({...}) options touched by 17.4.x.
    • express-rate-limit → src/core/server/http/middleware.ts:87 uses windowMs, max, standardHeaders, legacyHeaders, skip. max remains a supported alias for limit in v8; 8.5.2 introduces no new required config.
    • helmet → src/core/server/http/middleware.ts:82 calls helmet() with defaults; 8.2.0 keeps the same default surface.
    • yaml → src/tools/aws/ecs/index.ts only uses yaml.stringify(...); 2.9.0 stringify signature is compatible.
    • AWS SDK v3 (bedrock-runtime, cloudwatch-logs, ecs, s3, credential-providers, credential-provider-node, types) → imports in src/libraries/aws/*.ts and src/tools/aws/** are all type-only or use stable factory/command APIs; changelogs 3.1021→3.1057 are additive endpoint/BDD updates plus the client-rds-data ArrayValue nullability change, which this repo does not consume.
  • @typescript-eslint/{eslint-plugin,parser} 8.60.0 changelog — checked that no-unnecessary-type-assertion is the affected rule.
  • Ran bun install (fresh lock) → bun run typecheck (clean) → bun run format (clean) → bun test (19 pass, 0 fail) → bun run lint (4 errors, see finding) → bun run lint:fix (all 4 fixed, diff trivial, reverted locally).
  • mcp__github_state__get_pr_state_check_rollup on head 0c75572 → required Lint & Test check is FAILURE; matches the local reproduction.

Findings

  • [blocker] package.json:100-101 — @typescript-eslint 8.60.0 breaks the required Lint & Test CI check. The bump tightens no-unnecessary-type-assertion, flagging 4 pre-existing casts (src/config/manager.ts:140,141,143, src/core/server/http/context.ts:119) that were passing under 8.58.0. Since the PR does not touch source, CI is regressed by dependencies alone. All 4 are auto-fixed by bun run lint:fix. Recommended fix: push a follow-up commit on the branch running bun run lint:fix to drop the redundant assertions, then let CI re-run. Posted inline on package.json:101.

Reasoning

  • No axios security exposure in this repo. The 1.16.1 defence-in-depth patch hardens formDataToJSON against prototype-polluted Object.prototype. grep for formDataToJSON/form-data returns nothing, and the only axios call sites (auth0.ts axios.post with JSON bodies, axios.get for userinfo) never feed FormData through axios' response transformer, so the fix is defense-in-depth rather than a directly required patch here. Still worth taking, no downside.
  • express-rate-limit max option not a regression. max was renamed to limit in v7 and remains a supported alias; 8.5.2 does not remove it. No action needed for the existing max: 100 call site.
  • AWS SDK v3 client-rds-data ArrayValue nullability change is called out in the changelog but this repo doesn't depend on client-rds-data, so the breaking TS change doesn't touch call sites.
  • .env.example vs .env check skipped: no .env file exists in the workspace (only .env.example), which is normal for dependency-bump PRs run against a clean tree.
  • Why the finding is a blocker, not a minor: the failing check is the required one on this repo's branch protection, so the PR literally cannot merge in its current state, even though the failure is trivial to fix. I did not push the lint-fix commit myself because that's a code change outside the scope of a dependabot review — leaving it to the maintainer.

cost: $4.1472 · turns: 42 · duration: 293s

chrisleekr
chrisleekr reviewed Jul 18, 2026
View reviewed changes
Comment thread package.json
Comment on lines +100 to +101
"@typescript-eslint/eslint-plugin": "8.60.0",
"@typescript-eslint/parser": "8.60.0",

@chrisleekr chrisleekr Jul 18, 2026

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Blocker

@typescript-eslint 8.60.0 breaks the required Lint & Test CI check with 4 new no-unnecessary-type-assertion errors.

The 8.58.0 → 8.60.0 bump tightens @typescript-eslint/no-unnecessary-type-assertion so that pre-existing casts in the repo are now flagged, producing 4 lint errors and turning the required Lint & Test job red (verified locally with bun run lint on this branch, and matches the failure on the current head commit). Source code isn't touched in this PR, so the bump alone regresses CI:

  • src/config/manager.ts:140 and :141 — (current as unknown as Record<string, unknown>)[key] is redundant because current was already asserted to Record<string, unknown> at line 138.
  • src/config/manager.ts:143 — same redundant re-cast inside the for loop assignment.
  • src/core/server/http/context.ts:119 — updatedContext as AsyncLocalStorageLoggingContext is redundant since Object.assign({}, context, { [key]: value }) already resolves to that type in TS 5.9.

typecheck, prettier --check and bun test (19 pass) all succeed; only lint fails, and all 4 errors are auto-fixed by bun run lint:fix (I verified locally, diff is trivial).

Suggested fix: Push a follow-up commit on this branch running bun run lint:fix on src/config/manager.ts and src/core/server/http/context.ts to remove the four redundant assertions, then let CI re-run. No behavioural change, unblocks the required check.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chrisleekr chrisleekr chrisleekr left review comments
@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code type: chore 🧹

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@chrisleekr