Skip to content

Bump the npm group across 2 directories with 6 updates - #240

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/example/npm-13273378c2
Aug 5, 2026
Merged

Bump the npm group across 2 directories with 6 updates#240
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/example/npm-13273378c2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 5, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 6 updates in the /example directory:

Package From To
aws-cdk-lib 2.261.0 2.262.1
@hono/node-server 2.0.11 2.0.12
@types/node 25.9.5 26.1.2
aws-cdk 2.1132.0 2.1133.0
eslint 10.7.0 10.8.0
eslint-plugin-awscdk 4.3.3 4.4.0

Bumps the npm group with 2 updates in the /package directory: @types/node and eslint.

Updates aws-cdk-lib from 2.261.0 to 2.262.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.262.1

Bug Fixes

  • core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
  • core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

  • ecs: add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689) (ad665c4)
  • mediaconnect: l2 construct (#37945) (8e9e001)
  • update L1 CloudFormation resource definitions (#38275) (2b1c632)
  • apigateway: alb integration (#36247) (20dbdd9), closes #36184
  • bedrockagentcore: support service/region in IAM credential provider for gateway targets (#37697) (08a2543), closes #37696
  • cloudfront: add Managed-HostHeaderOnly origin request policy (#38236) (0e66e47), closes #38234
  • core: templates are validated against a comprehensive default rule set (#38135) (023c5bf)

Bug Fixes

Reverts


Alpha modules (2.262.0-alpha.0)

Bug Fixes

  • redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

Bug Fixes

2.262.2-alpha.0 (2026-07-29)

2.262.1-alpha.0 (2026-07-23)

2.262.0-alpha.0 (2026-07-22)

Bug Fixes

  • redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

2.261.0-alpha.0 (2026-07-02)

Features

  • metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

  • integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

... (truncated)

Commits
  • d409b96 fix(core): bump @aws/cloudformation-validate to 1.5.1-beta to fix install o...
  • cc4208c fix(core): env CDK_VALIDATION=false does not disable built-in template valida...
  • dd8ac9f Merge remote-tracking branch 'origin/v2-release' into bump/2.262.0
  • 7e00626 chore(release): 2.262.0
  • db98909 fix: cross-stack warnings are emitted for nested stacks (#38355)
  • 3f9422f fix(validation): incorrectly relative paths in Cloud Assemblies (#38352)
  • 0af7c34 fix(core): stack-related validation has an empty construct path (#38350)
  • 5d11d70 fix(validation): validation reports are not self-contained (#38333)
  • 813b790 chore(core): upgrade @​aws/cloudformation-validate to 1.5.0-beta and and updat...
  • 0728618 fix(core): stack.node.addDependency gets slower as stacks grow (#38314)
  • Additional commits viewable in compare view

Updates @hono/node-server from 2.0.11 to 2.0.12

Release notes

Sourced from @​hono/node-server's releases.

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

Commits

Updates @types/node from 25.9.5 to 26.1.2

Commits

Updates aws-cdk from 2.1132.0 to 2.1133.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1133.0

2.1133.0 (2026-07-23)

Features

  • cdk-explorer: advertise LSP feature and protocol manifest (#1750) (70cf0e3)
  • deps: upgrade aws-cdk-lib (#1752) (2810a54)

Bug Fixes

aws-cdk@v2.1132.1

2.1132.1 (2026-07-22)

Bug Fixes

  • cannot debug performance issues of internal projects (#1736) (56aea57)
  • cli: entire violation report is printed in red (#1742) (c670960)
  • toolkit-lib: support cdk orphan for resources inside a stage (#1733) (9398ed0), closes #1727
Commits
  • 712d792 fix(cli): forward --no-validation to the app process via CDK_VALIDATION (#1756)
  • 2810a54 feat(deps): upgrade aws-cdk-lib (#1752)
  • 09f70ce docs: update TypeScript examples from ts-node to tsx (#1749)
  • 70cf0e3 feat(cdk-explorer): advertise LSP feature and protocol manifest (#1750)
  • fbb26df docs(cli): document the cdk lsp command in the CLI README (#1743)
  • 56aea57 fix: cannot debug performance issues of internal projects (#1736)
  • c670960 fix(cli): entire violation report is printed in red (#1742)
  • 9398ed0 fix(toolkit-lib): support cdk orphan for resources inside a stage (#1733)
  • See full diff in compare view

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates eslint-plugin-awscdk from 4.3.3 to 4.4.0

Release notes

Sourced from eslint-plugin-awscdk's releases.

eslint-plugin-awscdk: v4.4.0

4.4.0 (2026-07-22)

