Merge branch 'main' into dependabot/npm_and_yarn/lambdas/nx-4cd19ff7b8

Author: npalm

.github/workflows/codeql.yml

@@ -38,12 +38,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
+      uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
       with:
         languages: ${{ matrix.language }}
         build-mode: none
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
+      uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/dependency-review.yml

@@ -29,6 +29,6 @@ jobs:
         with:
           persist-credentials: false
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
         with:
           comment-summary-in-pr: always

.github/workflows/ossf-scorecard.yml

@@ -49,6 +49,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6
+        uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           sarif_file: results.sarif

lambdas/functions/ami-housekeeper/package.json

@@ -26,8 +26,8 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-sdk/client-ec2": "^3.901.0",
-    "@aws-sdk/client-ssm": "^3.901.0",
+    "@aws-sdk/client-ec2": "^3.909.0",
+    "@aws-sdk/client-ssm": "^3.908.0",
     "cron-parser": "^5.4.0"
   },
   "nx": {

lambdas/functions/control-plane/package.json

@@ -33,8 +33,8 @@
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
     "@aws-lambda-powertools/parameters": "^2.27.0",
-    "@aws-sdk/client-ec2": "^3.901.0",
-    "@aws-sdk/client-sqs": "^3.901.0",
+    "@aws-sdk/client-ec2": "^3.909.0",
+    "@aws-sdk/client-sqs": "^3.908.0",
     "@middy/core": "^6.4.5",
     "@octokit/auth-app": "8.1.1",
     "@octokit/core": "7.0.5",

lambdas/functions/gh-agent-syncer/package.json

@@ -28,8 +28,8 @@
   },
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
-    "@aws-sdk/client-s3": "^3.901.0",
-    "@aws-sdk/lib-storage": "^3.903.0",
+    "@aws-sdk/client-s3": "^3.908.0",
+    "@aws-sdk/lib-storage": "^3.908.0",
     "@middy/core": "^6.4.5",
     "@octokit/rest": "22.0.0",
     "axios": "^1.12.2"

lambdas/functions/termination-watcher/package.json

@@ -24,7 +24,7 @@
   },
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
-    "@aws-sdk/client-ec2": "^3.901.0",
+    "@aws-sdk/client-ec2": "^3.909.0",
     "@middy/core": "^6.4.5"
   },
   "nx": {

lambdas/functions/webhook/package.json

@@ -17,7 +17,7 @@
     "all": "yarn build && yarn format && yarn lint && yarn test"
   },
   "devDependencies": {
-    "@aws-sdk/client-eventbridge": "^3.901.0",
+    "@aws-sdk/client-eventbridge": "^3.908.0",
     "@octokit/webhooks-types": "^7.6.1",
     "@types/aws-lambda": "^8.10.155",
     "@types/express": "^5.0.3",
@@ -30,7 +30,7 @@
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
     "@aws-github-runner/aws-ssm-util": "*",
-    "@aws-sdk/client-sqs": "^3.901.0",
+    "@aws-sdk/client-sqs": "^3.908.0",
     "@middy/core": "^6.4.5",
     "@octokit/rest": "22.0.0",
     "@octokit/types": "^15.0.0",

lambdas/libs/aws-ssm-util/package.json

@@ -23,7 +23,7 @@
   },
   "dependencies": {
     "@aws-github-runner/aws-powertools-util": "*",
-    "@aws-sdk/client-ssm": "^3.901.0"
+    "@aws-sdk/client-ssm": "^3.908.0"
   },
   "nx": {
     "includedScripts": [

lambdas/package.json

@@ -33,7 +33,7 @@
     "@swc/helpers": "~0.5.17",
     "@trivago/prettier-plugin-sort-imports": "^5.2.2",
     "@typescript-eslint/eslint-plugin": "^8.46.0",
-    "@typescript-eslint/parser": "^8.46.0",
+    "@typescript-eslint/parser": "^8.46.1",
     "@vitest/coverage-v8": "^3.2.4",
     "chalk": "^5.6.2",
     "eslint": "^9.37.0",