Skip to content

fix(deps): update all non-major dependencies#139

Open
cu-infra-svc-git wants to merge 1 commit intomainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#139
cu-infra-svc-git wants to merge 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@cu-infra-svc-git
Copy link
Copy Markdown
Contributor

@cu-infra-svc-git cu-infra-svc-git commented Dec 15, 2025 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@aws-sdk/client-rds (source) ^3.940.0 → ^3.1030.0 age adoption passing confidence
@aws-sdk/client-secrets-manager (source) ^3.940.0 → ^3.1030.0 age adoption passing confidence
@types/pg (source) ^8.15.6 → ^8.20.0 age adoption passing confidence
eslint-plugin-prettier ^5.5.4 → ^5.5.5 age adoption passing confidence
jsii-diff (source) ^1.120.0 → ^1.128.0 age adoption passing confidence
jsii-pacmak (source) ^1.120.0 → ^1.128.0 age adoption passing confidence
jsii-release ^0.2.1025 → ^0.2.1041 age adoption passing confidence
pg (source) ^8.16.3 → ^8.20.0 age adoption passing confidence
prettier (source) ^3.7.3 → ^3.8.2 age adoption passing confidence
sinon (source) ^21.0.0 → ^21.1.2 age adoption passing confidence
ts-jest (source) ^29.4.6 → ^29.4.9 age adoption passing confidence

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/client-rds)

v3.1030.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1029.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1028.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1027.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1026.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1025.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1024.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1023.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1022.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1021.0

Compare Source

Bug Fixes
  • codegen: sync for adaptive retry throttling detection fix (#​7905) (03f108d)

v3.1020.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1019.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1018.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1017.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1016.0

Compare Source

Features
  • client-rds: Adds support in Aurora PostgreSQL serverless databases for express configuration based creation through WithExpressConfiguration in CreateDbCluster API, and for restoring clusters using RestoreDBClusterToPointInTime and RestoreDBClusterFromSnapshot APIs. (d1038f0)

v3.1015.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1014.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1013.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1012.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1011.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1010.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1009.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1008.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1007.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1006.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1005.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1004.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1003.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1002.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1001.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.1000.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.999.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.998.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.997.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.996.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.995.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.994.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.993.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.992.0

Compare Source

Features
  • client-rds: Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters. (976ce19)

v3.991.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.990.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.989.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.988.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.987.0

Compare Source

Features
  • client-rds: This release adds backup configuration for RDS and Aurora restores, letting customers set backup retention period and preferred backup window during restore. It also enables viewing backup settings when describing snapshots or automated backups for instances and clusters. (dfcf7f3)

v3.986.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.985.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.984.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.983.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.982.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.981.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.978.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.975.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.974.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.972.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.971.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.970.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.969.0

Compare Source

Features
  • client-rds: no feature changes. model migrated to Smithy (75005b7)

v3.968.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.967.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.966.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.965.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.964.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.963.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.962.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.958.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.957.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.956.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.955.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.954.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.953.0

Compare Source

Features
  • clients: allow protocol selection by class constructor (#​7568) (5c5fd2e)

v3.952.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.948.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.947.0

Compare Source

Features
  • client-rds: Adding support for tagging RDS Instance/Cluster Automated Backups (41b9a13)

v3.946.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-rds

v3.943.0

Compare Source

Features
  • client-rds: RDS Oracle and SQL Server: Add support for adding, modifying, and removing additional storage volumes, offering up to 256TiB storage; RDS SQL Server: Support Developer Edition via custom engine versions for development and testing purposes; M7i/R7i instances with Optimize CPU for cost savings. (0fc234a)
aws/aws-sdk-js-v3 (@​aws-sdk/client-secrets-manager)

v3.1030.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1029.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1028.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1027.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1026.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1025.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1024.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1023.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1022.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1021.0

Compare Source

Bug Fixes
  • codegen: sync for adaptive retry throttling detection fix (#​7905) (03f108d)

v3.1020.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1019.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1018.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1017.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1016.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1015.0

Compare Source

Bug Fixes
  • core/protocols: use composite error registry for error handling, revert default error message to "UnknownError" (#​7877) (55f7726)

v3.1014.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1013.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1012.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1011.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1010.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1009.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1008.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1007.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1006.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1005.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1004.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1003.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1002.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1001.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.1000.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.999.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.998.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.997.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.996.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.995.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.994.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.993.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.992.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.991.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.990.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.989.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.988.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.987.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.986.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.985.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.984.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.983.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.982.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.981.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.980.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.978.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.975.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.974.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.972.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.971.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.970.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.969.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.968.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-secrets-manager

v3.967.0

[Compare Source](https://re

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 2am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@codecov
Copy link
Copy Markdown

codecov bot commented Dec 15, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.63%. Comparing base (1e8e664) to head (1d14baf).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #139   +/-   ##
=======================================
  Coverage   96.63%   96.63%           
=======================================
  Files           6        6           
  Lines        1843     1843           
  Branches      184      184           
=======================================
  Hits         1781     1781           
  Misses         62       62

