@aws/nx-plugin 0.60.2 → 0.62.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws/nx-plugin",
-  "version": "0.60.2",
+  "version": "0.62.0",
   "repository": {
     "type": "git",
     "url": "https://github.com/awslabs/nx-plugin-for-aws.git",
@@ -19,19 +19,19 @@
   },
   "generators": "./generators.json",
   "peerDependencies": {
-    "nx": "~22.0.2",
-    "prettier": "^3.4.2"
+    "nx": "~22.1.3",
+    "prettier": "^3.6.2"
   },
   "dependencies": {
     "@apidevtools/swagger-parser": "^10.1.1",
     "@hey-api/openapi-ts": "0.64.13",
     "@iarna/toml": "^2.2.5",
     "@modelcontextprotocol/sdk": "^1.21.0",
-    "@nx/devkit": "~22.0.2",
-    "@nx/eslint": "~22.0.2",
-    "@nx/js": "~22.0.2",
-    "@nx/react": "~22.0.2",
-    "@nx/vite": "~22.0.2",
+    "@nx/devkit": "~22.1.3",
+    "@nx/eslint": "~22.1.3",
+    "@nx/js": "~22.1.3",
+    "@nx/react": "~22.1.3",
+    "@nx/vite": "~22.1.3",
     "@nxlv/python": "~21.2.0",
     "@phenomnomnominal/tsquery": "6.1.3",
     "enquirer": "^2.4.1",
@@ -46,9 +46,9 @@
     "openapi-types": "^12.1.3",
     "pip-requirements-js": "^0.2.1",
     "typescript": "~5.9.3",
-    "vite": "^6.4.1",
-    "vitest": "^3.2.4",
-    "zod": "^4.1.12",
+    "vite": "^7.2.4",
+    "vitest": "^4.0.14",
+    "zod": "^4.1.13",
     "zod-v3": "npm:zod@^3.25.76"
   },
   "types": "./src/index.d.ts"

package/src/infra/app/__snapshots__/generator.spec.ts.snap

@@ -2,10 +2,10 @@
 
 exports[`infra generator > should add required dependencies to package.json > dependencies 1`] = `
 {
-  "aws-cdk": "2.1031.1",
-  "aws-cdk-lib": "2.222.0",
-  "constructs": "10.4.2",
-  "esbuild": "0.25.12",
+  "aws-cdk": "2.1033.0",
+  "aws-cdk-lib": "2.229.1",
+  "constructs": "10.4.3",
+  "esbuild": "0.27.0",
   "source-map-support": "0.5.21",
 }
 `;
@@ -13,21 +13,18 @@ exports[`infra generator > should add required dependencies to package.json > de
 exports[`infra generator > should add required dependencies to package.json > dev-dependencies 1`] = `
 {
   "@eslint/js": "^9.8.0",
-  "@nx/eslint": "22.0.2",
-  "@nx/eslint-plugin": "22.0.2",
-  "@nx/js": "22.0.2",
-  "@nx/vite": "22.0.2",
-  "@nx/web": "22.0.2",
+  "@nx/eslint": "22.1.3",
+  "@nx/eslint-plugin": "22.1.3",
+  "@nx/js": "22.1.3",
+  "@nx/vitest": "22.1.3",
   "@swc-node/register": "~1.9.1",
   "@swc/core": "~1.5.7",
   "@swc/helpers": "~0.5.11",
-  "@types/node": "22.19.0",
-  "@vitest/coverage-v8": "^3.0.5",
-  "@vitest/ui": "^3.0.0",
+  "@types/node": "22.19.1",
+  "@vitest/coverage-v8": "^4.0.0",
   "eslint": "^9.8.0",
   "eslint-config-prettier": "^10.0.0",
   "eslint-plugin-prettier": "5.5.4",
-  "jiti": "2.4.2",
   "jsdom": "~22.1.0",
   "jsonc-eslint-parser": "2.4.1",
   "prettier": "3.6.2",
@@ -35,36 +32,33 @@ exports[`infra generator > should add required dependencies to package.json > de
   "typescript": "~5.9.2",
   "typescript-eslint": "^8.40.0",
   "vite": "^7.0.0",
-  "vitest": "^3.0.0",
+  "vitest": "^4.0.0",
 }
 `;
 
