Skip to content

chore(deps): bump aws-sdk and serverless#13

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-edbe37917d
Open

chore(deps): bump aws-sdk and serverless#13
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-edbe37917d

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 9, 2026

Removes aws-sdk. It's no longer used after updating ancestor dependency serverless. These dependencies need to be updated together.

Removes aws-sdk

Updates serverless from 1.55.1 to 4.30.0

Release notes

Sourced from serverless's releases.

4.30.0

Features

  • Serverless Framework
    • Added native AWS AppSync support directly in the Serverless Framework. This integration brings the functionality of the popular serverless-appsync-plugin into core, providing first-class support for deploying GraphQL APIs with AWS AppSync. Read more in our docs. (#13217)

      appSync:
        name: my-api
        schema: schema.graphql
        authentication:
          type: API_KEY
        dataSources:
          myTable:
            type: AMAZON_DYNAMODB
            config:
              tableName: !Ref MyTable
        resolvers:
          Query.getUser:
            dataSource: myTable
    • Added sls login aws sso command to authenticate with AWS using IAM Identity Center (SSO). Read more in our docs. (#13221)

      sls login aws sso --sso-session my-session
    • Added support for Ruby 3.4 runtime (ruby3.4). (#13215) - Thanks @​dakatsuka!

Bug Fixes

  • Serverless Framework

    • Fixed custom domain deployment failing when using --aws-profile credentials by migrating the domain plugin to AWS SDK v3 (#13109, #13178).
    • Fixed sls deploy failing with "Cannot find 'serverless-compose.yml|yaml'" for deeply nested service paths when using the esbuild plugin (#13201).
    • Fixed stale code deployment when using uv as the Python package installer by auto-reinstalling local packages based on their pyproject.toml name (#13169).
    • Fixed unhelpful "Stack with id does not exist" error when stack creation fails due to invalid Fn::ImportValue references. The framework now properly detects and reports the underlying CloudFormation error. Also fixed serverless deploy --verbose hanging when disableRollback: true is set (#13181).
    • Fixed regression in TypeScript type definitions where Resources only accepted Fn::Transform keys instead of arbitrary resource names (#13183).
  • Serverless Container Framework

    • Fixed handling of multiple DNS validation records for ACM certificates in multi-domain configurations (#13206).

Maintenance

  • Updated multiple dependencies including AWS SDK packages and upgraded @modelcontextprotocol/sdk to v1.25.2 which includes a security fix (#13216, CVE-2026-0621).

4.29.4

Bux Fixes

  • Serverless MCP
    • Added validation for docs path in docs tool

... (truncated)

Changelog

Sourced from serverless's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

3.38.0 (2023-11-21)

Features

3.37.0 (2023-11-16)

Features

Bug Fixes

3.36.0 (2023-10-23)

Features

  • Improved dashboard documentation and gitignore (#12176) (eb462ed)

Bug Fixes

  • Dashboard documentation improvements (bb4d7c8)
  • Fix menu for dashboard documentation (8f266af)
  • Improve dashboard documentation (ad8bbf1)
  • Improve dashboard documentation (f67df7f)
  • Minor dashboard doc improvements (#12177) (f1fa19c)

3.35.2 (2023-09-16)

Bug Fixes

3.35.1 (2023-09-16)

Bug Fixes

3.35.0 (2023-09-15)

Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for serverless since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [aws-sdk](https://github.com/aws/aws-sdk-js). It's no longer used after updating ancestor dependency [serverless](https://github.com/serverless/serverless). These dependencies need to be updated together.


Removes `aws-sdk`

Updates `serverless` from 1.55.1 to 4.30.0
- [Release notes](https://github.com/serverless/serverless/releases)
- [Changelog](https://github.com/serverless/serverless/blob/main/CHANGELOG.md)
- [Commits](https://github.com/serverless/serverless/compare/v1.55.1...sf-core@4.30.0)

---
updated-dependencies:
- dependency-name: aws-sdk
  dependency-version: 
  dependency-type: indirect
- dependency-name: serverless
  dependency-version: 4.30.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants