From 2e053f5f6f334b39bbf8f57092d9dfe07b1fd4ee Mon Sep 17 00:00:00 2001 From: joshuali925-osdbot Date: Wed, 29 Jul 2026 16:52:47 +0000 Subject: [PATCH] revert(aws/cdk): drop unnecessary aws-cdk CLI floor bump from #370 PR #370 bumped the aws-cdk (CLI) devDependency floor from ^2.1132.0 to ^2.1133.0. This change is not tied to any Dependabot alert: - fast-uri (#319, #321) was a transitive of aws-cdk-lib and is cleared by the aws-cdk-lib ^2.262.1 bump, not the CLI. - esbuild GHSA-67mh-4wv8-2f99 (#180) is cleared by the esbuild ^0.28.1 bump. The bump is also a no-op for the resolved tree: both the pre-PR and post-PR lockfiles resolve aws-cdk to 2.1133.0 under either floor (^2.1132.0 already permits 2.1133.0). Reverting keeps the CVE PR scoped to the changes that actually clear alerts. Signed-off-by: joshuali925-osdbot --- aws/cdk/package-lock.json | 2 +- aws/cdk/package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/aws/cdk/package-lock.json b/aws/cdk/package-lock.json index d27cc4df..e753e6bf 100644 --- a/aws/cdk/package-lock.json +++ b/aws/cdk/package-lock.json @@ -17,7 +17,7 @@ }, "devDependencies": { "@types/node": "^25.5.0", - "aws-cdk": "^2.1133.0", + "aws-cdk": "^2.1132.0", "esbuild": "^0.28.1", "ts-node": "^10.9.2", "typescript": "~5.7.0" diff --git a/aws/cdk/package.json b/aws/cdk/package.json index 524d4af9..c8dcc759 100644 --- a/aws/cdk/package.json +++ b/aws/cdk/package.json @@ -19,7 +19,7 @@ }, "devDependencies": { "@types/node": "^25.5.0", - "aws-cdk": "^2.1133.0", + "aws-cdk": "^2.1132.0", "esbuild": "^0.28.1", "ts-node": "^10.9.2", "typescript": "~5.7.0"