 exports[`infra generator > should add required dependencies to package.json > package-json 1`] = `
 {
   "dependencies": {
-    "aws-cdk": "2.1031.1",
-    "aws-cdk-lib": "2.222.0",
-    "constructs": "10.4.2",
-    "esbuild": "0.25.12",
+    "aws-cdk": "2.1033.0",
+    "aws-cdk-lib": "2.229.1",
+    "constructs": "10.4.3",
+    "esbuild": "0.27.0",
     "source-map-support": "0.5.21",
   },
   "devDependencies": {
     "@eslint/js": "^9.8.0",
-    "@nx/eslint": "22.0.2",
-    "@nx/eslint-plugin": "22.0.2",
-    "@nx/js": "22.0.2",
-    "@nx/vite": "22.0.2",
-    "@nx/web": "22.0.2",
+    "@nx/eslint": "22.1.3",
+    "@nx/eslint-plugin": "22.1.3",
+    "@nx/js": "22.1.3",
+    "@nx/vitest": "22.1.3",
     "@swc-node/register": "~1.9.1",
     "@swc/core": "~1.5.7",
     "@swc/helpers": "~0.5.11",
-    "@types/node": "22.19.0",
-    "@vitest/coverage-v8": "^3.0.5",
-    "@vitest/ui": "^3.0.0",
+    "@types/node": "22.19.1",
+    "@vitest/coverage-v8": "^4.0.0",
     "eslint": "^9.8.0",
     "eslint-config-prettier": "^10.0.0",
     "eslint-plugin-prettier": "5.5.4",
-    "jiti": "2.4.2",
     "jsdom": "~22.1.0",
     "jsonc-eslint-parser": "2.4.1",
     "prettier": "3.6.2",
@@ -72,7 +66,7 @@ exports[`infra generator > should add required dependencies to package.json > pa
     "typescript": "~5.9.2",
     "typescript-eslint": "^8.40.0",
     "vite": "^7.0.0",
-    "vitest": "^3.0.0",
+    "vitest": "^4.0.0",
   },
   "name": "@proj/source",
   "type": "module",
@@ -90,7 +84,7 @@ exports[`infra generator > should configure Checkov target correctly > checkov-t
     "{workspaceRoot}/dist/{projectRoot}/cdk.out",
   ],
   "options": {
-    "command": "uvx checkov==3.2.491 --config-file packages/test/checkov.yml --file dist/packages/test/cdk.out/**/*.template.json",
+    "command": "uvx checkov==3.2.495 --config-file packages/test/checkov.yml --file dist/packages/test/cdk.out/**/*.template.json",
   },
   "outputs": [
     "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -175,7 +169,7 @@ exports[`infra generator > should configure project.json with correct targets >
         "{workspaceRoot}/dist/{projectRoot}/cdk.out",
       ],
       "options": {
-        "command": "uvx checkov==3.2.491 --config-file packages/test/checkov.yml --file dist/packages/test/cdk.out/**/*.template.json",
+        "command": "uvx checkov==3.2.495 --config-file packages/test/checkov.yml --file dist/packages/test/cdk.out/**/*.template.json",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -238,7 +232,7 @@ exports[`infra generator > should configure project.json with correct targets >
       ],
     },
     "test": {
-      "executor": "@nx/vite:test",
+      "executor": "@nx/vitest:test",
       "options": {
         "reportsDirectory": "../../coverage/packages/test",
       },
@@ -714,7 +708,7 @@ exports[`infra generator > should handle custom project names correctly > custom
         "{workspaceRoot}/dist/{projectRoot}/cdk.out",
       ],
       "options": {
-        "command": "uvx checkov==3.2.491 --config-file packages/custom-infra/checkov.yml --file dist/packages/custom-infra/cdk.out/**/*.template.json",
+        "command": "uvx checkov==3.2.495 --config-file packages/custom-infra/checkov.yml --file dist/packages/custom-infra/cdk.out/**/*.template.json",
       },
       "outputs": [
         "{workspaceRoot}/dist/{projectRoot}/checkov",
@@ -777,7 +771,7 @@ exports[`infra generator > should handle custom project names correctly > custom
       ],
     },
     "test": {
-      "executor": "@nx/vite:test",
+      "executor": "@nx/vitest:test",
       "options": {
         "reportsDirectory": "../../coverage/packages/custom-infra",
       },

package/src/preset/__snapshots__/generator.spec.ts.snap

@@ -177,8 +177,8 @@ exports[`preset generator > should run successfully > package.json 1`] = `
   "name": "@proj/source",
   "dependencies": {},
   "devDependencies": {
-    "@nx/js": "22.0.2",
-    "@nx/workspace": "22.0.2",
+    "@nx/js": "22.1.3",
+    "@nx/workspace": "22.1.3",
     "@swc-node/register": "~1.9.1",
     "@swc/core": "~1.5.7",
     "@swc/helpers": "~0.5.11",

package/src/py/fast-api/__snapshots__/generator.spec.ts.snap

@@ -813,13 +813,12 @@ import {
   Cors,
   LambdaIntegration,
 } from 'aws-cdk-lib/aws-apigateway';
-import { Duration, Stack } from 'aws-cdk-lib';
+import { Duration } from 'aws-cdk-lib';
 import {
   PolicyDocument,
   PolicyStatement,
   Effect,
   AnyPrincipal,
-  AccountPrincipal,
   IGrantable,
   Grant,
 } from 'aws-cdk-lib/aws-iam';
@@ -908,15 +907,6 @@ export class TestApi<
       },
       policy: new PolicyDocument({
         statements: [
-          // Here we grant any AWS credentials from the account that the project is deployed in to call the api.
-          // Machine to machine fine-grained access can be defined here using more specific principals (eg roles or
-          // users) and resources (eg which api paths may be invoked by which principal) if required.
-          new PolicyStatement({
-            effect: Effect.ALLOW,
-            principals: [new AccountPrincipal(Stack.of(scope).account)],
-            actions: ['execute-api:Invoke'],
-            resources: ['execute-api:/*'],
-          }),
           // Open up OPTIONS to allow browsers to make unauthenticated preflight requests
           new PolicyStatement({
             effect: Effect.ALLOW,
@@ -937,6 +927,18 @@ export class TestApi<
    * @param grantee - The IAM principal to grant permissions to
    */
   public grantInvokeAccess(grantee: IGrantable) {
+    // Here we grant grantee permission to call the api.
+    // Machine to machine fine-grained access can be defined here using more specific principals (eg roles or
+    // users) and resources (eg which api paths may be invoked by which principal) if required.
+    this.api.addToResourcePolicy(
+      new PolicyStatement({
+        effect: Effect.ALLOW,
+        principals: [grantee.grantPrincipal],
+        actions: ['execute-api:Invoke'],
+        resources: ['execute-api:/*'],
+      }),
+    );
+
     Grant.addToPrincipal({
       grantee,
       actions: ['execute-api:Invoke'],