generated from amazon-archives/__template_Apache-2.0
-
Notifications
You must be signed in to change notification settings - Fork 33
Labels
internalMaintenance changesMaintenance changespending-releaseFix or implementation already in dev waiting to be releasedFix or implementation already in dev waiting to be released
Description
Summary
As per title, the aws-cdk and aws-cdk-lib haven't been updated in a long time due to Dependabot not being enabled for the npm ecosystem. This causes us to have some transitive dependencies containing CVEs in the CI.
Why is this needed?
We should manually update the CDK libraries and enable Dependabot for all package managers used in this project.
Which area does this relate to?
No response
Solution
No response
Acknowledgment
- This request meets Powertools for AWS Lambda (.NET) Tenets
Metadata
Metadata
Assignees
Labels
internalMaintenance changesMaintenance changespending-releaseFix or implementation already in dev waiting to be releasedFix or implementation already in dev waiting to be released