@aws/nx-plugin 1.0.0-rc.57 → 1.0.0-rc.59

package/src/utils/versions.d.ts

@@ -9,19 +9,19 @@ import { type DeclaredPy, type DeclaredTs, type DependencyDeclaration } from './
 export declare const TS_VERSIONS: {
     readonly '@a2a-js/sdk': "0.3.14";
     readonly '@aws/aws-distro-opentelemetry-node-autoinstrumentation': "0.12.0";
-    readonly '@opentelemetry/propagator-jaeger': "2.9.0";
-    readonly minimatch: "10.2.5";
-    readonly '@aws-sdk/client-dynamodb': "3.1090.0";
-    readonly '@aws-sdk/client-api-gateway': "3.1090.0";
-    readonly '@aws-sdk/client-iam': "3.1090.0";
-    readonly '@aws-sdk/client-bedrock-agentcore': "3.1090.0";
-    readonly '@aws-sdk/client-bedrock-runtime': "3.1090.0";
-    readonly '@aws-sdk/client-s3': "3.1090.0";
-    readonly '@aws-sdk/client-sts': "3.1090.0";
-    readonly '@aws-sdk/credential-providers': "3.1090.0";
-    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.58";
-    readonly '@aws-sdk/client-secrets-manager': "3.1090.0";
-    readonly '@aws-sdk/rds-signer': "3.1090.0";
+    readonly '@opentelemetry/propagator-jaeger': "2.10.0";
+    readonly minimatch: "10.2.6";
+    readonly '@aws-sdk/client-dynamodb': "3.1101.0";
+    readonly '@aws-sdk/client-api-gateway': "3.1101.0";
+    readonly '@aws-sdk/client-iam': "3.1101.0";
+    readonly '@aws-sdk/client-bedrock-agentcore': "3.1101.0";
+    readonly '@aws-sdk/client-bedrock-runtime': "3.1101.0";
+    readonly '@aws-sdk/client-s3': "3.1101.0";
+    readonly '@aws-sdk/client-sts': "3.1101.0";
+    readonly '@aws-sdk/credential-providers': "3.1101.0";
+    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.64";
+    readonly '@aws-sdk/client-secrets-manager': "3.1101.0";
+    readonly '@aws-sdk/rds-signer': "3.1101.0";
     readonly '@aws-smithy/server-apigateway': "1.0.0-alpha.10";
     readonly '@aws-smithy/server-node': "1.0.0-alpha.10";
     readonly '@aws-lambda-powertools/logger': "2.34.0";
@@ -29,21 +29,21 @@ export declare const TS_VERSIONS: {
     readonly '@aws-lambda-powertools/parameters': "2.34.0";
     readonly '@aws-lambda-powertools/tracer': "2.34.0";
     readonly '@aws-lambda-powertools/parser': "2.34.0";
-    readonly '@aws-sdk/client-appconfigdata': "3.1090.0";
-    readonly '@middy/core': "7.7.0";
+    readonly '@aws-sdk/client-appconfigdata': "3.1101.0";
+    readonly '@middy/core': "7.7.2";
     readonly '@nxlv/python': "22.2.2";
     readonly '@nx-extend/terraform': "10.3.0";
-    readonly nx: "23.1.0";
-    readonly '@nx/devkit': "23.1.0";
-    readonly '@nx/js': "23.1.0";
-    readonly '@nx/react': "23.1.0";
-    readonly '@nx/vite': "23.1.0";
-    readonly '@nx/vitest': "23.1.0";
-    readonly '@nx/workspace': "23.1.0";
-    readonly 'create-nx-workspace': "23.1.0";
+    readonly nx: "23.1.1";
+    readonly '@nx/devkit': "23.1.1";
+    readonly '@nx/js': "23.1.1";
+    readonly '@nx/react': "23.1.1";
+    readonly '@nx/vite': "23.1.1";
