Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2022

Bumps @middy/core from 2.5.1 to 4.0.2.

Release notes

Sourced from @​middy/core's releases.

4.0.2

  • fix regression with ajv cli usages introduced in 4.0.1

Full Changelog: middyjs/middy@4.0.1...4.0.2

4.0.1

  • fix for http-content-encoding causing 500 at APIG layer #946
  • fix for middy validator v4 throws runtime exceptions due to esm-only ajv-cmd @​JoshBarr #947
  • remove deprecated options in validator

Full Changelog: middyjs/middy@4.0.0...4.0.1

4.0.0

For full details and upgrade guide see https://middy.js.org/docs/upgrade/3-4

Notable Breaking Changes

  • Deprecate NodeJS 14
  • Add support for NodeJS 18
  • Upgrade AWS SDK to v3
  • Refactor validator

What's Changed

New Contributors

Full Changelog: middyjs/middy@3.6.2...4.0.0

3.6.2

  • cloudwatch-metrics update AWS dep

Full Changelog: middyjs/middy@3.6.1...3.6.2

3.6.1

  • http-router Add in missing parsing and storing of proxy

Full Changelog: middyjs/middy@3.6.0...3.6.1

3.6.0

What's Changed

  • http-router now will have pathParameters parsed and attached to the event when not already. This improves use with ALB, and URL functions. @​yannickrocks

Full Changelog: middyjs/middy@3.5.0...3.6.0

... (truncated)

Changelog

Sourced from @​middy/core's changelog.

3.0.0

Checkout UPGRADE.md to see what are the main breaking changes and how to migrate to this new version if coming from 2.x.

Focus this version was on error handling and improve consistency.

Additions

  • New middleware (http-content-encoding)
  • lambdaHandler can now be passed an AbortController signal
  • internal events can now be monitored using Proxy

Breaking Changes

  • The order onError being called is now reversed to match after
  • Change default charset from binary/latin1 to utf-8 within http-multipart-body-parser
  • Deprecated setToEnv option from all middleware
  • sqs-partial-batch-failure completely rewritten
  • Renamed default option to defaultContentType http-response-serializer
  • normalizeHttpResponse now takes request and mutates response

Maintenance

  • Better error reporting when dealing with Promise arrays

2.0.1

2.0.0

Checkout UPGRADE.md to see what are the main breaking changes and how to migrate to this new version if coming from 1.x.

Focus this version was on performance and security by default.

Additions

  • New middlewares (rds-signer, sts, s3-object-response)
  • New plugin hook for core to allow easier bottleneck detection with middlewares and handler

Breaking Changes

  • All middlewares now use async/await and have deprecated next(err) and callback(err, response)
  • validator refactored to support draft-2019-09 using the latest version of ajv. Full i18n is now enabled by default
  • http-error-handler no longer exposes status code >= 500 by default.
  • Middlewares that reach out to 3rd party API have been completely refactored to have unifying options that resolve on demand from internal context. Applies to:
    • rds-signer
    • secrets-manager
    • ssm
    • sts
  • Deprecated middlewares:
    • cache: little usage, makes more sense to be pulled out of core
    • db-manager: little usage, makes more sense to be pulled out of core
    • function-shield: Only supported up to Node v10

... (truncated)

Commits
  • c77c941 chore: version bump
  • c5ece2b chore: version bump
  • 6a37024 chore: bump sub-deps
  • 5822861 chore: version bump
  • 76b0a06 chore: dep update
  • 265cd3b Allow handler setup to define additional properties on event
  • 3fc4325 Export the Request interface to enable the typing of arguments in the middlew...
  • 87cd713 chore: dep update
  • cbf2af8 chore: version bump
  • d1c5081 chore: version bump
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@middy/core](https://github.com/middyjs/middy/tree/HEAD/packages/core) from 2.5.1 to 4.0.2.
- [Release notes](https://github.com/middyjs/middy/releases)
- [Changelog](https://github.com/middyjs/middy/blob/main/docs/CHANGELOG.md)
- [Commits](https://github.com/middyjs/middy/commits/4.0.2/packages/core)

---
updated-dependencies:
- dependency-name: "@middy/core"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 5, 2022
@dependabot dependabot bot requested a review from jroehl December 5, 2022 00:20
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 12, 2022

Superseded by #842.

@dependabot dependabot bot closed this Dec 12, 2022
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/middy/core-4.0.2 branch December 12, 2022 00:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant