Merge branch 'main' into iainlane/many-events

Author: npalm

.github/workflows/actions.yml

@@ -51,7 +51,7 @@ jobs:
           path: results.sarif
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
         with:
           sarif_file: results.sarif
           category: actions-zizmor

.github/workflows/codeql.yml

@@ -39,12 +39,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+      uses: github/codeql-action/init@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
       with:
         languages: ${{ matrix.language }}
         build-mode: none
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.5
+      uses: github/codeql-action/analyze@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/dependency-review.yml

@@ -28,6 +28,6 @@ jobs:
         with:
           persist-credentials: false
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
+        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
         with:
           comment-summary-in-pr: always

.github/workflows/ossf-scorecard.yml

@@ -48,6 +48,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498
+        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d
         with:
           sarif_file: results.sarif

.github/workflows/release.yml

@@ -53,7 +53,7 @@ jobs:
       - name: Attest
         if: ${{ steps.release.outputs.releases_created == 'true' }}
         id: attest
-        uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
         with:
           subject-path: '${{ github.workspace }}/lambdas/functions/**/*.zip'
       - name: Update release notes with attestation

lambdas/functions/ami-housekeeper/package.json

@@ -28,7 +28,7 @@
     "@aws-github-runner/aws-ssm-util": "*",
     "@aws-sdk/client-ec2": "^3.875.0",
     "@aws-sdk/client-ssm": "^3.873.0",
-    "cron-parser": "^5.3.0"
+    "cron-parser": "^5.3.1"
   },
   "nx": {
     "includedScripts": [

lambdas/functions/control-plane/package.json

@@ -32,15 +32,15 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-lambda-powertools/parameters": "^2.25.1",
+    "@aws-lambda-powertools/parameters": "^2.25.2",
     "@aws-sdk/client-ec2": "^3.875.0",
     "@aws-sdk/client-sqs": "^3.875.0",
     "@middy/core": "^6.4.1",
-    "@octokit/auth-app": "8.0.2",
+    "@octokit/auth-app": "8.1.0",
     "@octokit/core": "7.0.3",
     "@octokit/plugin-throttling": "11.0.1",
     "@octokit/rest": "22.0.0",
-    "cron-parser": "^5.3.0"
+    "cron-parser": "^5.3.1"
   },
   "nx": {
     "includedScripts": [

lambdas/libs/aws-powertools-util/package.json

@@ -20,9 +20,9 @@
     "body-parser": "^2.2.0"
   },
   "dependencies": {
-    "@aws-lambda-powertools/logger": "^2.25.1",
-    "@aws-lambda-powertools/metrics": "^2.25.1",
-    "@aws-lambda-powertools/tracer": "^2.25.1",
+    "@aws-lambda-powertools/logger": "^2.25.2",
+    "@aws-lambda-powertools/metrics": "^2.25.2",
+    "@aws-lambda-powertools/tracer": "^2.25.2",
     "aws-lambda": "^1.0.7"
   },
   "nx": {

lambdas/package.json

@@ -40,7 +40,7 @@
     "ts-node": "^10.9.2",
     "ts-node-dev": "^2.0.0",
     "typescript": "^5.8.3",
-    "vite": "^7.1.3",
+    "vite": "^7.1.4",
     "vitest": "^3.2.4"
   },
   "packageManager": "yarn@4.3.1"

lambdas/yarn.lock

@@ -133,17 +133,17 @@ __metadata:
     "@vercel/ncc": "npm:^0.38.3"
     aws-sdk-client-mock: "npm:^4.1.0"
     aws-sdk-client-mock-jest: "npm:^4.1.0"
-    cron-parser: "npm:^5.3.0"
+    cron-parser: "npm:^5.3.1"
   languageName: unknown
   linkType: soft
 
