Bump cognito-at-edge from 1.5.2 to 1.5.3 in /files/deployable #9
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
TL;DR: no change to policy names or permissions, just terraform restructuring to avoid deprecation warnings. recent (>v5.68.0) versions of the aws provider throw deprecation warnings for inline policies. This change moves the inline policies to separate aws_iam_role_policy resources and converts the policies from inline jsonencode to iam_policy_documents I did consider adding aws_iam_role_policies_exclusive to prevent modification of the policies from outside terraform, but that would have forced the minimum version of the provider to v5.68.0 - felt like the possible disruption didn't justify the benefit.
by default the module grants Lambda@Edge rights to create CloudWatch log groups, which can cause a proliferation of log groups across multiple regions. This change: - adds a variable to control whether the lambda function has permissions to create log groups - adds the function name as an output, to support creation of log groups outside the module - adds docs to the README explaining the rationale no change to default behaviour of the module, this should be a non-breaking change ff
the config in SSM in us-east-1 can be slow to access, which causes sporadic 503 errors in regions far from us-east-1. This change adds a variable lambda_ship_config which defaults to false. If this variable is set to true, the json config will instead be written to a file and packaged/deployed with the lambda code - see the comments in the README for further rationale. default behaviour is to continue to use SSM, so this should be a non-breaking change.
…onal Make log group creation optional
…-in-lambda add option to include config in lambda package
I had coders remorse at shortening the output name in the last PR, this change retains the 1-1 mapping between the outputs of the function and the underlying resources.
chore: cosmetic fixups to outputs
Bumps [esbuild](https://github.com/evanw/esbuild) from 0.23.0 to 0.25.0. - [Release notes](https://github.com/evanw/esbuild/releases) - [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md) - [Commits](evanw/esbuild@v0.23.0...v0.25.0) --- updated-dependencies: - dependency-name: esbuild dependency-version: 0.25.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [axios](https://github.com/axios/axios) from 1.7.2 to 1.8.4. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.7.2...v1.8.4) --- updated-dependencies: - dependency-name: axios dependency-version: 1.8.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…s/deployable/axios-1.8.4 Bump axios from 1.7.2 to 1.8.4 in /files/deployable
…s/deployable/esbuild-0.25.0 Bump esbuild from 0.23.0 to 0.25.0 in /files/deployable
Bumps [cognito-at-edge](https://github.com/awslabs/cognito-at-edge) from 1.5.2 to 1.5.3. - [Release notes](https://github.com/awslabs/cognito-at-edge/releases) - [Changelog](https://github.com/awslabs/cognito-at-edge/blob/main/CHANGELOG.md) - [Commits](awslabs/cognito-at-edge@1.5.2...1.5.3) --- updated-dependencies: - dependency-name: cognito-at-edge dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Owner
|
@dependabot rebase |
Author
|
Looks like cognito-at-edge is up-to-date now, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/npm_and_yarn/files/deployable/cognito-at-edge-1.5.3
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps cognito-at-edge from 1.5.2 to 1.5.3.
Release notes
Sourced from cognito-at-edge's releases.
Changelog
Sourced from cognito-at-edge's changelog.
Commits
ec5fc9bRelease 1.5.3 (#100)23a1dd7chore: bump axios from 1.6.7 to 1.7.4 (#99)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)