Bump the npm group across 2 directories with 2 updates

[dependabot]

Bumps the npm group with 1 update in the / directory: @aws-lambda-powertools/logger.
Bumps the npm group with 1 update in the /example directory: @aws-lambda-powertools/logger.

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.33.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.33.0

Summary

In this release, the HTTP event handler gains a new metrics middleware that lets you emit per-request latency, fault, and error metrics with a single line of configuration. The middleware automatically uses the matched route as a dimension and attaches request metadata like HTTP method, path, status code, and API Gateway request IDs.

We've also improved the parser package by exporting InferOutput from the public types entry point, resolving a TypeScript declaration emit error (TS2883) that affected consumers using safeParse mode — particularly those upgrading to TypeScript 6.

⭐ Congratulations to @​yashar-new10 and @​faberchri for their first PR merged in the project 🎉

Metrics Middleware

You can now use the Metrics utility with the HTTP event handler to automatically emit CloudWatch metrics for every request. The middleware:

• Adds the matched route as a metric dimension (e.g., GET /users/:id)
• Emits latency (Milliseconds), fault (Count), and error (Count) metrics
• Attaches request metadata including httpMethod, path, statusCode, userAgent, and ipAddress
• Adds API Gateway-specific metadata (apiGwRequestId, apiGwApiId) when available
• Uses NOT_FOUND as the route dimension when no route matches, preventing dimension explosion

import { Router } from '@aws-lambda-powertools/event-handler/http';
import { metrics as metricsMiddleware } from '@aws-lambda-powertools/event-handler/http/middleware/metrics';
import { Metrics } from '@aws-lambda-powertools/metrics;
import type { Context } from 'aws-lambda';
const metrics = new Metrics({ namespace: 'my-app', serviceName: 'my-service' });
const app = new Router();
app.use(metricsMiddleware(metrics));
app.get('/users/:id', async ({ params }) => {
return { id: params.id, name: 'Jane' };
});
export const handler = async (event: unknown, context: Context) =>
app.resolve(event, context);

Changes

• improv(parser): export InferOutput from public types entry point (#5175) by @​yashar-new10
• chore(deps): add esbuild as explicit devDependency (#5173) by @​sdangol
• chore: temporarily remove Bahrain (me-south-1) region from layer publishing (#5169) by @​svozza
• docs(commons): fix isStrictEqual and areArraysEqual JSDoc array comparison description (#5165) by @​Zelys-DFKH
• docs: fix dependencies & broken references (#5156) by @​dreamorosi
• docs: fix markdown table format (#5153) by @​dothomson
• style: remove useAwait linting rule (#5146) by @​dreamorosi
• docs(event-handler): update custom middleware example to use Store API (#5145) by @​svozza
• fix(commons): don't overwrite existing value with undefined in deepMerge (#5141) by @​faberchri
• fix(event-handler): http response body validation typings (#5125) by @​nateiler
• feat(event-handler): add metrics middleware for HTTP routes (#5086) by @​svozza

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.33.0 (2026-04-14)

Bug Fixes

• commons don't overwrite existing value with undefined in deepMerge (#5141) (c7c6c0f)
• commons rename AvailabilityZoneId to AvailabilityZoneID in docs and tests (#5118) (65c054c)
• event-handler http response body validation typings (#5125) (0805db9)

Improvements

• parser export InferOutput from public types entry point (#5175) (16c6de6)

Features

• event-handler add metrics middleware for HTTP routes (#5086) (5af28e8)

Commits

• 5765cc4 chore(ci): bump version to 2.33.0 (#5183)
• ad92246 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5181)
• ec7dc7e chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the typescript group...
• b6ae31b chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5177)
• a6368ad chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#5178)
• 0777d90 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 (#5179)
• fe45b4e chore(deps): bump @​types/node from 25.5.2 to 25.6.0 (#5180)
• 16c6de6 improv(parser): export InferOutput from public types entry point (#5175)
• 1e2f39f chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (...
• e279e1b chore(deps-dev): bump the vitest group across 1 directory with 2 updates (#5176)
• Additional commits viewable in compare view

Updates @aws-lambda-powertools/commons from 2.32.0 to 2.33.0

Release notes

Sourced from @​aws-lambda-powertools/commons's releases.

v2.33.0

Summary

In this release, the HTTP event handler gains a new metrics middleware that lets you emit per-request latency, fault, and error metrics with a single line of configuration. The middleware automatically uses the matched route as a dimension and attaches request metadata like HTTP method, path, status code, and API Gateway request IDs.