Features

Bug Fixes

  • allow default value for props in construct-constructor-property (#510) (3a787ae)
  • update links and copy to reflect awscdk-lint repo rename (#484) (df44ac2)
  • update repository URLs to reflect package renaming to awscdk-lint (#481) (81c3cf2)
Commits
  • b14f45d chore(main): release eslint-plugin-awscdk 4.4.0 (#483)
  • 916ff29 chore: bump Node.js to 24.18.0 (#512)
  • 1a70169 chore(main): release oxlint-plugin-awscdk 0.1.4 (#500)
  • 3a787ae fix: allow default value for props in construct-constructor-property (#510)
  • 5c74684 chore: bump actions/setup-node from 6.4.0 to 7.0.0 in the actions group (#506)
  • ec412bb chore: bump the dependencies group across 1 directory with 5 updates (#504)
  • 7beb8a2 fix(oxlint-plugin-awscdk): pass resolveFrom anchor to corsa-oxlint definePlug...
  • 7916e7e chore: bump voidzero-dev/setup-vp in the actions group (#501)
  • 4bdcf38 fix(oxlint-plugin-awscdk): drop safeGetSymbolOfType after corsa-oxlint 0.50.0...
  • 99a611a chore: bump the dependencies group across 1 directory with 13 updates (#498)
  • Additional commits viewable in compare view

Updates @types/node from 25.9.5 to 26.1.2

Commits

Updates eslint from 10.7.0 to 10.8.0

Release notes

Sourced from eslint's releases.

v10.8.0

Features

  • 2fee9bb feat: export ConfigObject from eslint/config (#21082) (sethamus)

Bug Fixes

  • 6b8d2f7 fix: escape reserved characters in rule id in html formatter (#21129) (Francesco Trotta)
  • 9091071 fix: prevent no-unreachable-loop crash when all loop types are ignored (#21116) (Pixel)
  • e23fafe fix: prefer-object-spread add semicolon when adding parenthesis (#21081) (synthex-byte)
  • 20b5ad0 fix: quadratic-time regex in prefer-template (#21096) (Milos Djermanovic)
  • 8b6f6c0 fix: apply ignore configs to computed methods in class-methods-use-this (#21094) (Pixel)
  • b2c608c fix: NewExpression with parenthesized callee in preserve-caught-error (#21083) (Francesco Trotta)

Documentation

  • 6ddf858 docs: fix broken Specify Parser Options anchor link (#21106) (Minsu)
  • 784dfbe docs: Clarify no-eq-null description (#21120) (Park Harin)
  • 7ec733a docs: Fix typos and grammar in glossary (#21095) (Marry (Subin Yang))
  • 92bb13f docs: replace quake link (#21108) (Jung Hyeon Jun)
  • 68eb4a5 docs: fix broken Specify Globals anchor links in rule pages (#21103) (Minsu)
  • d28f697 docs: replace Code Climate CLI links with Qlty CLI links (#21099) (Jung Hyeon Jun)
  • eccc68d docs: correct --suppressions-location option description (#21093) (Ga eun Lee)
  • c5963f7 docs: Update README (GitHub Actions Bot)

Chores

  • 4fbf46d test: pin webpack version to 5.108.4 (#21137) (Francesco Trotta)
  • 2d063e2 chore: update HTTP URLs to HTTPS in JSDoc and comments (#21101) (Bo Hyun Kim)
  • eccbe7b test: add error locations to no-class-assign (#21123) (devoil)
  • e7d1e43 ci: bump actions/setup-go from 6 to 7 (#21118) (dependabot[bot])
  • e9d66d0 ci: bump actions/setup-node from 6 to 7 (#21119) (dependabot[bot])
  • ee225b6 test: Add error location details to no-eq-null rule (#21117) (Park Harin)
  • 044a627 chore: update minimatch to ^10.2.5 (#21107) (김채영)
  • fb09aa8 chore: update ecosystem plugins (#21115) (ESLint Bot)
  • 5abd878 test: add error locations to no-proto (#21114) (Gihyeon Jeong / 정기현)
  • 9715887 test: Add error location details to no-div-regex (#21110) (Park Harin)
  • a746ec6 test: add error locations to no-new-wrappers (#21109) (Gihyeon Jeong / 정기현)
  • 8dde645 test: add error locations to no-ex-assign (#21102) (devoil)
  • 13ab0ec test: add error locations to no-label-var (#21098) (Gihyeon Jeong / 정기현)
  • a99906f test: Add error location details to no-delete-var rule (#21105) (Park Harin)
  • c47e8dc chore: add missing backticks to languages/js/index.js (#21104) (beeen)
  • 0174428 chore: add missing backticks to translate-cli-options.js (#21097) (dongkyu lee)
  • 3d36589 chore: add missing backticks to serialization.js (#21091) (이규환)
  • dcc9312 test: add error locations to eqeqeq (#21090) (Ga eun Lee)
  • 2710b18 ci: Add explicit permissions to rebuild-docs-sites workflow (#21089) (Marry (Subin Yang))
  • 5d2f866 chore: update dependency prettier to v3.9.5 (#21086) (renovate[bot])
  • d584e31 chore: fix failing ecosystem test for eslint-plugin-unicorn (#21084) (Francesco Trotta)
  • bf3eda0 chore: update ecosystem plugins (#21079) (ESLint Bot)
Commits

