Update dependencies

[erayaydin]

This pull request updates dependencies and fixes security alerts.

Package Updates

e2e > infra

• Changed @types/node development dependency version identifier from ^20.11.24 to ^20.17.12
• Changed @pulumi/aws dependency version identifier from ^6.24.0 to ^6.66.3
• Changed @pulumi/awsx dependency version identifier from ^2.5.0 to ^2.19.0
• Changed @pulumi/pulumi dependency version identifier from ^3.107.0 to ^3.145.0

e2e > tests

• Changed @playwright/test development dependency version identifier from ^1.42.0 to ^1.49.1

e2e > website

• Changed @types/node development dependency version identifier from ^20.11.24 to ^20.17.12
• Changed dotenv development dependency version identifier from ^16.4.5 to ^16.4.7
• Changed html-webpack-plugin development dependency version identifier from ^5.6.0 to ^5.6.3
• Changed terser-webpack-plugin development dependency version identifier from ^5.3.10 to ^5.3.11
• Changed ts-loader development dependency version identifier from ^9.5.1 to ^9.5.2
• Changed webpack development dependency version identifier from ^5.90.3 to ^5.97.1
• Changed webpack-dev-server development dependency version identifier from ^5.0.2 to ^5.2.0
• Changed @fingerprintjs/fingerprintjs-pro dependency version identifier from ^3.9.0 to ^3.11.6

workspace-root

• Changed @aws-sdk/client-cloudfront dependency version identifier from ^3.515.0 to ^3.726.1
• Changed @aws-sdk/client-lambda dependency version identifier from ^3.515.0 to ^3.726.1
• Changed @aws-sdk/client-secrets-manager dependency version identifier from ^3.515.0 to ^3.726.1
• Changed @aws-sdk/client-s3 development dependency version identifier from ^3.515.0 to ^3.726.1
• Changed @rollup/plugin-commonjs development dependency version identifier from ^25.0.7 to ^25.0.8
• Changed @rollup/plugin-node-resolve development dependency version identifier from ^15.2.3 to ^15.3.1
• Changed @rollup/plugin-replace development dependency version identifier from ^5.0.5 to ^5.0.7
• Changed @types/aws-lambda development dependency version identifier from ^8.10.133 to ^8.10.147
• Changed @types/jest development dependency version identifier from ^29.5.12 to ^29.5.14
• Changed @types/node development dependency version identifier from ^20.11.19 to ^20.17.12
• Changed adm-zip development dependency version identifier from ^0.5.10 to ^0.5.16
• Changed aws-sdk-client-mock development dependency version identifier from ^3.0.1 to ^3.1.0
• Changed aws-sdk-client-mock-jest development dependency version identifier from ^3.0.1 to ^3.1.0
• Changed commitizen development dependency version identifier from ^4.3.0 to ^4.3.1
• Changed dotenv development dependency version identifier from ^16.4.4 to ^16.4.7
• Changed lint-staged development dependency version identifier from ^15.2.2 to ^15.3.0
• Changed prettier development dependency version identifier from ^3.2.5 to ^3.4.2
• Changed rimraf development dependency version identifier from ^5.0.5 to ^5.0.10
• Changed rollup development dependency version identifier from ^4.11.0 to ^4.30.1
• Changed rollup-plugin-dts development dependency version identifier from ^6.1.0 to ^6.1.1
• Changed rollup-plugin-license development dependency version identifier from ^3.2.0 to ^3.5.3
• Changed ts-jest development dependency version identifier from ^29.1.2 to ^29.2.5
• Changed tslib development dependency version identifier from ^2.6.2 to ^2.8.1
• Changed typescript development dependency version identifier from ^5.3.3 to ^5.7.3

Audit Change

Before this change:

{
  "actions": [
    ...
  ],
  "advisories": {
    ...
  },
  "muted": [],
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 4,
      "moderate": 6,
      "high": 9,
      "critical": 0
    },
    "dependencies": 1366,
    "devDependencies": 0,
    "optionalDependencies": 0,
    "totalDependencies": 1366
  }
}

After package changes:

{
  "actions": [],
  "advisories": {},
  "muted": [],
  "metadata": {
    "vulnerabilities": {
      "info": 0,
      "low": 0,
      "moderate": 0,
      "high": 0,
      "critical": 0
    },
    "dependencies": 1274,
    "devDependencies": 0,
    "optionalDependencies": 0,
    "totalDependencies": 1274
  }
}

PS: The difference in the totalDependencies value is due to the reduction of deps in the packages we depend.

[github-actions]

Coverage report

St.❔	Category	Percentage	Covered / Total
🟢	Statements	93.37%	648/694
🟢	Branches	86.78%	151/174
🟢	Functions	92.48%	123/133
🟢	Lines	93.6%	614/656

Test suite run success

170 tests passing in 18 suites.

Report generated by 🧪jest coverage report action from 39ced1f

Show full coverage report

St	File	% Stmts	% Branch	% Funcs	% Lines	Uncovered Line #s
🟢	All files	93.37	86.78	92.48	93.59
🟢	mgmt-lambda	98.93	93.33	100	98.93
🟢	DefaultSettings.ts	100	100	100	100
🟢	app.ts	97.91	95	100	97.91	26
🟢	auth.ts	100	100	100	100
🟢	exceptions.ts	100	66.66	100	100	20
🟢	routing.ts	100	100	100	100
🟢	mgmt-lambda/handlers	87.22	72.5	93.33	87.15
🟢	errorHandlers.ts	100	71.42	100	100	22,41
🟡	statusHandler.ts	80	50	100	80	76-80,84-89
🟢	updateHandler.ts	87.21	75.86	87.5	87.12	50-51,67-68,139-142,214,219-228,290-291,319
🟢	mgmt-lambda/utils	81.25	88.88	66.66	100
🟢	cloudfrontUtils.ts	100	88.88	100	100	6
🔴	delay.ts	40	100	0	100
🟢	proxy/handlers	87.91	86.95	90.32	88.63
🟢	handleAgentDowloading.ts	96.29	66.66	100	96.15	31
🟡	handleResult.ts	76.74	100	76.92	78.04	90-105
🟢	handleStatus.ts	100	100	100	100
🟡	proxy/test	77.77	100	50	71.42
🟡	aws.ts	77.77	100	50	71.42	4-5
🟢	proxy/test/utils/customer-variables	100	100	100	100
🟢	in-memory-customer-variables.ts	100	100	100	100
🟢	proxy/utils	98.11	85.71	97.05	97.94
🟢	buffer.ts	100	100	100	100
🟢	cache-control.ts	100	100	100	100
🟢	cookie.ts	100	100	100	100
🟢	headers.ts	100	100	100	100
🔴	is-blob.ts	0	0	0	0	6-7
🟢	log.ts	85.71	33.33	100	83.33	11
🟢	request.ts	100	100	100	100
🟢	routing.ts	100	100	100	100
🟢	traffic.ts	100	100	100	100
🟢	proxy/utils/customer-variables	100	100	100	100
🟢	customer-variables.ts	100	100	100	100
🟢	defaults.ts	100	100	100	100
🟢	header-customer-variables.ts	100	100	100	100
🟢	maybe-obfuscate-variable.ts	100	100	100	100
🟢	selectors.ts	100	100	100	100
🟢	types.ts	100	100	100	100
🟢	proxy/utils/customer-variables/secrets-manager	95.58	100	100	95.52
🟢	normalize-secret.ts	100	100	100	100
🟢	retrieve-secret.ts	100	100	100	100
🟢	secrets-manager-variables.ts	86.95	100	100	86.95	28,50-55
🟢	validate-secret.ts	100	100	100	100

[erayaydin]

This PR also fixes failing tests due to aws-lambda type changes.

@types/aws-lambda version 8.10.133:

export interface CloudFrontS3Origin {
    authMethod: "origin-access-identity" | "none";
    customHeaders: CloudFrontHeaders;
    domainName: string;
    path: string;
    region: string;
}

@types/aws-lambda version 8.10.147:

export type CloudFrontS3Origin =
    | CloudFrontS3OriginAuthMethodNone
    | CloudFrontS3OriginAuthMethodOriginAccessIdentity;

export interface CloudFrontS3OriginBase {
    authMethod: "origin-access-identity" | "none";
    customHeaders: CloudFrontHeaders;
    domainName: string;
    path: string;
}

export interface CloudFrontS3OriginAuthMethodNone extends CloudFrontS3OriginBase {
    authMethod: "none";
    region?: never;
}

export interface CloudFrontS3OriginAuthMethodOriginAccessIdentity extends CloudFrontS3OriginBase {
    authMethod: "origin-access-identity";
    region: string;
}

We had some tests with region as us and authMethod as none. So it's break type definition. I changed none to origin-access-identity because we are defining region in all tests.

[github-actions]

This PR will create a patch release 🚀

2.0.4 (2025-01-20)

Build System

• deps: update dependencies (9242e69)