chore(deps): bump @pulumi/awsx from 2.22.0 to 3.5.0 in /deploy/pulumi#726
chore(deps): bump @pulumi/awsx from 2.22.0 to 3.5.0 in /deploy/pulumi#726dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 214d766. Configure here.
| "dependencies": { | ||
| "@pulumi/aws": "^6.0.0", | ||
| "@pulumi/awsx": "^2.0.0", | ||
| "@pulumi/awsx": "^3.5.0", |
There was a problem hiding this comment.
Major awsx v3 likely incompatible with @pulumi/aws v6
Medium Severity
@pulumi/awsx is bumped from v2 to v3 (a major version change), but @pulumi/aws remains at ^6.0.0. The awsx v3 release notes indicate it was regenerated for @pulumi/aws 7.24.0, meaning v3 likely has a peer dependency on @pulumi/aws v7+. This version mismatch could cause npm install failures due to peer dependency conflicts or subtle runtime incompatibilities. The @pulumi/aws dependency needs to be bumped to v7 to match.
Reviewed by Cursor Bugbot for commit 214d766. Configure here.
Bumps [@pulumi/awsx](https://github.com/pulumi/pulumi-awsx) from 2.22.0 to 3.5.0. - [Release notes](https://github.com/pulumi/pulumi-awsx/releases) - [Changelog](https://github.com/pulumi/pulumi-awsx/blob/master/CHANGELOG_OLD.md) - [Commits](pulumi/pulumi-awsx@v2.22.0...v3.5.0) --- updated-dependencies: - dependency-name: "@pulumi/awsx" dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/deploy/pulumi/pulumi/awsx-3.5.0
branch
from
214d766 to
30e2fe0
Compare
Bumps @pulumi/awsx from 2.22.0 to 3.5.0.
Release notes
Sourced from
@pulumi/awsx's releases.... (truncated)
Commits
d4b0300Pass region through awsx.ec2.Vpc child resources (#1942)d4a1616Update GitHub Actions workflows. (#1931)3f4cb80Update GitHub Actions workflows. (#1925)c1ee76aUpdate workflows from source (#1924)016d221Update module github.com/go-jose/go-jose/v3 to v3.0.5 [SECURITY] (#1923)ed8ac5bFix classic exactOptionalPropertyTypes typings (#1922)32a86d6Filter generated SDK docs by language (#1920)881d696Regenerate awsx artifacts for@pulumi/aws7.24.0 (#1919)7edf59bUpdate vulnerable dependencies [SECURITY] (#1918)33fda4fRevert auto subnet default merging (#1916)Note
Medium Risk
Dependency-only change, but it upgrades
@pulumi/awsxacross a major version which can introduce breaking IaC behavior or provider defaults during deployments.Overview
Updates the Pulumi deployment package to use
@pulumi/awsx^3.5.0(from the^2.xline), pulling in the latest AWSX changes and security dependency updates.Reviewed by Cursor Bugbot for commit 30e2fe0. Bugbot is set up for automated code reviews on this repo. Configure here.