Updates @hono/node-server from 2.0.11 to 2.0.12

Release notes

Sourced from @​hono/node-server's releases.

v2.0.12

What's Changed

Full Changelog: honojs/node-server@v2.0.11...v2.0.12

Commits

Updates aws-cdk-lib from 2.261.0 to 2.262.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.262.1

Bug Fixes

  • core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
  • core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

  • ecs: add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689) (ad665c4)
  • mediaconnect: l2 construct (#37945) (8e9e001)
  • update L1 CloudFormation resource definitions (#38275) (2b1c632)
  • apigateway: alb integration (#36247) (20dbdd9), closes #36184
  • bedrockagentcore: support service/region in IAM credential provider for gateway targets (#37697) (08a2543), closes #37696
  • cloudfront: add Managed-HostHeaderOnly origin request policy (#38236) (0e66e47), closes #38234
  • core: templates are validated against a comprehensive default rule set (#38135) (023c5bf)

Bug Fixes

Bumps the npm group with 6 updates in the /example directory:

| Package | From | To |
| --- | --- | --- |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.261.0` | `2.262.1` |
| [@hono/node-server](https://github.com/honojs/node-server) | `2.0.11` | `2.0.12` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.9.5` | `26.1.2` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1132.0` | `2.1133.0` |
| [eslint](https://github.com/eslint/eslint) | `10.7.0` | `10.8.0` |
| [eslint-plugin-awscdk](https://github.com/ren-yamanashi/awscdk-lint) | `4.3.3` | `4.4.0` |

Bumps the npm group with 2 updates in the /package directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [eslint](https://github.com/eslint/eslint).


Updates `aws-cdk-lib` from 2.261.0 to 2.262.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.262.1/packages/aws-cdk-lib)

Updates `@hono/node-server` from 2.0.11 to 2.0.12
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.11...v2.0.12)

Updates `@types/node` from 25.9.5 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `aws-cdk` from 2.1132.0 to 2.1133.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1133.0/packages/aws-cdk)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `eslint-plugin-awscdk` from 4.3.3 to 4.4.0
- [Release notes](https://github.com/ren-yamanashi/awscdk-lint/releases)
- [Commits](https://github.com/ren-yamanashi/awscdk-lint/compare/v4.3.3...eslint-plugin-awscdk@4.4.0)

Updates `@types/node` from 25.9.5 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `@hono/node-server` from 2.0.11 to 2.0.12
- [Release notes](https://github.com/honojs/node-server/releases)
- [Commits](honojs/node-server@v2.0.11...v2.0.12)

Updates `aws-cdk-lib` from 2.261.0 to 2.262.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.262.1/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1132.0 to 2.1133.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1133.0/packages/aws-cdk)

Updates `eslint-plugin-awscdk` from 4.3.3 to 4.4.0
- [Release notes](https://github.com/ren-yamanashi/awscdk-lint/releases)
- [Commits](https://github.com/ren-yamanashi/awscdk-lint/compare/v4.3.3...eslint-plugin-awscdk@4.4.0)

Updates `@types/node` from 25.9.5 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

Updates `@types/node` from 25.9.5 to 26.1.2
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `eslint` from 10.7.0 to 10.8.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Commits](eslint/eslint@v10.7.0...v10.8.0)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.262.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1133.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-plugin-awscdk
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@hono/node-server"
  dependency-version: 2.0.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.262.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1133.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: eslint-plugin-awscdk
  dependency-version: 4.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 26.1.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: eslint
  dependency-version: 10.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot assigned poad Aug 5, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 5, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 5, 2026 14:02
@github-actions

github-actions Bot commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@hono/node-server 2.0.12 UnknownUnknown
npm/@types/node 26.1.2 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 9Found 28/29 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 9license file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk 2.1133.0 UnknownUnknown
npm/aws-cdk-lib 2.262.1 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
npm/eslint 10.8.0 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 8Found 22/27 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/eslint-plugin-awscdk 4.4.0 UnknownUnknown
npm/@types/node 26.1.2 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 9Found 28/29 approved changesets -- score normalized to 9
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
License🟢 9license file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/eslint 10.8.0 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 8Found 22/27 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Signed-Releases⚠️ -1no releases found
Branch-Protection🟢 5branch protection is not maximal on development and all release branches
Security-Policy🟢 10security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits

Scanned Files

  • example/package.json
  • package/package.json

@github-actions
github-actions Bot merged commit 7a76436 into main Aug 5, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/example/npm-13273378c2 branch August 5, 2026 14:03
This was referenced Aug 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant