@adobe/helix-deploy 13.4.1 → 13.5.1

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [13.5.1](https://github.com/adobe/helix-deploy/compare/v13.5.0...v13.5.1) (2026-03-16)
+
+
+### Bug Fixes
+
+* **deps:** update external fixes ([#901](https://github.com/adobe/helix-deploy/issues/901)) ([58b68b9](https://github.com/adobe/helix-deploy/commit/58b68b9b17fe355b65274415e71924076a768d1a))
+
+# [13.5.0](https://github.com/adobe/helix-deploy/compare/v13.4.1...v13.5.0) (2026-03-16)
+
+
+### Features
+
+* **aws:** add --aws-reserved-concurrency option ([#902](https://github.com/adobe/helix-deploy/issues/902)) ([b42a7d6](https://github.com/adobe/helix-deploy/commit/b42a7d6bbbf78783f5aaf42ab0392748c54a9de3))
+
 ## [13.4.1](https://github.com/adobe/helix-deploy/compare/v13.4.0...v13.4.1) (2026-03-10)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adobe/helix-deploy",
-  "version": "13.4.1",
+  "version": "13.5.1",
   "description": "Library and Commandline Tools to build and deploy OpenWhisk Actions",
   "license": "Apache-2.0",
   "homepage": "https://github.com/adobe/helix-deploy#readme",
@@ -39,12 +39,12 @@
   "dependencies": {
     "@adobe/fetch": "4.2.3",
     "@adobe/helix-shared-process-queue": "3.1.5",
-    "@aws-sdk/client-apigatewayv2": "3.996.0",
-    "@aws-sdk/client-lambda": "3.996.0",
-    "@aws-sdk/client-s3": "3.996.0",
-    "@aws-sdk/client-secrets-manager": "3.996.0",
-    "@aws-sdk/client-ssm": "3.996.0",
-    "@aws-sdk/client-sts": "3.996.0",
+    "@aws-sdk/client-apigatewayv2": "3.1000.0",
+    "@aws-sdk/client-lambda": "3.1000.0",
+    "@aws-sdk/client-s3": "3.1000.0",
+    "@aws-sdk/client-secrets-manager": "3.1000.0",
+    "@aws-sdk/client-ssm": "3.1000.0",
+    "@aws-sdk/client-sts": "3.1000.0",
     "@google-cloud/functions": "4.2.1",
     "@google-cloud/secret-manager": "6.1.1",
     "@google-cloud/storage": "7.19.0",
@@ -66,14 +66,14 @@
     "@eslint/config-helpers": "0.5.2",
     "@semantic-release/changelog": "6.0.3",
     "@semantic-release/git": "10.0.1",
-    "c8": "10.1.3",
+    "c8": "11.0.0",
     "eslint": "9.4.0",
     "husky": "9.1.7",
-    "lint-staged": "16.2.7",
+    "lint-staged": "16.3.1",
     "mocha": "11.7.5",
     "mocha-junit-reporter": "2.2.1",
     "mocha-multi-reporters": "1.5.1",
-    "nock": "13.5.6",
+    "nock": "14.0.11",
     "semantic-release": "25.0.3",
     "xml2js": "0.6.2",
     "yauzl": "3.2.0"

package/src/deploy/AWSConfig.js

@@ -63,6 +63,7 @@ export default class AWSConfig {
       ephemeralStorage: undefined,
       vpcSubnetIds: undefined,
       vpcSecurityGroupIds: undefined,
+      reservedConcurrency: undefined,
     });
   }
 
@@ -91,7 +92,8 @@ export default class AWSConfig {
       .withAWSHandler(argv.awsHandler)
       .withAWSEphemeralStorage(argv.awsEphemeralStorage)
       .withAWSVpcSubnetIds(argv.awsVpcSubnetIds)
-      .withAWSVpcSecurityGroupIds(argv.awsVpcSecurityGroupIds);
+      .withAWSVpcSecurityGroupIds(argv.awsVpcSecurityGroupIds)
+      .withAWSReservedConcurrency(argv.awsReservedConcurrency);
   }
 
   withAWSRegion(value) {
@@ -232,6 +234,17 @@ export default class AWSConfig {
     return this;
   }
 
