@aligent/cdk-step-function-from-file@0.5.0

Minor Changes

• #1654 99d96c9 Thanks @kai-nguyen-aligent! - ### @aligent/cdk-nodejs-function-from-entry (minor)

  • Changed base class from Function to NodejsFunction — the construct now extends NodejsFunction (and accepts NodejsFunctionProps) instead of the generic Function, enabling Node.js-specific bundling options. The parent entry prop is omitted to avoid conflicts with the custom typed entry.
  • Added NoInfer to the entry generic parameter — prevents TypeScript from incorrectly inferring TPrefix from the entry value; the prefix is now inferred solely from sourcePrefix.
  • Made runtime optional — consumers no longer need to explicitly pass a runtime.
  • Improved path traversal validation — replaced the simple relative-path check with a findServiceRoot helper that walks up to a configurable rootParentDir ancestor, giving clearer error messages on invalid paths.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-step-function-from-file (minor)

  • Added NoInfer to the filepath generic parameter — prevents unintended type inference from the filepath value.
  • Improved path traversal validation — uses the same findServiceRoot approach as the Lambda construct for consistent, configurable path safety checks.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-aspects (patch)

  • Updated NodeJsFunctionDefaultsAspect JSDoc — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set.

@aligent/cdk-prerender-proxy@2.5.6

Patch Changes

• #1657 f41ba97 Thanks @aikido-autofix! - [Aikido] Fix 2 security issues in follow-redirects, axios

@aligent/cdk-nodejs-function-from-entry@0.2.0

Minor Changes

• #1654 99d96c9 Thanks @kai-nguyen-aligent! - ### @aligent/cdk-nodejs-function-from-entry (minor)

  • Changed base class from Function to NodejsFunction — the construct now extends NodejsFunction (and accepts NodejsFunctionProps) instead of the generic Function, enabling Node.js-specific bundling options. The parent entry prop is omitted to avoid conflicts with the custom typed entry.
  • Added NoInfer to the entry generic parameter — prevents TypeScript from incorrectly inferring TPrefix from the entry value; the prefix is now inferred solely from sourcePrefix.
  • Made runtime optional — consumers no longer need to explicitly pass a runtime.
  • Improved path traversal validation — replaced the simple relative-path check with a findServiceRoot helper that walks up to a configurable rootParentDir ancestor, giving clearer error messages on invalid paths.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-step-function-from-file (minor)

  • Added NoInfer to the filepath generic parameter — prevents unintended type inference from the filepath value.
  • Improved path traversal validation — uses the same findServiceRoot approach as the Lambda construct for consistent, configurable path safety checks.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-aspects (patch)

  • Updated NodeJsFunctionDefaultsAspect JSDoc — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set.

@aligent/cdk-header-change-detection@1.7.7

Patch Changes

• #1657 f41ba97 Thanks @aikido-autofix! - [Aikido] Fix 2 security issues in follow-redirects, axios

@aligent/cdk-aspects@0.5.3

Patch Changes

• #1661 25cf7c9 Thanks @toddhainsworth! - Fixed ResourcePrefixAspect failing synthesis when a prefixed resource name exceeds the AWS maximum length. The aspect now truncates the name and appends an 8-character SHA-256 hash to maintain uniqueness, and emits a cdk synth warning identifying the original and truncated name. This prevents L3 constructs (e.g. BucketDeployment) from generating child resources that the user has no control over causing failed deployments.

• #1654 99d96c9 Thanks @kai-nguyen-aligent! - ### @aligent/cdk-nodejs-function-from-entry (minor)

  • Changed base class from Function to NodejsFunction — the construct now extends NodejsFunction (and accepts NodejsFunctionProps) instead of the generic Function, enabling Node.js-specific bundling options. The parent entry prop is omitted to avoid conflicts with the custom typed entry.
  • Added NoInfer to the entry generic parameter — prevents TypeScript from incorrectly inferring TPrefix from the entry value; the prefix is now inferred solely from sourcePrefix.
  • Made runtime optional — consumers no longer need to explicitly pass a runtime.
  • Improved path traversal validation — replaced the simple relative-path check with a findServiceRoot helper that walks up to a configurable rootParentDir ancestor, giving clearer error messages on invalid paths.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-step-function-from-file (minor)

  • Added NoInfer to the filepath generic parameter — prevents unintended type inference from the filepath value.
  • Improved path traversal validation — uses the same findServiceRoot approach as the Lambda construct for consistent, configurable path safety checks.
  • Added rootParentDir prop (default: 'services') to control the allowed root for asset resolution.

