fix(deps): update all non-major dependencies

[cu-infra-svc-git]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@time-loop/clickup-projen	^0.0.93 -> ^0.0.95
aws-sdk	^2.1312.0 -> ^2.1313.0
esbuild	^0.17.7 -> ^0.17.8
jsii-release	^0.2.591 -> ^0.2.593
projen	^0.67.48 -> ^0.67.50

---

Release Notes

time-loop/clickup-projen

v0.0.95

Compare Source

0.0.95 (2023-02-13)

v0.0.94

Compare Source

0.0.94 (2023-02-11)

Features

• inbox: Add cdk-diff workflow (#​112) (1735e8e)

aws/aws-sdk-js

v2.1313.0

Compare Source

• feature: AutoScaling: You can now either terminate/replace, ignore, or wait for EC2 Auto Scaling instances on standby or protected from scale in. Also, you can also roll back changes from a failed instance refresh.
• feature: Connect: This update provides the Wisdom session ARN for contacts enabled for Wisdom in the chat channel.
• feature: EC2: Adds support for waiters that automatically poll for an imported snapshot until it reaches the completed state.
• feature: Polly: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
• feature: SageMaker: Amazon SageMaker Autopilot adds support for selecting algorithms in CreateAutoMLJob API.

evanw/esbuild

v0.17.8

Compare Source

• Fix a minification bug with non-ASCII identifiers (#​2910)

  This release fixes a bug with esbuild where non-ASCII identifiers followed by a keyword were incorrectly not separated by a space. This bug affected both the in and instanceof keywords. Here's an example of the fix:

  // Original code
  π in a
  
  // Old output (with --minify --charset=utf8)
  πin a;
  
  // New output (with --minify --charset=utf8)
  π in a;

• Fix a regression with esbuild's WebAssembly API in version 0.17.6 (#​2911)

  Version 0.17.6 of esbuild updated the Go toolchain to version 1.20.0. This had the unfortunate side effect of increasing the amount of stack space that esbuild uses (presumably due to some changes to Go's WebAssembly implementation) which could cause esbuild's WebAssembly-based API to crash with a stack overflow in cases where it previously didn't crash. One such case is the package grapheme-splitter which contains code that looks like this:

  if (
    (0x0300 <= code && code <= 0x036F) ||
    (0x0483 <= code && code <= 0x0487) ||
    (0x0488 <= code && code <= 0x0489) ||
    (0x0591 <= code && code <= 0x05BD) ||
    // ... many hundreds of lines later ...
  ) {
    return;
  }

  This edge case involves a chain of binary operators that results in an AST over 400 nodes deep. Normally this wouldn't be a problem because Go has growable call stacks, so the call stack would just grow to be as large as needed. However, WebAssembly byte code deliberately doesn't expose the ability to manipulate the stack pointer, so Go's WebAssembly translation is forced to use the fixed-size WebAssembly call stack. So esbuild's WebAssembly implementation is vulnerable to stack overflow in cases like these.

  It's not unreasonable for this to cause a stack overflow, and for esbuild's answer to this problem to be "don't write code like this." That's how many other AST-manipulation tools handle this problem. However, it's possible to implement AST traversal using iteration instead of recursion to work around limited call stack space. This version of esbuild implements this code transformation for esbuild's JavaScript parser and printer, so esbuild's WebAssembly implementation is now able to process the grapheme-splitter package (at least when compiled with Go 1.20.0 and run with node's WebAssembly implementation).

cdklabs/publib

v0.2.593

Compare Source

0.2.593 (2023-02-12)

v0.2.592

Compare Source

0.2.592 (2023-02-11)

projen/projen

v0.67.50

Compare Source

0.67.50 (2023-02-12)

v0.67.49

Compare Source

0.67.49 (2023-02-11)

---

Configuration

📅 Schedule: Branch creation - "before 1am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[codecov]

Codecov Report

❗ No coverage uploaded for pull request base (main@aa57cba). Click here to learn what that means.
The diff coverage is n/a.

Additional details and impacted files

@@          Coverage Diff           @@
##             main      #2   +/-   ##
======================================
  Coverage        ?   0.00%           
======================================
  Files           ?       2           
  Lines           ?      92           
  Branches        ?       2           
======================================
  Hits            ?       0           
  Misses          ?      90           
  Partials        ?       2           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update aa57cba...d2c2496. Read the comment docs.