We've also improved the parser package by exporting InferOutput from the public types entry point, resolving a TypeScript declaration emit error (TS2883) that affected consumers using safeParse mode — particularly those upgrading to TypeScript 6.

⭐ Congratulations to @​yashar-new10 and @​faberchri for their first PR merged in the project 🎉

Metrics Middleware

You can now use the Metrics utility with the HTTP event handler to automatically emit CloudWatch metrics for every request. The middleware:

• Adds the matched route as a metric dimension (e.g., GET /users/:id)
• Emits latency (Milliseconds), fault (Count), and error (Count) metrics
• Attaches request metadata including httpMethod, path, statusCode, userAgent, and ipAddress
• Adds API Gateway-specific metadata (apiGwRequestId, apiGwApiId) when available
• Uses NOT_FOUND as the route dimension when no route matches, preventing dimension explosion

import { Router } from '@aws-lambda-powertools/event-handler/http';
import { metrics as metricsMiddleware } from '@aws-lambda-powertools/event-handler/http/middleware/metrics';
import { Metrics } from '@aws-lambda-powertools/metrics;
import type { Context } from 'aws-lambda';
const metrics = new Metrics({ namespace: 'my-app', serviceName: 'my-service' });
const app = new Router();
app.use(metricsMiddleware(metrics));
app.get('/users/:id', async ({ params }) => {
return { id: params.id, name: 'Jane' };
});
export const handler = async (event: unknown, context: Context) =>
app.resolve(event, context);

Changes

• improv(parser): export InferOutput from public types entry point (#5175) by @​yashar-new10
• chore(deps): add esbuild as explicit devDependency (#5173) by @​sdangol
• chore: temporarily remove Bahrain (me-south-1) region from layer publishing (#5169) by @​svozza
• docs(commons): fix isStrictEqual and areArraysEqual JSDoc array comparison description (#5165) by @​Zelys-DFKH
• docs: fix dependencies & broken references (#5156) by @​dreamorosi
• docs: fix markdown table format (#5153) by @​dothomson
• style: remove useAwait linting rule (#5146) by @​dreamorosi
• docs(event-handler): update custom middleware example to use Store API (#5145) by @​svozza
• fix(commons): don't overwrite existing value with undefined in deepMerge (#5141) by @​faberchri
• fix(event-handler): http response body validation typings (#5125) by @​nateiler
• feat(event-handler): add metrics middleware for HTTP routes (#5086) by @​svozza

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/commons's changelog.

2.33.0 (2026-04-14)

Bug Fixes

• commons don't overwrite existing value with undefined in deepMerge (#5141) (c7c6c0f)
• commons rename AvailabilityZoneId to AvailabilityZoneID in docs and tests (#5118) (65c054c)
• event-handler http response body validation typings (#5125) (0805db9)

Improvements

• parser export InferOutput from public types entry point (#5175) (16c6de6)

Features

• event-handler add metrics middleware for HTTP routes (#5086) (5af28e8)

Commits

• 5765cc4 chore(ci): bump version to 2.33.0 (#5183)
• ad92246 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5181)
• ec7dc7e chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the typescript group...
• b6ae31b chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5177)
• a6368ad chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#5178)
• 0777d90 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 (#5179)
• fe45b4e chore(deps): bump @​types/node from 25.5.2 to 25.6.0 (#5180)
• 16c6de6 improv(parser): export InferOutput from public types entry point (#5175)
• 1e2f39f chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (...
• e279e1b chore(deps-dev): bump the vitest group across 1 directory with 2 updates (#5176)
• Additional commits viewable in compare view

Updates @aws-lambda-powertools/logger from 2.32.0 to 2.33.0

Release notes

Sourced from @​aws-lambda-powertools/logger's releases.

v2.33.0

Summary

In this release, the HTTP event handler gains a new metrics middleware that lets you emit per-request latency, fault, and error metrics with a single line of configuration. The middleware automatically uses the matched route as a dimension and attaches request metadata like HTTP method, path, status code, and API Gateway request IDs.

We've also improved the parser package by exporting InferOutput from the public types entry point, resolving a TypeScript declaration emit error (TS2883) that affected consumers using safeParse mode — particularly those upgrading to TypeScript 6.

⭐ Congratulations to @​yashar-new10 and @​faberchri for their first PR merged in the project 🎉

Metrics Middleware

You can now use the Metrics utility with the HTTP event handler to automatically emit CloudWatch metrics for every request. The middleware:

• Adds the matched route as a metric dimension (e.g., GET /users/:id)
• Emits latency (Milliseconds), fault (Count), and error (Count) metrics
• Attaches request metadata including httpMethod, path, statusCode, userAgent, and ipAddress
• Adds API Gateway-specific metadata (apiGwRequestId, apiGwApiId) when available
• Uses NOT_FOUND as the route dimension when no route matches, preventing dimension explosion

import { Router } from '@aws-lambda-powertools/event-handler/http';
import { metrics as metricsMiddleware } from '@aws-lambda-powertools/event-handler/http/middleware/metrics';
import { Metrics } from '@aws-lambda-powertools/metrics;
import type { Context } from 'aws-lambda';
const metrics = new Metrics({ namespace: 'my-app', serviceName: 'my-service' });
const app = new Router();
app.use(metricsMiddleware(metrics));
app.get('/users/:id', async ({ params }) => {
return { id: params.id, name: 'Jane' };
});
export const handler = async (event: unknown, context: Context) =>
app.resolve(event, context);

Changes

• improv(parser): export InferOutput from public types entry point (#5175) by @​yashar-new10
• chore(deps): add esbuild as explicit devDependency (#5173) by @​sdangol
• chore: temporarily remove Bahrain (me-south-1) region from layer publishing (#5169) by @​svozza
• docs(commons): fix isStrictEqual and areArraysEqual JSDoc array comparison description (#5165) by @​Zelys-DFKH
• docs: fix dependencies & broken references (#5156) by @​dreamorosi
• docs: fix markdown table format (#5153) by @​dothomson
• style: remove useAwait linting rule (#5146) by @​dreamorosi
• docs(event-handler): update custom middleware example to use Store API (#5145) by @​svozza
• fix(commons): don't overwrite existing value with undefined in deepMerge (#5141) by @​faberchri
• fix(event-handler): http response body validation typings (#5125) by @​nateiler
• feat(event-handler): add metrics middleware for HTTP routes (#5086) by @​svozza

... (truncated)

Changelog

Sourced from @​aws-lambda-powertools/logger's changelog.

2.33.0 (2026-04-14)

Bug Fixes

• commons don't overwrite existing value with undefined in deepMerge (#5141) (c7c6c0f)
• commons rename AvailabilityZoneId to AvailabilityZoneID in docs and tests (#5118) (65c054c)
• event-handler http response body validation typings (#5125) (0805db9)

Improvements

• parser export InferOutput from public types entry point (#5175) (16c6de6)

Features

• event-handler add metrics middleware for HTTP routes (#5086) (5af28e8)

Commits

• 5765cc4 chore(ci): bump version to 2.33.0 (#5183)
• ad92246 chore(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (#5181)
• ec7dc7e chore(deps-dev): bump typedoc from 0.28.18 to 0.28.19 in the typescript group...
• b6ae31b chore(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#5177)
• a6368ad chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#5178)
• 0777d90 chore(deps-dev): bump @​biomejs/biome from 2.4.10 to 2.4.11 (#5179)
• fe45b4e chore(deps): bump @​types/node from 25.5.2 to 25.6.0 (#5180)
• 16c6de6 improv(parser): export InferOutput from public types entry point (#5175)
• 1e2f39f chore(deps): bump aws-actions/configure-aws-credentials from 6.0.0 to 6.1.0 (...
• e279e1b chore(deps-dev): bump the vitest group across 1 directory with 2 updates (#5176)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

package/package.json

Package	Version	License	Issue Type
@aws-lambda-powertools/logger	^2.33.0	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/@aws-lambda-powertools/logger	2.33.0	🟢 9.1	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Vulnerabilities 🟢 8 2 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/logger	^2.33.0	Unknown	Unknown
npm/@aws-lambda-powertools/commons	2.33.0	🟢 9.1	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Vulnerabilities 🟢 8 2 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 11 contributing companies or organizations
npm/@aws-lambda-powertools/logger	2.33.0	🟢 9.1	Details Check Score Reason Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 10 security policy file detected Maintained 🟢 10 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices 🟢 5 badge detected: Passing Packaging 🟢 10 packaging workflow detected License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Vulnerabilities 🟢 8 2 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits CI-Tests 🟢 10 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 Contributors 🟢 10 project has 11 contributing companies or organizations

Scanned Files

• example/package.json
• package/package.json
• pnpm-lock.yaml