+    readonly '@nx/vitest': "23.1.1";
+    readonly '@nx/workspace': "23.1.1";
+    readonly 'create-nx-workspace': "23.1.1";
     readonly '@swc-node/register': "1.12.1";
-    readonly '@swc/core': "1.15.43";
-    readonly '@modelcontextprotocol/sdk': "1.29.0";
+    readonly '@swc/core': "1.15.47";
+    readonly '@modelcontextprotocol/sdk': "1.30.0";
     readonly '@modelcontextprotocol/inspector': "0.22.0";
     readonly '@ag-ui/a2ui-toolkit': "0.0.4";
     readonly '@ag-ui/aws-strands': "0.2.3";
@@ -51,43 +51,43 @@ export declare const TS_VERSIONS: {
     readonly '@ag-ui/core': "0.0.57";
     readonly '@ag-ui/encoder': "0.0.57";
     readonly 'agent-chat-cli': "0.3.0";
-    readonly '@copilotkit/react-core': "1.63.1";
+    readonly '@copilotkit/react-core': "1.65.0";
     readonly rxjs: "7.8.2";
-    readonly '@strands-agents/sdk': "1.10.0";
+    readonly '@strands-agents/sdk': "1.11.2";
     readonly '@tanstack/react-router': "1.170.18";
-    readonly '@tanstack/router-plugin': "1.168.22";
+    readonly '@tanstack/router-plugin': "1.168.23";
     readonly '@tanstack/router-generator': "1.167.21";
     readonly '@tanstack/virtual-file-routes': "1.162.0";
     readonly '@tanstack/router-utils': "1.162.2";
-    readonly '@cloudscape-design/board-components': "3.0.205";
-    readonly '@cloudscape-design/chat-components': "1.0.151";
-    readonly '@cloudscape-design/components': "3.0.1330";
-    readonly '@cloudscape-design/global-styles': "1.0.62";
-    readonly '@tanstack/react-query': "5.101.2";
-    readonly '@tanstack/react-query-devtools': "5.101.2";
+    readonly '@cloudscape-design/board-components': "3.0.212";
+    readonly '@cloudscape-design/chat-components': "1.0.156";
+    readonly '@cloudscape-design/components': "3.0.1340";
+    readonly '@cloudscape-design/global-styles': "1.0.65";
+    readonly '@tanstack/react-query': "5.101.4";
+    readonly '@tanstack/react-query-devtools': "5.101.4";
     readonly '@trpc/tanstack-react-query': "11.18.0";
     readonly '@trpc/client': "11.18.0";
     readonly '@trpc/server': "11.18.0";
-    readonly '@types/node': "26.1.1";
+    readonly '@types/node': "26.1.2";
     readonly '@types/aws-lambda': "8.10.162";
     readonly '@types/cors': "2.8.19";
-    readonly '@types/pg': "8.20.0";
+    readonly '@types/pg': "8.20.3";
     readonly '@types/ws': "8.18.1";
     readonly '@types/express': "5.0.6";
-    readonly '@smithy/config-resolver': "4.6.10";
-    readonly '@smithy/node-config-provider': "4.5.10";
-    readonly '@smithy/node-http-handler': "4.9.7";
+    readonly '@smithy/config-resolver': "4.6.16";
+    readonly '@smithy/node-config-provider': "4.5.16";
+    readonly '@smithy/node-http-handler': "4.9.13";
     readonly '@smithy/types': "4.16.1";
     readonly '@vitest/coverage-v8': "4.1.10";
     readonly '@vitest/ui': "4.1.10";
-    readonly '@astrojs/react': "6.0.1";
+    readonly '@astrojs/react': "6.0.2";
     readonly '@astrojs/starlight': "0.41.3";