 "@aws-github-runner/aws-powertools-util@npm:*, @aws-github-runner/aws-powertools-util@workspace:libs/aws-powertools-util":
   version: 0.0.0-use.local
   resolution: "@aws-github-runner/aws-powertools-util@workspace:libs/aws-powertools-util"
   dependencies:
-    "@aws-lambda-powertools/logger": "npm:^2.25.1"
-    "@aws-lambda-powertools/metrics": "npm:^2.25.1"
-    "@aws-lambda-powertools/tracer": "npm:^2.25.1"
+    "@aws-lambda-powertools/logger": "npm:^2.25.2"
+    "@aws-lambda-powertools/metrics": "npm:^2.25.2"
+    "@aws-lambda-powertools/tracer": "npm:^2.25.2"
     "@types/aws-lambda": "npm:^8.10.152"
     "@types/node": "npm:^22.16.5"
     aws-lambda: "npm:^1.0.7"
@@ -171,12 +171,12 @@ __metadata:
   dependencies:
     "@aws-github-runner/aws-powertools-util": "npm:*"
     "@aws-github-runner/aws-ssm-util": "npm:*"
-    "@aws-lambda-powertools/parameters": "npm:^2.25.1"
+    "@aws-lambda-powertools/parameters": "npm:^2.25.2"
     "@aws-sdk/client-ec2": "npm:^3.875.0"
     "@aws-sdk/client-sqs": "npm:^3.875.0"
     "@aws-sdk/types": "npm:^3.862.0"
     "@middy/core": "npm:^6.4.1"
-    "@octokit/auth-app": "npm:8.0.2"
+    "@octokit/auth-app": "npm:8.1.0"
     "@octokit/core": "npm:7.0.3"
     "@octokit/plugin-throttling": "npm:11.0.1"
     "@octokit/rest": "npm:22.0.0"
@@ -186,7 +186,7 @@ __metadata:
     "@vercel/ncc": "npm:^0.38.3"
     aws-sdk-client-mock: "npm:^4.1.0"
     aws-sdk-client-mock-jest: "npm:^4.1.0"
-    cron-parser: "npm:^5.3.0"
+    cron-parser: "npm:^5.3.1"
     moment-timezone: "npm:^0.6.0"
     nock: "npm:^14.0.2"
     ts-node: "npm:^10.9.2"
@@ -255,50 +255,50 @@ __metadata:
   languageName: unknown
   linkType: soft
 
-"@aws-lambda-powertools/commons@npm:2.25.1":
-  version: 2.25.1
-  resolution: "@aws-lambda-powertools/commons@npm:2.25.1"
-  checksum: 10c0/f1dfa52316805641e4d0b274758c1b8ab7268ddcaa8707ce4b628c3632e560771ddfa74466c1cb1d65d7e029d892f8f8c14668b6db93e84ea6fd45c6c54f7e74
+"@aws-lambda-powertools/commons@npm:2.25.2":
+  version: 2.25.2
+  resolution: "@aws-lambda-powertools/commons@npm:2.25.2"
+  checksum: 10c0/6f75a67539524d8b88aa9bfb3848147d6bd4d8b4722832cd3d2f76d8e08f57f8d65878b870b5fccb597d50ab2167ef62258cc7b3daff1b7cc564bdd02ecba1af
   languageName: node
   linkType: hard
 
-"@aws-lambda-powertools/logger@npm:^2.25.1":
-  version: 2.25.1
-  resolution: "@aws-lambda-powertools/logger@npm:2.25.1"
+"@aws-lambda-powertools/logger@npm:^2.25.2":
+  version: 2.25.2
+  resolution: "@aws-lambda-powertools/logger@npm:2.25.2"
   dependencies:
-    "@aws-lambda-powertools/commons": "npm:2.25.1"
+    "@aws-lambda-powertools/commons": "npm:2.25.2"
     lodash.merge: "npm:^4.6.2"
   peerDependencies:
-    "@aws-lambda-powertools/jmespath": 2.25.1
+    "@aws-lambda-powertools/jmespath": 2.25.2
     "@middy/core": 4.x || 5.x || 6.x
   peerDependenciesMeta:
     "@aws-lambda-powertools/jmespath":
       optional: true
     "@middy/core":
       optional: true
-  checksum: 10c0/c6211871fe24d7be180ef0b5733cdc33a8f8b1c5eeebd3240117d91156cac88f24e1359da19d6c3029452c0ede4b120002d58bf638b5fc39b346dd5c4ce47e7c
+  checksum: 10c0/5d4a4d507dbb62ddd3743e9f2c473df8d4e0a1deaff022945ca89f783eef56e9e5c2bbd795d6fb14a272435cb85ea364f8abb835fd22b5e76e68494e3dd1a513
   languageName: node
   linkType: hard
 
-"@aws-lambda-powertools/metrics@npm:^2.25.1":
-  version: 2.25.1
-  resolution: "@aws-lambda-powertools/metrics@npm:2.25.1"
+"@aws-lambda-powertools/metrics@npm:^2.25.2":
+  version: 2.25.2
+  resolution: "@aws-lambda-powertools/metrics@npm:2.25.2"
   dependencies:
-    "@aws-lambda-powertools/commons": "npm:2.25.1"
+    "@aws-lambda-powertools/commons": "npm:2.25.2"
   peerDependencies:
     "@middy/core": 4.x || 5.x || 6.x
   peerDependenciesMeta:
     "@middy/core":
       optional: true
-  checksum: 10c0/3eabce84652e49b90af1bff787977416fbd980b55c9fcf4e8544fd28ef3639ebfaf95145d09b0f1d9919fdb5667cc2bdafd734744665d2aea3ec3de31c81d329
+  checksum: 10c0/68ec01768683d78577e32f93337f3696969225890a6f2293725e2983160d020315bcd7cf259f2d79e882baa41fe155647bbd9609076ebfe5dc272adf0438ff33
   languageName: node
   linkType: hard
 
-"@aws-lambda-powertools/parameters@npm:^2.25.1":
-  version: 2.25.1
-  resolution: "@aws-lambda-powertools/parameters@npm:2.25.1"
+"@aws-lambda-powertools/parameters@npm:^2.25.2":
+  version: 2.25.2
+  resolution: "@aws-lambda-powertools/parameters@npm:2.25.2"
   dependencies:
-    "@aws-lambda-powertools/commons": "npm:2.25.1"
+    "@aws-lambda-powertools/commons": "npm:2.25.2"
   peerDependencies:
     "@aws-sdk/client-appconfigdata": ">=3.x"
     "@aws-sdk/client-dynamodb": ">=3.x"
@@ -319,22 +319,22 @@ __metadata:
       optional: true
     "@middy/core":
       optional: true
-  checksum: 10c0/106abf1587dfd4067e737b52dd87f75e26987e6c8cd87248810083935c33c729a1c7e91c0c7c50d64e8b37f3e53c7f9ffcfad2e6d5e5ffa01626b5926e7d24b8
+  checksum: 10c0/8355af1285c8f03c755361f74ab6ebb7d5ae0ac4ff9b602e9329957ef2e28522abb54d9ea3efe450955961a87e7ef455d272b19f67e9d9ba4c0dd332c68635eb
   languageName: node
   linkType: hard
 
-"@aws-lambda-powertools/tracer@npm:^2.25.1":
-  version: 2.25.1
-  resolution: "@aws-lambda-powertools/tracer@npm:2.25.1"
+"@aws-lambda-powertools/tracer@npm:^2.25.2":
+  version: 2.25.2
+  resolution: "@aws-lambda-powertools/tracer@npm:2.25.2"
   dependencies:
-    "@aws-lambda-powertools/commons": "npm:2.25.1"
+    "@aws-lambda-powertools/commons": "npm:2.25.2"
     aws-xray-sdk-core: "npm:^3.10.3"
   peerDependencies:
     "@middy/core": 4.x || 5.x || 6.x
   peerDependenciesMeta:
     "@middy/core":
       optional: true
-  checksum: 10c0/e65d20c6587a448730ecc2d300cedb8fe5998b31166e360212b84f3f41f4f0cc572f5de4d2e5536f5ac4dc424f5435793ca513ad39264d6e5e46381d64cb9472
+  checksum: 10c0/c9c6f2942057746b95f7e8edc6da8023a3b6046bd6f521adaddd8a192381945263e579c0d1f166f5f5341087690f2f93f76f9d3e1002e2bcab7c0c4c1f42493d
   languageName: node
   linkType: hard
 
@@ -3632,9 +3632,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"@octokit/auth-app@npm:8.0.2":
-  version: 8.0.2
-  resolution: "@octokit/auth-app@npm:8.0.2"
+"@octokit/auth-app@npm:8.1.0":
+  version: 8.1.0
+  resolution: "@octokit/auth-app@npm:8.1.0"
   dependencies:
     "@octokit/auth-oauth-app": "npm:^9.0.1"
     "@octokit/auth-oauth-user": "npm:^6.0.0"
@@ -3644,7 +3644,7 @@ __metadata:
     toad-cache: "npm:^3.7.0"
     universal-github-app-jwt: "npm:^2.2.0"
     universal-user-agent: "npm:^7.0.0"
-  checksum: 10c0/3899293c6defdddfdd28329397f309e90feb8a0c54630970d1cd0e1aa1a8c415451c51714cdcf5243c92fbb61e5050d0f7e22955d2474ef4a324516800d30235
+  checksum: 10c0/8852c697b04d77ab0aae704e8ee3c6c0ed2810429195f984d2f28833a97170f2d8d9b73f94a50524e2ae93b66841a1e6bc01bb80fd58362d5a40c56d6807a11e
   languageName: node
   linkType: hard
 
@@ -6907,12 +6907,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"cron-parser@npm:^5.3.0":
-  version: 5.3.0
-  resolution: "cron-parser@npm:5.3.0"
+"cron-parser@npm:^5.3.1":
+  version: 5.3.1
+  resolution: "cron-parser@npm:5.3.1"
   dependencies:
-    luxon: "npm:^3.6.1"
-  checksum: 10c0/770d88db93af031ecc0fa7e7fc4f587af32df66eaff985137f86a02fee9af038533788dd36d5bc6ac283392e9db82b55fd4841e7e02098617fc7b73a813c5b7a
+    luxon: "npm:^3.7.1"
+  checksum: 10c0/0a5a1070cd5c1a33a0e8d9942868e5fe19d597ef83f3af0dbf701708d7d4084ba3a90563ae0d4cb20c8155caf35571eadfa7be09eee46ead570bf9e745a0aab8
   languageName: node
   linkType: hard
 
@@ -8998,7 +8998,7 @@ __metadata:
     ts-node: "npm:^10.9.2"
     ts-node-dev: "npm:^2.0.0"
     typescript: "npm:^5.8.3"
-    vite: "npm:^7.1.3"
+    vite: "npm:^7.1.4"
     vitest: "npm:^3.2.4"
   languageName: unknown
   linkType: soft
@@ -9111,7 +9111,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"luxon@npm:^3.6.1":
+"luxon@npm:^3.7.1":
   version: 3.7.1
   resolution: "luxon@npm:3.7.1"
   checksum: 10c0/f83bc23a4c09da9111bc2510d2f5346e1ced4938379ebff13e308fece2ea852eb6e8b9ed8053b8d82e0fce05d5dd46e4cd64d8831ca04cfe32c0954b6f087258
@@ -11665,9 +11665,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"vite@npm:^7.1.3":
-  version: 7.1.3
-  resolution: "vite@npm:7.1.3"
+"vite@npm:^7.1.4":
+  version: 7.1.4
+  resolution: "vite@npm:7.1.4"
   dependencies:
     esbuild: "npm:^0.25.0"
     fdir: "npm:^6.5.0"
@@ -11716,7 +11716,7 @@ __metadata:
       optional: true
   bin:
     vite: bin/vite.js
-  checksum: 10c0/a0aa418beab80673dc9a3e9d1fa49472955d6ef9d41a4c9c6bd402953f411346f612864dae267adfb2bb8ceeb894482369316ffae5816c84fd45990e352b727d
+  checksum: 10c0/dbe2ba29926ffe8985c93d1b3718dcc9040080b7fa10a74c82a52aad7449136a391ba17b265288ff03b864e6f1033b9b537247521a96d5491a9d4af90ac04702
   languageName: node
   linkType: hard