diff --git a/.changeset/bot-pr-1657.md b/.changeset/bot-pr-1657.md deleted file mode 100644 index 08225fdf..00000000 --- a/.changeset/bot-pr-1657.md +++ /dev/null @@ -1,6 +0,0 @@ ---- -"@aligent/cdk-header-change-detection": patch -"@aligent/cdk-prerender-proxy": patch ---- - -[Aikido] Fix 2 security issues in follow-redirects, axios diff --git a/.changeset/fix-resource-prefix-length-truncation.md b/.changeset/fix-resource-prefix-length-truncation.md deleted file mode 100644 index 15e70c0e..00000000 --- a/.changeset/fix-resource-prefix-length-truncation.md +++ /dev/null @@ -1,5 +0,0 @@ ---- -"@aligent/cdk-aspects": patch ---- - -Fixed `ResourcePrefixAspect` failing synthesis when a prefixed resource name exceeds the AWS maximum length. The aspect now truncates the name and appends an 8-character SHA-256 hash to maintain uniqueness, and emits a `cdk synth` warning identifying the original and truncated name. This prevents L3 constructs (e.g. `BucketDeployment`) from generating child resources that the user has no control over causing failed deployments. diff --git a/.changeset/tame-suns-dream.md b/.changeset/tame-suns-dream.md deleted file mode 100644 index ef42a145..00000000 --- a/.changeset/tame-suns-dream.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -"@aligent/cdk-nodejs-function-from-entry": minor -"@aligent/cdk-step-function-from-file": minor -"@aligent/cdk-aspects": patch ---- - -### `@aligent/cdk-nodejs-function-from-entry` (minor) - -- **Changed base class from `Function` to `NodejsFunction`** — the construct now extends `NodejsFunction` (and accepts `NodejsFunctionProps`) instead of the generic `Function`, enabling Node.js-specific bundling options. The parent `entry` prop is omitted to avoid conflicts with the custom typed `entry`. -- **Added `NoInfer` to the `entry` generic parameter** — prevents TypeScript from incorrectly inferring `TPrefix` from the `entry` value; the prefix is now inferred solely from `sourcePrefix`. -- **Made `runtime` optional** — consumers no longer need to explicitly pass a runtime. -- **Improved path traversal validation** — replaced the simple relative-path check with a `findServiceRoot` helper that walks up to a configurable `rootParentDir` ancestor, giving clearer error messages on invalid paths. -- **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. - -### `@aligent/cdk-step-function-from-file` (minor) - -- **Added `NoInfer` to the `filepath` generic parameter** — prevents unintended type inference from the `filepath` value. -- **Improved path traversal validation** — uses the same `findServiceRoot` approach as the Lambda construct for consistent, configurable path safety checks. -- **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. - -### `@aligent/cdk-aspects` (patch) - -- **Updated `NodeJsFunctionDefaultsAspect` JSDoc** — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set. diff --git a/packages/cdk-aspects/CHANGELOG.md b/packages/cdk-aspects/CHANGELOG.md index 91bc17df..0efe0699 100644 --- a/packages/cdk-aspects/CHANGELOG.md +++ b/packages/cdk-aspects/CHANGELOG.md @@ -1,5 +1,26 @@ # @aligent/cdk-aspects +## 0.5.3 + +### Patch Changes + +- [#1661](https://github.com/aligent/cdk-constructs/pull/1661) [`25cf7c9`](https://github.com/aligent/cdk-constructs/commit/25cf7c9fc6427a9c5a15f01928ee2121c03a3ec7) Thanks [@toddhainsworth](https://github.com/toddhainsworth)! - Fixed `ResourcePrefixAspect` failing synthesis when a prefixed resource name exceeds the AWS maximum length. The aspect now truncates the name and appends an 8-character SHA-256 hash to maintain uniqueness, and emits a `cdk synth` warning identifying the original and truncated name. This prevents L3 constructs (e.g. `BucketDeployment`) from generating child resources that the user has no control over causing failed deployments. + +- [#1654](https://github.com/aligent/cdk-constructs/pull/1654) [`99d96c9`](https://github.com/aligent/cdk-constructs/commit/99d96c95b237b9b1d9e341957d621025e0c3bd6a) Thanks [@kai-nguyen-aligent](https://github.com/kai-nguyen-aligent)! - ### `@aligent/cdk-nodejs-function-from-entry` (minor) + - **Changed base class from `Function` to `NodejsFunction`** — the construct now extends `NodejsFunction` (and accepts `NodejsFunctionProps`) instead of the generic `Function`, enabling Node.js-specific bundling options. The parent `entry` prop is omitted to avoid conflicts with the custom typed `entry`. + - **Added `NoInfer` to the `entry` generic parameter** — prevents TypeScript from incorrectly inferring `TPrefix` from the `entry` value; the prefix is now inferred solely from `sourcePrefix`. + - **Made `runtime` optional** — consumers no longer need to explicitly pass a runtime. + - **Improved path traversal validation** — replaced the simple relative-path check with a `findServiceRoot` helper that walks up to a configurable `rootParentDir` ancestor, giving clearer error messages on invalid paths. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-step-function-from-file` (minor) + - **Added `NoInfer` to the `filepath` generic parameter** — prevents unintended type inference from the `filepath` value. + - **Improved path traversal validation** — uses the same `findServiceRoot` approach as the Lambda construct for consistent, configurable path safety checks. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-aspects` (patch) + - **Updated `NodeJsFunctionDefaultsAspect` JSDoc** — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set. + ## 0.5.2 ### Patch Changes diff --git a/packages/cdk-aspects/package.json b/packages/cdk-aspects/package.json index 8b8d0ba4..1ba2812e 100644 --- a/packages/cdk-aspects/package.json +++ b/packages/cdk-aspects/package.json @@ -1,6 +1,6 @@ { "name": "@aligent/cdk-aspects", - "version": "0.5.2", + "version": "0.5.3", "description": "Collection of CDK Asppects", "main": "index.js", "types": "index.d.ts", diff --git a/packages/constructs/header-change-detection/CHANGELOG.md b/packages/constructs/header-change-detection/CHANGELOG.md index 34910418..50aad3cf 100644 --- a/packages/constructs/header-change-detection/CHANGELOG.md +++ b/packages/constructs/header-change-detection/CHANGELOG.md @@ -1,5 +1,11 @@ # @aligent/cdk-header-change-detection +## 1.7.7 + +### Patch Changes + +- [#1657](https://github.com/aligent/cdk-constructs/pull/1657) [`f41ba97`](https://github.com/aligent/cdk-constructs/commit/f41ba9779d0c2fe4b8237cebe18a524e0cc3141a) Thanks [@aikido-autofix](https://github.com/apps/aikido-autofix)! - [Aikido] Fix 2 security issues in follow-redirects, axios + ## 1.7.6 ### Patch Changes diff --git a/packages/constructs/header-change-detection/package.json b/packages/constructs/header-change-detection/package.json index 2e9486b5..2ce72e91 100644 --- a/packages/constructs/header-change-detection/package.json +++ b/packages/constructs/header-change-detection/package.json @@ -1,6 +1,6 @@ { "name": "@aligent/cdk-header-change-detection", - "version": "1.7.6", + "version": "1.7.7", "main": "index.js", "license": "MIT", "homepage": "https://github.com/aligent/cdk-constructs/tree/main/packages/constructs/header-change-detection#readme", diff --git a/packages/constructs/nodejs-function-from-entry/CHANGELOG.md b/packages/constructs/nodejs-function-from-entry/CHANGELOG.md index a6a60eb9..762d4e13 100644 --- a/packages/constructs/nodejs-function-from-entry/CHANGELOG.md +++ b/packages/constructs/nodejs-function-from-entry/CHANGELOG.md @@ -1,5 +1,24 @@ # @aligent/cdk-nodejs-function-from-entry +## 0.2.0 + +### Minor Changes + +- [#1654](https://github.com/aligent/cdk-constructs/pull/1654) [`99d96c9`](https://github.com/aligent/cdk-constructs/commit/99d96c95b237b9b1d9e341957d621025e0c3bd6a) Thanks [@kai-nguyen-aligent](https://github.com/kai-nguyen-aligent)! - ### `@aligent/cdk-nodejs-function-from-entry` (minor) + - **Changed base class from `Function` to `NodejsFunction`** — the construct now extends `NodejsFunction` (and accepts `NodejsFunctionProps`) instead of the generic `Function`, enabling Node.js-specific bundling options. The parent `entry` prop is omitted to avoid conflicts with the custom typed `entry`. + - **Added `NoInfer` to the `entry` generic parameter** — prevents TypeScript from incorrectly inferring `TPrefix` from the `entry` value; the prefix is now inferred solely from `sourcePrefix`. + - **Made `runtime` optional** — consumers no longer need to explicitly pass a runtime. + - **Improved path traversal validation** — replaced the simple relative-path check with a `findServiceRoot` helper that walks up to a configurable `rootParentDir` ancestor, giving clearer error messages on invalid paths. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-step-function-from-file` (minor) + - **Added `NoInfer` to the `filepath` generic parameter** — prevents unintended type inference from the `filepath` value. + - **Improved path traversal validation** — uses the same `findServiceRoot` approach as the Lambda construct for consistent, configurable path safety checks. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-aspects` (patch) + - **Updated `NodeJsFunctionDefaultsAspect` JSDoc** — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set. + ## 0.1.0 ### Minor Changes diff --git a/packages/constructs/nodejs-function-from-entry/package.json b/packages/constructs/nodejs-function-from-entry/package.json index f5fe403c..a852656e 100644 --- a/packages/constructs/nodejs-function-from-entry/package.json +++ b/packages/constructs/nodejs-function-from-entry/package.json @@ -1,6 +1,6 @@ { "name": "@aligent/cdk-nodejs-function-from-entry", - "version": "0.1.0", + "version": "0.2.0", "main": "index.js", "license": "MIT", "homepage": "https://github.com/aligent/cdk-constructs/tree/main/packages/constructs/nodejs-function-from-entry#readme", diff --git a/packages/constructs/prerender-proxy/CHANGELOG.md b/packages/constructs/prerender-proxy/CHANGELOG.md index 19f32845..a02e805c 100644 --- a/packages/constructs/prerender-proxy/CHANGELOG.md +++ b/packages/constructs/prerender-proxy/CHANGELOG.md @@ -1,5 +1,11 @@ # @aligent/cdk-prerender-proxy +## 2.5.6 + +### Patch Changes + +- [#1657](https://github.com/aligent/cdk-constructs/pull/1657) [`f41ba97`](https://github.com/aligent/cdk-constructs/commit/f41ba9779d0c2fe4b8237cebe18a524e0cc3141a) Thanks [@aikido-autofix](https://github.com/apps/aikido-autofix)! - [Aikido] Fix 2 security issues in follow-redirects, axios + ## 2.5.5 ### Patch Changes diff --git a/packages/constructs/prerender-proxy/package.json b/packages/constructs/prerender-proxy/package.json index 32c92599..87d64785 100644 --- a/packages/constructs/prerender-proxy/package.json +++ b/packages/constructs/prerender-proxy/package.json @@ -1,6 +1,6 @@ { "name": "@aligent/cdk-prerender-proxy", - "version": "2.5.5", + "version": "2.5.6", "description": "Cloudfront Lambda@Edge constructs for integrating with prerender.io", "main": "index.js", "scripts": { diff --git a/packages/constructs/step-function-from-file/CHANGELOG.md b/packages/constructs/step-function-from-file/CHANGELOG.md index 9047c240..6ef1d6ee 100644 --- a/packages/constructs/step-function-from-file/CHANGELOG.md +++ b/packages/constructs/step-function-from-file/CHANGELOG.md @@ -1,5 +1,24 @@ # @aligent/cdk-step-function-from-file +## 0.5.0 + +### Minor Changes + +- [#1654](https://github.com/aligent/cdk-constructs/pull/1654) [`99d96c9`](https://github.com/aligent/cdk-constructs/commit/99d96c95b237b9b1d9e341957d621025e0c3bd6a) Thanks [@kai-nguyen-aligent](https://github.com/kai-nguyen-aligent)! - ### `@aligent/cdk-nodejs-function-from-entry` (minor) + - **Changed base class from `Function` to `NodejsFunction`** — the construct now extends `NodejsFunction` (and accepts `NodejsFunctionProps`) instead of the generic `Function`, enabling Node.js-specific bundling options. The parent `entry` prop is omitted to avoid conflicts with the custom typed `entry`. + - **Added `NoInfer` to the `entry` generic parameter** — prevents TypeScript from incorrectly inferring `TPrefix` from the `entry` value; the prefix is now inferred solely from `sourcePrefix`. + - **Made `runtime` optional** — consumers no longer need to explicitly pass a runtime. + - **Improved path traversal validation** — replaced the simple relative-path check with a `findServiceRoot` helper that walks up to a configurable `rootParentDir` ancestor, giving clearer error messages on invalid paths. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-step-function-from-file` (minor) + - **Added `NoInfer` to the `filepath` generic parameter** — prevents unintended type inference from the `filepath` value. + - **Improved path traversal validation** — uses the same `findServiceRoot` approach as the Lambda construct for consistent, configurable path safety checks. + - **Added `rootParentDir` prop** (default: `'services'`) to control the allowed root for asset resolution. + + ### `@aligent/cdk-aspects` (patch) + - **Updated `NodeJsFunctionDefaultsAspect` JSDoc** — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set. + ## 0.4.0 ### Minor Changes diff --git a/packages/constructs/step-function-from-file/package.json b/packages/constructs/step-function-from-file/package.json index a4bed255..b18fe0e4 100644 --- a/packages/constructs/step-function-from-file/package.json +++ b/packages/constructs/step-function-from-file/package.json @@ -1,6 +1,6 @@ { "name": "@aligent/cdk-step-function-from-file", - "version": "0.4.0", + "version": "0.5.0", "main": "index.js", "license": "MIT", "homepage": "https://github.com/aligent/cdk-constructs/tree/main/packages/constructs/step-function-from-file#readme",