     readonly astro: "7.1.1";
     readonly aws4fetch: "1.0.20";
-    readonly 'aws-cdk': "2.1132.0";
-    readonly 'aws-cdk-lib': "2.261.0";
+    readonly 'aws-cdk': "2.1135.0";
+    readonly 'aws-cdk-lib': "2.263.0";
     readonly 'aws-xray-sdk-core': "3.12.0";
-    readonly constructs: "10.7.0";
+    readonly constructs: "10.8.0";
     readonly cors: "2.8.6";
     readonly chalk: "5.6.2";
     readonly 'class-variance-authority': "0.7.1";
@@ -97,42 +97,44 @@ export declare const TS_VERSIONS: {
     readonly esbuild: "0.28.1";
     readonly 'event-source-polyfill': "1.0.31";
     readonly '@types/event-source-polyfill': "1.0.5";
-    readonly '@biomejs/biome': "2.5.4";
-    readonly '@prisma/adapter-mariadb': "7.8.0";
-    readonly '@prisma/adapter-pg': "7.8.0";
-    readonly '@prisma/client': "7.8.0";
+    readonly '@biomejs/biome': "2.5.6";
+    readonly '@prisma/adapter-mariadb': "7.9.1";
+    readonly '@prisma/adapter-pg': "7.9.1";
+    readonly '@prisma/client': "7.9.1";
     readonly ejs: "6.0.1";
     readonly '@types/ejs': "3.1.5";
     readonly express: "5.2.1";
     readonly 'fast-glob': "3.3.3";
     readonly husky: "9.1.7";
-    readonly 'fs-extra': "11.3.6";
+    readonly 'fs-extra': "11.4.0";
     readonly '@types/fs-extra': "11.0.4";
     readonly 'make-dir-cli': "4.0.0";
     readonly mariadb: "3.5.3";
     readonly ncp: "2.0.0";
-    readonly npm: "12.0.1";
+    readonly npm: "12.0.2";
     readonly 'npm-check-updates': "22.2.9";
     readonly 'oidc-client-ts': "3.5.0";
     readonly pg: "8.22.0";
-    readonly prisma: "7.8.0";
+    readonly prisma: "7.9.1";
     readonly 'react-oidc-context': "3.3.1";
-    readonly react: "19.2.7";
-    readonly 'react-dom': "19.2.7";
+    readonly react: "19.2.8";
+    readonly 'react-dom': "19.2.8";
     readonly rimraf: "6.1.3";
-    readonly rolldown: "1.2.0";
+    readonly rolldown: "1.2.2";
+    readonly 'rolldown-plugin-dts': "0.28.0";
+    readonly '@rollup/plugin-esm-shim': "0.1.8";
     readonly 'simple-git': "3.36.0";
     readonly 'source-map-support': "0.5.21";
     readonly 'starlight-blog': "0.28.0";
     readonly tailwindcss: "4.3.3";
     readonly '@tailwindcss/vite': "4.3.3";
-    readonly tsx: "4.23.1";
-    readonly 'lucide-react': "1.25.0";
-    readonly 'radix-ui': "1.6.2";
-    readonly shadcn: "4.13.1";
+    readonly tsx: "4.23.5";
+    readonly 'lucide-react': "1.28.0";
+    readonly 'radix-ui': "1.6.7";
+    readonly shadcn: "4.16.1";
     readonly 'tw-animate-css': "1.4.0";
     readonly 'tailwind-merge': "3.6.0";
-    readonly vite: "8.1.5";
+    readonly vite: "8.2.0";
     readonly typescript: "6.0.3";
     readonly vitest: "4.1.10";
     readonly zod: "4.4.3";
@@ -158,7 +160,7 @@ export declare const NX_PACKAGES: readonly ["nx", "@nx/devkit", "@nx/js", "@nx/r
  * The nx version the plugin is built against, and the single source of truth
  * for every place a workspace's nx is pinned.