+  withAWSReservedConcurrency(value) {
+    if (value !== undefined) {
+      const n = Number(value);
+      if (!Number.isInteger(n) || n < 0) {
+        throw new Error('aws-reserved-concurrency must be a non-negative integer');
+      }
+      this.reservedConcurrency = n;
+    }
+    return this;
+  }
+
   static yarg(yargs) {
     return yargs
       .group(['aws-region', 'aws-api', 'aws-role', 'aws-cleanup-buckets', 'aws-cleanup-integrations',
@@ -239,7 +252,8 @@ export default class AWSConfig {
         'aws-lambda-format', 'aws-parameter-manager', 'aws-deploy-template', 'aws-arch', 'aws-update-secrets',
         'aws-deploy-bucket', 'aws-identity-source', 'aws-log-format', 'aws-layers',
         'aws-tracing-mode', 'aws-extra-permissions', 'aws-tags', 'aws-handler',
-        'aws-ephemeral-storage', 'aws-vpc-subnet-ids', 'aws-vpc-security-group-ids'], 'AWS Deployment Options')
+        'aws-ephemeral-storage', 'aws-vpc-subnet-ids', 'aws-vpc-security-group-ids',
+        'aws-reserved-concurrency'], 'AWS Deployment Options')
       .option('aws-region', {
         description: 'the AWS region to deploy lambda functions to',
         type: 'string',
@@ -357,6 +371,13 @@ export default class AWSConfig {
         description: 'List of VPC security group IDs to attach the Lambda function to.',
         type: 'string',
         array: true,
+      })
+      .option('aws-reserved-concurrency', {
+        description: 'Reserved concurrency limit for the Lambda function (non-negative integer). '
+          + 'Set to 0 to completely throttle the function. '
+          + 'Requires lambda:PutFunctionConcurrency on the deploy role. '
+          + 'Note: once set, omitting this flag does NOT remove the limit — use the AWS console or CLI to call DeleteFunctionConcurrency.',
+        type: 'number',
       });
   }
 }

package/src/deploy/AWSDeployer.js

@@ -31,7 +31,8 @@ import {
   CreateFunctionCommand, DeleteAliasCommand, DeleteFunctionCommand, GetAliasCommand,
   GetFunctionCommand,
   LambdaClient, ListAliasesCommand, ListTagsCommand, ListVersionsByFunctionCommand,
-  PublishVersionCommand, TagResourceCommand, UntagResourceCommand, UpdateAliasCommand,
+  PublishVersionCommand, PutFunctionConcurrencyCommand, TagResourceCommand,
+  UntagResourceCommand, UpdateAliasCommand,
   UpdateFunctionCodeCommand, UpdateFunctionConfigurationCommand,
 } from '@aws-sdk/client-lambda';
 
@@ -391,6 +392,25 @@ export default class AWSDeployer extends BaseDeployer {
         throw e;
       }
     }
+
+    if (this._cfg.reservedConcurrency !== undefined) {
+      if (this._cfg.reservedConcurrency === 0) {
+        this.log.warn(chalk`{yellow warn}: setting reserved concurrency to 0 for {yellow ${functionName}} — function will be completely throttled`);
+      } else {
+        this.log.info(chalk`--: setting reserved concurrency to {yellow ${this._cfg.reservedConcurrency}} for {yellow ${functionName}}`);
+      }
+      try {
+        await this._lambda.send(new PutFunctionConcurrencyCommand({
+          FunctionName: functionName,
+          ReservedConcurrentExecutions: this._cfg.reservedConcurrency,
+        }));
+        this.log.info(chalk`{green ok}: reserved concurrency for {yellow ${functionName}} set to {yellow ${this._cfg.reservedConcurrency}}. Requires {yellow lambda:PutFunctionConcurrency} on the deploy role.`);
+      } catch (e) {
+        this.log.error(`Failed to set reserved concurrency for ${functionName} to ${this._cfg.reservedConcurrency}: ${e.message}`);
+        this.log.error('Ensure the deploy role has lambda:PutFunctionConcurrency permission. Function code was deployed successfully.');
+        throw e;
+      }
+    }
   }
 
   async initApiId() {