cloudposse / cloudposse/lambda-github-action-token-rotator

Dependency Dashboard

Offen
#5 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
Vorherrschende Sprache
TypeScript
Sterne
3
Forks
1
PR-Merge-Kennzahlen
Keine gemergten PRs in 30 T.

Beschreibung

This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.
[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/cloudposse/lambda-github-action-token-rotator).

## Config Migration Needed

- [ ] Select this checkbox to let Renovate create an automated Config Migration PR.

## Deprecations / Replacements
> [!WARNING]
The following dependencies are either deprecated or have replacements available.

| Datasource | Package | Replacement PR? |
|------------|------|--------------|
| npm | [crypto](https://redirect.github.com/npm/deprecate-holder) | ![Unavailable](https://img.shields.io/badge/unavailable-orange?style=flat-square) |

## Rate-Limited

The following updates are currently rate-limited. To force their creation now, click on a checkbox below.

- [ ] Update dependency eslint-config-prettier to v8.10.2
- [ ] Update actions/checkout action to v7
- [ ] Update actions/setup-node action to v7
- [ ] Update aws-actions/configure-aws-credentials action to v6
- [ ] Update cloudposse/github-action-auto-release action to v4
- [ ] Update dependency @types/node to v24
- [ ] Update dependency aws-sdk-client-mock to v4
- [ ] Update dependency dotenv to v17
- [ ] Update dependency eslint to v10
- [ ] Update dependency eslint-config-prettier to v10
- [ ] Update dependency eslint-plugin-sort-destructure-keys to v3
- [ ] Update dependency octokit to v5
- [ ] Update dependency prettier to v3
- [ ] Update dependency typescript to v7
- [ ] Update docker/metadata-action action to v6
- [ ] Update jest monorepo (major) (`@types/jest`, `jest`, `ts-jest`)
- [ ] Update Node.js to v24
- [ ] Update nx monorepo (major) (`@nrwl/cli`, `@nrwl/eslint-plugin-nx`, `@nrwl/jest`, `@nrwl/linter`, `@nrwl/node`, `@nrwl/workspace`, `nx`)
- [ ] Update public.ecr.aws/lambda/nodejs Docker tag to v24
- [ ] Update typescript-eslint monorepo to v8 (`@typescript-eslint/eslint-plugin`, `@typescript-eslint/parser`)
- [ ] 🔐 **Create all rate-limited PRs at once** 🔐

## Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

- [ ] [Update dependency @types/aws-lambda to v8.10.163](../pull/61)
- [ ] [Update dependency eslint to v8.57.1](../pull/51)
- [ ] [Update dependency @aws-sdk/client-ssm to v3.1132.0](../pull/52)
- [ ] [Update dependency @types/node to v20.19.43](../pull/37)
- [ ] [Update dependency dotenv to v16.6.1](../pull/50)
- [ ] [Update dependency eslint-plugin-import to v2.32.0](../pull/53)
- [ ] [Update dependency tslib to v2.8.1](../pull/56)
- [ ] [Update dependency winston to v3.19.0](../pull/57)
- [ ] [Update nx monorepo to v14.8.9](../pull/58) (`@nrwl/cli`, `@nrwl/eslint-plugin-nx`, `@nrwl/jest`, `@nrwl/linter`, `@nrwl/node`, `@nrwl/workspace`, `nx`)
- [ ] [Update amazonlinux Docker tag to v2023](../pull/35)
- [ ] **Click on this checkbox to rebase all open PRs at once**

## PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

- [ ] [Update mszostok/codeowners-validator action to v0.7.4](../pull/9)

## Detected Dependencies

dockerfile (2)

apps/token-rotator/Dockerfile (1)

- `public.ecr.aws/lambda/nodejs 16` → [Updates: `24`]

apps/token-rotator/Dockerfile.build (1)

- `amazonlinux 2022` → [Updates: `2023`]

github-actions (3)

.github/workflows/auto-release.yml (1)

- `cloudposse/github-action-auto-release v1` → [Updates: `v4`]

.github/workflows/lambda.yml (5)

- `actions/setup-node v4` → [Updates: `v7`]
- `actions/checkout v4` → [Updates: `v7`]
- `docker/metadata-action v5` → [Updates: `v6`]
- `aws-actions/configure-aws-credentials v4` → [Updates: `v6`]
- `node 16.x` → [Updates: `24.x`]

.github/workflows/validate-codeowners.yml (3)

- `actions/checkout v4` → [Updates: `v7`]
- `mszostok/codeowners-validator v0.5.0` → [Updates: `v0.7.4`]
- `mszostok/codeowners-validator v0.5.0` → [Updates: `v0.7.4`]

npm (1)

package.json (29)

- `@aws-sdk/client-ssm 3.525.0` → [Updates: `3.1132.0`]
- `crypto 1.0.1`
- `dotenv 16.4.5` → [Updates: `16.6.1`, `17.4.2`]
- `octokit 1.8.1` → [Updates: `5.0.5`]
- `tslib 2.4.0` → [Updates: `2.8.1`]
- `winston 3.11.0` → [Updates: `3.19.0`]
- `@nrwl/cli 14.4.3` → [Updates: `14.8.9`, `15.9.3`]
- `@nrwl/eslint-plugin-nx 14.4.3` → [Updates: `14.8.9`, `19.8.4`]
- `@nrwl/jest 14.4.3` → [Updates: `14.8.9`, `19.8.4`]
- `@nrwl/linter 14.4.3` → [Updates: `14.8.9`, `19.8.4`]
- `@nrwl/node 14.4.3` → [Updates: `14.8.9`, `19.8.4`]
- `@nrwl/workspace 14.4.3` → [Updates: `14.8.9`, `19.8.4`]
- `@types/aws-lambda 8.10.147` → [Updates: `8.10.163`]
- `@types/jest 27.5.2` → [Updates: `30.0.0`]
- `@types/node *` → [Updates: `*`]
- `@typescript-eslint/eslint-plugin 5.62.0` → [Updates: `8.70.0`]
- `@typescript-eslint/parser 5.62.0` → [Updates: `8.70.0`]
- `aws-sdk-client-mock 1.0.0` → [Updates: `4.1.0`]
- `eslint 8.57.0` → [Updates: `8.57.1`, `10.10.0`]
- `eslint-config-prettier 8.10.0` → [Updates: `8.10.2`, `10.1.8`]
- `eslint-plugin-import 2.29.1` → [Updates: `2.32.0`]
- `eslint-plugin-sort-destructure-keys 1.6.0` → [Updates: `3.0.0`]
- `jest 27.5.1` → [Updates: `30.5.1`]
- `lambda-tester 4.0.1`
- `nx 14.4.3` → [Updates: `14.8.9`, `23.2.1`]
- `prettier 2.8.8` → [Updates: `3.9.6`]
- `ts-jest 27.1.5` → [Updates: `29.4.12`]
- `ts-node 10.9.2`
- `typescript 4.9.5` → [Updates: `7.0.2`]

nvm (1)

.nvmrc (1)

- `node Gallium` → [Updates: `krypton`]

---

- [ ] Check this box to trigger a request for Renovate to run again on this repository

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Überprüfe die Einträge im Renovate-Dashboard und die genannten Dateien: package.json, die Dockerfiles unter apps/token-rotator, die GitHub Actions-Workflows und .nvmrc. Vergleiche die vorhandenen Abhängigkeitsversionen mit den aufgeführten Aktualisierungen und den zugehörigen Pull Requests. Die Arbeit ist abgeschlossen, wenn ausgewählte Upgrades sicher angewendet wurden und das Dashboard sie nicht mehr als ausstehend auflistet.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
aws, docker, github-actions, node.js, typescript
Bereich
ci-cd, cloud, devops, tooling
Issue-Typ
Refactoring
Schwierigkeit
5/5
Geschätzter Aufwand
Über eine Woche
Aktivitätsstatus
Veraltet
Klarheit
Muss geklärt werden
Anfängerfreundlichkeit
15/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.