  */
-export declare const NX_VERSION: "23.1.0";
+export declare const NX_VERSION: "23.1.1";
 /**
  * Versions for Python dependencies added by generators
  */
@@ -166,31 +168,31 @@ export declare const PY_VERSIONS: {
     readonly 'a2a-sdk': "==0.3.26";
     readonly 'ag-ui-langgraph': "==0.0.42";
     readonly 'ag-ui-protocol': "==0.1.19";
-    readonly 'ag-ui-strands': "==0.2.2";
+    readonly 'ag-ui-strands': "==0.2.4";
     readonly 'aws-lambda-powertools': "==3.31.1";
     readonly 'aws-lambda-powertools[tracer]': "==3.31.1";
     readonly 'aws-lambda-powertools[parser]': "==3.31.1";
-    readonly 'aws-opentelemetry-distro': "==0.18.0";
-    readonly 'bedrock-agentcore': "==1.18.1";
-    readonly boto3: "==1.43.51";
-    readonly checkov: "==3.3.8";
-    readonly fastapi: "==0.139.2";
-    readonly 'fastapi[standard]': "==0.139.2";
+    readonly 'aws-opentelemetry-distro': "==0.19.0";
+    readonly 'bedrock-agentcore': "==1.19.0";
+    readonly boto3: "==1.43.63";
+    readonly checkov: "==3.3.9";
+    readonly fastapi: "==0.141.1";
+    readonly 'fastapi[standard]': "==0.141.1";
     readonly httpx: "==0.28.1";
     readonly langchain: "==1.3.14";
-    readonly 'langchain-aws': "==1.6.2";
-    readonly 'langchain-mcp-adapters': "==0.3.0";
-    readonly langgraph: "==1.2.9";
+    readonly 'langchain-aws': "==1.6.4";
+    readonly 'langchain-mcp-adapters': "==0.3.1";
+    readonly langgraph: "==1.2.10";
     readonly mcp: "==1.28.1";
     readonly 'pip-check-updates': "==0.29.0";
     readonly 'pip-licenses': "==5.5.5";
-    readonly ruff: "==0.15.22";
-    readonly 'strands-agents': "==1.48.0";
-    readonly 'strands-agents[a2a]': "==1.48.0";
-    readonly 'strands-agents-tools': "==0.8.4";
-    readonly ty: "==0.0.61";
+    readonly ruff: "==0.16.1";
+    readonly 'strands-agents': "==1.50.2";
+    readonly 'strands-agents[a2a]': "==1.50.2";
+    readonly 'strands-agents-tools': "==0.8.5";
+    readonly ty: "==0.0.66";
     readonly pynamodb: "==6.1.0";
-    readonly uvicorn: "==0.51.0";
+    readonly uvicorn: "==0.52.1";
     readonly sqlmodel: "==0.0.39";
     readonly alembic: "==1.18.5";
     readonly aiomysql: "==0.3.2";
@@ -224,12 +226,23 @@ export declare const BASE_IMAGES: {
 export declare const CONTAINER_VERSIONS: {
     readonly trivy: "0.72.0";
 };
+/**
+ * Repository each pinned tool image is pulled from, keyed as
+ * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is
+ * one entry rather than a reference built somewhere else, which is also what
+ * lets the version sync find these pins wherever a target command runs them.
+ */
+export declare const CONTAINER_REPOSITORIES: {
+    readonly trivy: "public.ecr.aws/aquasecurity/trivy";
+};
+/** The pinned reference for a tool image, as a target command runs it. */
+export declare const containerImage: (tool: keyof typeof CONTAINER_VERSIONS) => string;
 /**
  * Exact versions for Terraform providers used by generated `.tf` modules.
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */
 export declare const TERRAFORM_VERSIONS: {
-    readonly aws: "6.55.0";
+    readonly aws: "6.57.1";
     readonly random: "3.9.0";
     readonly null: "3.3.0";
     readonly archive: "2.8.0";
@@ -243,7 +256,7 @@ export type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;
  * generated `.tf` templates (e.g. `version = "<%- awsProviderVersion %>"`)
  */
 export declare const terraformProviderVersions: () => {
-    awsProviderVersion: "6.55.0";
+    awsProviderVersion: "6.57.1";
     randomProviderVersion: "3.9.0";
     nullProviderVersion: "3.3.0";
     archiveProviderVersion: "2.8.0";

package/src/utils/versions.js

@@ -9,24 +9,24 @@
     '@aws/aws-distro-opentelemetry-node-autoinstrumentation': '0.12.0',
     // Pinned above the version the ADOT autoinstrumentation package resolves
     // transitively (2.8.0) to clear CVE-2026-59892 (HIGH).
-    '@opentelemetry/propagator-jaeger': '2.9.0',
+    '@opentelemetry/propagator-jaeger': '2.10.0',
     // Overridden in the vended agent/MCP image builds to clear CVE-2026-14257
     // (HIGH) in brace-expansion: minimatch 10 is the lowest major depending on
     // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats
     // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the
     // CommonJS default export that minimatch 9 calls.