  @aligent/cdk-aspects (patch)

  • Updated NodeJsFunctionDefaultsAspect JSDoc — clarified that the configured runtime is always applied to ensure consistency, while other defaults (tracing, memory, timeout, source maps) are only applied when not already set.

@aligent/cdk-nodejs-function-from-entry@0.1.0

Minor Changes

• #1643 486c193 Thanks @kai-nguyen-aligent! - Add NodejsFunctionFromEntry construct for type-safe Lambda function creation from entry files with automatic source-to-dist path resolution. Update StepFunctionFromFile to use a baseDir-relative filepath pattern with a typed prefix constraint, preventing file inclusion attacks.

Patch Changes

• #1649 cb58f6f Thanks @TheOrangePuff! - Align @types/node version with other packages to fix yarn lockfile immutability check in CI

@aligent/cdk-waf@2.5.3

Patch Changes

• #1622 57b9148 Thanks @dependabot! - chore(deps-dev): bump the dev-tools group across 1 directory with 4 updates

• #1633 9276087 Thanks @aikido-autofix! - [Aikido] Fix 5 security issues in yaml, minimatch, ajv

• #1634 38d563f Thanks @dependabot! - chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

• #1636 6805acb Thanks @aikido-autofix! - [Aikido] Fix security issue in aws-cdk-lib via minor version upgrade from 2.235.1 to 2.245.0

• #1638 7a8d347 Thanks @TheOrangePuff! - Update constructs peer dependency from ^10.3.0/^10.4.2 to ^10.5.0 to match aws-cdk-lib@2.245.0 requirements

@aligent/cdk-step-function-from-file@0.3.6

Patch Changes

• #1622 57b9148 Thanks @dependabot! - chore(deps-dev): bump the dev-tools group across 1 directory with 4 updates

• #1633 9276087 Thanks @aikido-autofix! - [Aikido] Fix 5 security issues in yaml, minimatch, ajv

• #1634 38d563f Thanks @dependabot! - chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

• #1636 6805acb Thanks @aikido-autofix! - [Aikido] Fix security issue in aws-cdk-lib via minor version upgrade from 2.235.1 to 2.245.0

• #1638 7a8d347 Thanks @TheOrangePuff! - Update constructs peer dependency from ^10.3.0/^10.4.2 to ^10.5.0 to match aws-cdk-lib@2.245.0 requirements

@aligent/cdk-static-hosting@2.11.5

Patch Changes

• #1622 57b9148 Thanks @dependabot! - chore(deps-dev): bump the dev-tools group across 1 directory with 4 updates

• #1633 9276087 Thanks @aikido-autofix! - [Aikido] Fix 5 security issues in yaml, minimatch, ajv

• #1634 38d563f Thanks @dependabot! - chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

• #1636 6805acb Thanks @aikido-autofix! - [Aikido] Fix security issue in aws-cdk-lib via minor version upgrade from 2.235.1 to 2.245.0

• #1638 7a8d347 Thanks @TheOrangePuff! - Update constructs peer dependency from ^10.3.0/^10.4.2 to ^10.5.0 to match aws-cdk-lib@2.245.0 requirements

@aligent/cdk-shared-vpc@0.3.5

Patch Changes

• #1622 57b9148 Thanks @dependabot! - chore(deps-dev): bump the dev-tools group across 1 directory with 4 updates

• #1633 9276087 Thanks @aikido-autofix! - [Aikido] Fix 5 security issues in yaml, minimatch, ajv

• #1634 38d563f Thanks @dependabot! - chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates

• #1636 6805acb Thanks @aikido-autofix! - [Aikido] Fix security issue in aws-cdk-lib via minor version upgrade from 2.235.1 to 2.245.0

• #1638 7a8d347 Thanks @TheOrangePuff! - Update constructs peer dependency from ^10.3.0/^10.4.2 to ^10.5.0 to match aws-cdk-lib@2.245.0 requirements