chore(ci): update nx and review dependencies workflow

.github/workflows/dependency-review.yml

@@ -9,12 +9,14 @@
 name: 'Dependency Review'
 on: [pull_request]
 
-permissions:
-  contents: read
+permissions: {}
 
 jobs:
   dependency-review:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
         uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
@@ -27,3 +29,5 @@ jobs:
           persist-credentials: false
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1
+        with:
+          comment-summary-in-pr: always

lambdas/functions/control-plane/package.json

@@ -20,7 +20,7 @@
     "@aws-sdk/types": "^3.840.0",
     "@octokit/types": "^14.1.0",
     "@types/aws-lambda": "^8.10.147",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "@vercel/ncc": "^0.38.3",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0",

lambdas/functions/gh-agent-syncer/package.json

@@ -19,7 +19,7 @@
   "devDependencies": {
     "@aws-sdk/types": "^3.840.0",
     "@types/aws-lambda": "^8.10.147",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "@types/request": "^2.48.12",
     "@vercel/ncc": "^0.38.3",
     "aws-sdk-client-mock": "^4.1.0",

lambdas/functions/termination-watcher/package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "@aws-sdk/types": "^3.840.0",
     "@types/aws-lambda": "^8.10.147",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "@vercel/ncc": "^0.38.3",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0"

lambdas/functions/webhook/package.json

@@ -21,7 +21,7 @@
     "@octokit/webhooks-types": "^7.6.1",
     "@types/aws-lambda": "^8.10.147",
     "@types/express": "^5.0.0",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "@vercel/ncc": "0.38.3",
     "body-parser": "^2.2.0",
     "express": "^5.1.0",

lambdas/libs/aws-powertools-util/package.json

@@ -16,7 +16,7 @@
   },
   "devDependencies": {
     "@types/aws-lambda": "^8.10.147",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "body-parser": "^2.2.0"
   },
   "dependencies": {

lambdas/libs/aws-ssm-util/package.json

@@ -17,7 +17,7 @@
   "devDependencies": {
     "@aws-sdk/types": "^3.840.0",
     "@types/aws-lambda": "^8.10.147",
-    "@types/node": "^22.14.0",
+    "@types/node": "^22.16.5",
     "aws-sdk-client-mock": "^4.1.0",
     "aws-sdk-client-mock-jest": "^4.1.0"
   },

lambdas/package.json

@@ -22,11 +22,11 @@
   },
   "devDependencies": {
     "@eslint/eslintrc": "^3.3.1",
-    "@nx/eslint": "20.8.2",
-    "@nx/js": "^20.8.2",
-    "@nx/vite": "^20.8.2",
+    "@nx/eslint": "21.3.2",
+    "@nx/js": "^21.3.2",
+    "@nx/vite": "^21.3.2",
     "@swc-node/register": "~1.10.10",
-    "@swc/core": "~1.11.21",
+    "@swc/core": "~1.13.1",
     "@swc/helpers": "~0.5.17",
     "@trivago/prettier-plugin-sort-imports": "^5.2.2",
     "@typescript-eslint/eslint-plugin": "^8.35.1",
@@ -35,7 +35,7 @@
     "chalk": "^5.4.1",
     "eslint": "^9.31.0",
     "eslint-plugin-prettier": "5.5.1",
-    "nx": "20.8.2",
+    "nx": "21.3.2",
     "prettier": "^3.5.3",
     "ts-node": "^10.9.2",
     "ts-node-dev": "^2.0.0",