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 5 times, most recently from 10b0124 to fab616b Compare December 23, 2025 01:17
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 5 times, most recently from c00ac1a to 4ab8af8 Compare December 30, 2025 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 2 times, most recently from 5a3e6b0 to 97d09e8 Compare January 6, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 4 times, most recently from 0af38ef to 005405b Compare January 13, 2026 01:17
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 4 times, most recently from fb9ac1f to 3478ed0 Compare January 20, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 6 times, most recently from 4430c86 to dcb0d5e Compare January 28, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 2 times, most recently from 7c9111e to 5a11d4e Compare January 30, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 5 times, most recently from 2e37ac0 to 4a951d2 Compare February 25, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 5 times, most recently from cfdc997 to 990b920 Compare March 4, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 6 times, most recently from c5efe19 to b213948 Compare March 12, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 5 times, most recently from 0c4f95c to 93c67c7 Compare March 19, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch 6 times, most recently from f0e5d18 to 0df2ba0 Compare March 26, 2026 01:18
@cu-infra-svc-git cu-infra-svc-git force-pushed the renovate/all-minor-patch branch from 0df2ba0 to 9093283 Compare March 27, 2026 01:19
@socket-security
Copy link
Copy Markdown

socket-security bot commented Apr 9, 2026 •
edited
Loading

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Medium
Recently published: npm @aws-sdk/client-codeartifact published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-codeartifact@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/client-codeartifact@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/client-cognito-identity published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-cognito-identity@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/client-cognito-identity@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/client-rds published 6 hours ago

Location: Package overview

From: package.json → npm/@aws-sdk/client-rds@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/client-rds@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/client-secrets-manager published 6 hours ago

Location: Package overview

From: package.json → npm/@aws-sdk/client-secrets-manager@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/client-secrets-manager@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/core published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/core@3.974.2

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/core@3.974.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-cognito-identity published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/credential-provider-cognito-identity@3.972.25

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-cognito-identity@3.972.25. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-env published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-env@3.972.28

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-env@3.972.28. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-http published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-http@3.972.30

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-http@3.972.30. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-ini published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-ini@3.972.32

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-ini@3.972.32. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-login published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-login@3.972.32

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-login@3.972.32. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-node published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-node@3.972.33

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-node@3.972.33. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-process published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-process@3.972.28

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-process@3.972.28. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-sso published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-sso@3.972.32

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-sso@3.972.32. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-provider-web-identity published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/credential-provider-web-identity@3.972.32

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-provider-web-identity@3.972.32. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/credential-providers published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/credential-providers@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/credential-providers@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-host-header published 4 days ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-host-header@3.972.10

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-host-header@3.972.10. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-logger published 4 days ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-logger@3.972.10

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-logger@3.972.10. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-recursion-detection published 4 days ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-recursion-detection@3.972.11

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-recursion-detection@3.972.11. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-sdk-rds published 4 days ago

Location: Package overview

From: pnpm-lock.yaml → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-sdk-rds@3.972.20

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-sdk-rds@3.972.20. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-sdk-s3 published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-sdk-s3@3.972.31

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-sdk-s3@3.972.31. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/middleware-user-agent published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/middleware-user-agent@3.972.32

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/middleware-user-agent@3.972.32. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/nested-clients published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/nested-clients@3.997.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/nested-clients@3.997.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/region-config-resolver published 4 days ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/region-config-resolver@3.972.12

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/region-config-resolver@3.972.12. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/signature-v4-multi-region published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/signature-v4-multi-region@3.996.19

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/signature-v4-multi-region@3.996.19. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Medium
Recently published: npm @aws-sdk/token-providers published 6 hours ago

Location: Package overview

From: pnpm-lock.yaml → npm/jsii-release@0.2.1042 → npm/@aws-sdk/client-secrets-manager@3.1033.0 → npm/@aws-sdk/client-rds@3.1033.0 → npm/@aws-sdk/token-providers@3.1033.0

ℹ Read more on: This package | This alert | What are recently published artifacts?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should either be allowlisted to allow recently-published versions, or an older version should be used instead.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/@aws-sdk/token-providers@3.1033.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

See 39 more rows in the dashboard

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

renovate

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@cu-infra-svc-git