@aws/nx-plugin-mcp 1.0.0-rc.72 → 1.0.0-rc.73

package/bin/aws-nx-mcp.js

@@ -20801,27 +20801,27 @@ const NX_VERSION = {
 	"@aws/aws-distro-opentelemetry-node-autoinstrumentation": "0.12.0",
 	"@opentelemetry/propagator-jaeger": "2.10.0",
 	minimatch: "10.2.6",
-	"@aws-sdk/client-dynamodb": "3.1106.0",
-	"@aws-sdk/client-api-gateway": "3.1106.0",
-	"@aws-sdk/client-iam": "3.1106.0",
-	"@aws-sdk/client-bedrock-agentcore": "3.1106.0",
-	"@aws-sdk/client-bedrock-runtime": "3.1106.0",
-	"@aws-sdk/client-s3": "3.1106.0",
-	"@aws-sdk/client-sts": "3.1106.0",
-	"@aws-sdk/credential-providers": "3.1106.0",
-	"@aws-sdk/credential-provider-cognito-identity": "3.972.66",
-	"@aws-sdk/client-secrets-manager": "3.1106.0",
-	"@aws-sdk/rds-signer": "3.1106.0",
-	"@smithy/server-apigateway": "0.2.0",
-	"@smithy/server-node": "0.2.0",
+	"@aws-sdk/client-dynamodb": "3.1111.0",
+	"@aws-sdk/client-api-gateway": "3.1111.0",
+	"@aws-sdk/client-iam": "3.1111.0",
+	"@aws-sdk/client-bedrock-agentcore": "3.1111.0",
+	"@aws-sdk/client-bedrock-runtime": "3.1111.0",
+	"@aws-sdk/client-s3": "3.1111.0",
+	"@aws-sdk/client-sts": "3.1111.0",
+	"@aws-sdk/credential-providers": "3.1111.0",
+	"@aws-sdk/credential-provider-cognito-identity": "3.972.68",
+	"@aws-sdk/client-secrets-manager": "3.1111.0",
+	"@aws-sdk/rds-signer": "3.1111.0",
+	"@smithy/server-apigateway": "0.3.3",
+	"@smithy/server-node": "0.3.3",
 	"@aws-lambda-powertools/logger": "2.34.0",
 	"@aws-lambda-powertools/metrics": "2.34.0",
 	"@aws-lambda-powertools/parameters": "2.34.0",
 	"@aws-lambda-powertools/tracer": "2.34.0",
 	"@aws-lambda-powertools/parser": "2.34.0",
-	"@aws-sdk/client-appconfigdata": "3.1106.0",
-	"@middy/core": "7.7.2",
-	"@nxlv/python": "22.2.2",
+	"@aws-sdk/client-appconfigdata": "3.1111.0",
+	"@middy/core": "7.7.4",
+	"@nxlv/python": "23.0.0",
 	"@nx-extend/terraform": "10.4.1",
 	nx: "23.1.1",
 	"@nx/devkit": "23.1.1",
@@ -20832,27 +20832,27 @@ const NX_VERSION = {
 	"@nx/workspace": "23.1.1",
 	"create-nx-workspace": "23.1.1",
 	"@swc-node/register": "1.12.1",
-	"@swc/core": "1.15.47",
+	"@swc/core": "1.16.0",
 	"@modelcontextprotocol/sdk": "1.30.0",
-	"@modelcontextprotocol/inspector": "0.22.0",
+	"@modelcontextprotocol/inspector": "2.2.0",
 	"@ag-ui/a2ui-toolkit": "0.0.4",
 	"@ag-ui/aws-strands": "0.2.3",
 	"@ag-ui/client": "0.0.57",
 	"@ag-ui/core": "0.0.57",
 	"@ag-ui/encoder": "0.0.57",
 	"agent-chat-cli": "0.3.0",
-	"@copilotkit/react-core": "1.66.4",
+	"@copilotkit/react-core": "1.68.1",
 	rxjs: "7.8.2",
-	"@strands-agents/sdk": "1.12.0",
-	"@tanstack/react-router": "1.170.23",
-	"@tanstack/router-plugin": "1.168.27",
-	"@tanstack/router-generator": "1.167.25",
+	"@strands-agents/sdk": "1.13.0",
+	"@tanstack/react-router": "1.170.29",
+	"@tanstack/router-plugin": "1.168.32",
+	"@tanstack/router-generator": "1.167.30",
 	"@tanstack/virtual-file-routes": "1.162.0",
 	"@tanstack/router-utils": "1.162.2",
-	"@cloudscape-design/board-components": "3.0.213",
-	"@cloudscape-design/chat-components": "1.0.157",
-	"@cloudscape-design/components": "3.0.1342",
-	"@cloudscape-design/global-styles": "1.0.65",
+	"@cloudscape-design/board-components": "3.0.218",
+	"@cloudscape-design/chat-components": "1.0.162",
+	"@cloudscape-design/components": "3.0.1347",
+	"@cloudscape-design/global-styles": "1.0.66",
 	"@tanstack/react-query": "5.101.4",
 	"@tanstack/react-query-devtools": "5.101.4",
 	"@trpc/tanstack-react-query": "11.18.0",
@@ -20864,31 +20864,31 @@ const NX_VERSION = {
 	"@types/pg": "8.21.0",
 	"@types/ws": "8.18.1",
 	"@types/express": "5.0.6",
-	"@smithy/config-resolver": "4.6.16",
-	"@smithy/node-config-provider": "4.5.16",
-	"@smithy/node-http-handler": "4.9.13",
-	"@smithy/types": "4.16.1",
+	"@smithy/config-resolver": "4.7.2",
+	"@smithy/node-config-provider": "4.6.2",
+	"@smithy/node-http-handler": "4.11.2",
+	"@smithy/types": "4.17.2",
 	"@vitest/coverage-v8": "4.1.10",
 	"@vitest/ui": "4.1.10",
 	"@astrojs/react": "6.0.2",
-	"@astrojs/starlight": "0.41.3",
+	"@astrojs/starlight": "0.41.7",
 	astro: "7.1.1",
 	aws4fetch: "1.0.20",
-	"aws-cdk": "2.1135.1",
-	"aws-cdk-lib": "2.263.0",
+	"aws-cdk": "2.1136.0",
+	"aws-cdk-lib": "2.265.0",
 	"aws-xray-sdk-core": "3.12.0",
 	constructs: "10.8.1",
 	cors: "2.8.6",
-	chalk: "5.6.2",
+	chalk: "6.0.0",
 	"class-variance-authority": "0.7.1",
 	clsx: "2.1.1",
 	commander: "15.0.0",
 	"cpy-cli": "7.0.0",
-	electrodb: "3.9.2",
+	electrodb: "3.9.3",
 	esbuild: "0.28.2",
 	"event-source-polyfill": "1.0.31",
 	"@types/event-source-polyfill": "1.0.5",
-	"@biomejs/biome": "2.5.7",
+	"@biomejs/biome": "2.5.8",
 	"@prisma/adapter-mariadb": "7.9.1",
 	"@prisma/adapter-pg": "7.9.1",
 	"@prisma/client": "7.9.1",
@@ -20901,10 +20901,10 @@ const NX_VERSION = {
 	"@types/fs-extra": "11.0.4",
 	"make-dir-cli": "4.0.0",
 	mariadb: "3.5.3",
-	mise: "2026.8.3",
+	mise: "2026.8.6",
 	ncp: "2.0.0",
 	npm: "12.0.2",
-	"npm-check-updates": "22.2.9",
+	"npm-check-updates": "23.0.2",
 	"oidc-client-ts": "3.5.0",
 	pg: "8.23.0",
 	prisma: "7.9.1",
@@ -20912,17 +20912,17 @@ const NX_VERSION = {
 	react: "19.2.8",
 	"react-dom": "19.2.8",
 	rimraf: "6.1.3",
-	rolldown: "1.2.3",
-	"rolldown-plugin-dts": "0.28.0",
+	rolldown: "1.2.4",
+	"rolldown-plugin-dts": "0.28.2",
 	"simple-git": "3.36.0",
 	"source-map-support": "0.5.21",
 	"starlight-blog": "0.28.0",
 	tailwindcss: "4.3.3",
 	"@tailwindcss/vite": "4.3.3",
-	tsx: "4.23.11",
-	"lucide-react": "1.30.0",
+	tsx: "4.23.12",
+	"lucide-react": "1.31.0",
 	"radix-ui": "1.6.7",
-	shadcn: "4.16.2",
+	shadcn: "4.18.0",
 	"tw-animate-css": "1.4.0",
 	"tailwind-merge": "3.6.0",
 	vite: "8.2.1",

package/docs/guides/docker-bundling.mdx

@@ -304,6 +304,18 @@ Because the image is fully determined by your project source, declaring `inputs`
 Trivy reads a `.trivyignore` file (a list of vulnerability IDs, one per line) from the root of your project. `--ignore-unfixed` skips vulnerabilities with no available fix, so the scan only fails on issues you can action by upgrading tooling in your `Dockerfile`. See the [Trivy filtering documentation](https://trivy.dev/latest/docs/configuration/filtering/#by-finding-ids) for details.
 :::
 
+:::tip[Apply the distribution's security updates]
+A base image tag lags behind its distribution's security suite, so its OS packages carry vulnerabilities that already have a published fix. Upgrade them as the first step of your build, ahead of any other instruction so later layers install against the upgraded packages. For a Debian-derived base image (as used by the Node and Python images above):
+
+```dockerfile
+RUN apt-get update && \
+    apt-get upgrade -y --no-install-recommends && \
+    rm -rf /var/lib/apt/lists/*
+```
+
+The generated `Dockerfile`s do this for you.
+:::
+
 ## Infrastructure
 
 Wiring the resulting build-context directory to infrastructure as code is the same for both TypeScript and Python — only the path to the build-context directory differs (`dist/packages/my-project/bundle` for TypeScript, `dist/packages/my-project/docker` for Python).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin-mcp",
-  "version": "1.0.0-rc.72",
+  "version": "1.0.0-rc.73",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",