-    minimatch: '10.2.5',
-    '@aws-sdk/client-dynamodb': '3.1090.0',
-    '@aws-sdk/client-api-gateway': '3.1090.0',
-    '@aws-sdk/client-iam': '3.1090.0',
-    '@aws-sdk/client-bedrock-agentcore': '3.1090.0',
-    '@aws-sdk/client-bedrock-runtime': '3.1090.0',
-    '@aws-sdk/client-s3': '3.1090.0',
-    '@aws-sdk/client-sts': '3.1090.0',
-    '@aws-sdk/credential-providers': '3.1090.0',
-    '@aws-sdk/credential-provider-cognito-identity': '3.972.58',
-    '@aws-sdk/client-secrets-manager': '3.1090.0',
-    '@aws-sdk/rds-signer': '3.1090.0',
+    minimatch: '10.2.6',
+    '@aws-sdk/client-dynamodb': '3.1101.0',
+    '@aws-sdk/client-api-gateway': '3.1101.0',
+    '@aws-sdk/client-iam': '3.1101.0',
+    '@aws-sdk/client-bedrock-agentcore': '3.1101.0',
+    '@aws-sdk/client-bedrock-runtime': '3.1101.0',
+    '@aws-sdk/client-s3': '3.1101.0',
+    '@aws-sdk/client-sts': '3.1101.0',
+    '@aws-sdk/credential-providers': '3.1101.0',
+    '@aws-sdk/credential-provider-cognito-identity': '3.972.64',
+    '@aws-sdk/client-secrets-manager': '3.1101.0',
+    '@aws-sdk/rds-signer': '3.1101.0',
     '@aws-smithy/server-apigateway': '1.0.0-alpha.10',
     '@aws-smithy/server-node': '1.0.0-alpha.10',
     '@aws-lambda-powertools/logger': '2.34.0',
@@ -34,22 +34,22 @@
     '@aws-lambda-powertools/parameters': '2.34.0',
     '@aws-lambda-powertools/tracer': '2.34.0',
     '@aws-lambda-powertools/parser': '2.34.0',
-    '@aws-sdk/client-appconfigdata': '3.1090.0',
-    '@middy/core': '7.7.0',
+    '@aws-sdk/client-appconfigdata': '3.1101.0',
+    '@middy/core': '7.7.2',
     '@nxlv/python': '22.2.2',
     '@nx-extend/terraform': '10.3.0',
     // These must all hold the same version — see NX_PACKAGES.
-    nx: '23.1.0',
-    '@nx/devkit': '23.1.0',
-    '@nx/js': '23.1.0',
-    '@nx/react': '23.1.0',
-    '@nx/vite': '23.1.0',
-    '@nx/vitest': '23.1.0',
-    '@nx/workspace': '23.1.0',
-    'create-nx-workspace': '23.1.0',
+    nx: '23.1.1',
+    '@nx/devkit': '23.1.1',
+    '@nx/js': '23.1.1',
+    '@nx/react': '23.1.1',
+    '@nx/vite': '23.1.1',
+    '@nx/vitest': '23.1.1',
+    '@nx/workspace': '23.1.1',
+    'create-nx-workspace': '23.1.1',
     '@swc-node/register': '1.12.1',
-    '@swc/core': '1.15.43',
-    '@modelcontextprotocol/sdk': '1.29.0',
+    '@swc/core': '1.15.47',
+    '@modelcontextprotocol/sdk': '1.30.0',
     '@modelcontextprotocol/inspector': '0.22.0',
     '@ag-ui/a2ui-toolkit': '0.0.4',
     '@ag-ui/aws-strands': '0.2.3',
@@ -57,43 +57,43 @@
     '@ag-ui/core': '0.0.57',
     '@ag-ui/encoder': '0.0.57',
     'agent-chat-cli': '0.3.0',
-    '@copilotkit/react-core': '1.63.1',
+    '@copilotkit/react-core': '1.65.0',
     rxjs: '7.8.2',
-    '@strands-agents/sdk': '1.10.0',
+    '@strands-agents/sdk': '1.11.2',
     '@tanstack/react-router': '1.170.18',
-    '@tanstack/router-plugin': '1.168.22',
+    '@tanstack/router-plugin': '1.168.23',
     '@tanstack/router-generator': '1.167.21',
     '@tanstack/virtual-file-routes': '1.162.0',
     '@tanstack/router-utils': '1.162.2',
-    '@cloudscape-design/board-components': '3.0.205',
-    '@cloudscape-design/chat-components': '1.0.151',
-    '@cloudscape-design/components': '3.0.1330',
-    '@cloudscape-design/global-styles': '1.0.62',
-    '@tanstack/react-query': '5.101.2',
-    '@tanstack/react-query-devtools': '5.101.2',
+    '@cloudscape-design/board-components': '3.0.212',
+    '@cloudscape-design/chat-components': '1.0.156',
+    '@cloudscape-design/components': '3.0.1340',
+    '@cloudscape-design/global-styles': '1.0.65',
+    '@tanstack/react-query': '5.101.4',
+    '@tanstack/react-query-devtools': '5.101.4',
     '@trpc/tanstack-react-query': '11.18.0',
     '@trpc/client': '11.18.0',
     '@trpc/server': '11.18.0',
-    '@types/node': '26.1.1',
+    '@types/node': '26.1.2',
     '@types/aws-lambda': '8.10.162',
     '@types/cors': '2.8.19',
-    '@types/pg': '8.20.0',
+    '@types/pg': '8.20.3',
     '@types/ws': '8.18.1',
     '@types/express': '5.0.6',
-    '@smithy/config-resolver': '4.6.10',
-    '@smithy/node-config-provider': '4.5.10',
-    '@smithy/node-http-handler': '4.9.7',
+    '@smithy/config-resolver': '4.6.16',
+    '@smithy/node-config-provider': '4.5.16',
+    '@smithy/node-http-handler': '4.9.13',
     '@smithy/types': '4.16.1',
     '@vitest/coverage-v8': '4.1.10',
     '@vitest/ui': '4.1.10',
-    '@astrojs/react': '6.0.1',
+    '@astrojs/react': '6.0.2',
     '@astrojs/starlight': '0.41.3',
     astro: '7.1.1',
     aws4fetch: '1.0.20',
-    'aws-cdk': '2.1132.0',
-    'aws-cdk-lib': '2.261.0',
+    'aws-cdk': '2.1135.0',
+    'aws-cdk-lib': '2.263.0',
     'aws-xray-sdk-core': '3.12.0',
-    constructs: '10.7.0',
+    constructs: '10.8.0',
     cors: '2.8.6',
     chalk: '5.6.2',
     'class-variance-authority': '0.7.1',
@@ -103,42 +103,44 @@
     esbuild: '0.28.1',
     'event-source-polyfill': '1.0.31',
     '@types/event-source-polyfill': '1.0.5',
-    '@biomejs/biome': '2.5.4',
-    '@prisma/adapter-mariadb': '7.8.0',
-    '@prisma/adapter-pg': '7.8.0',
-    '@prisma/client': '7.8.0',
+    '@biomejs/biome': '2.5.6',
+    '@prisma/adapter-mariadb': '7.9.1',
+    '@prisma/adapter-pg': '7.9.1',
+    '@prisma/client': '7.9.1',
     ejs: '6.0.1',
     '@types/ejs': '3.1.5',
     express: '5.2.1',
     'fast-glob': '3.3.3',
     husky: '9.1.7',
-    'fs-extra': '11.3.6',
+    'fs-extra': '11.4.0',
     '@types/fs-extra': '11.0.4',
     'make-dir-cli': '4.0.0',
     mariadb: '3.5.3',
     ncp: '2.0.0',
-    npm: '12.0.1',
+    npm: '12.0.2',
     'npm-check-updates': '22.2.9',
     'oidc-client-ts': '3.5.0',
     pg: '8.22.0',
-    prisma: '7.8.0',
+    prisma: '7.9.1',
     'react-oidc-context': '3.3.1',
-    react: '19.2.7',
-    'react-dom': '19.2.7',
+    react: '19.2.8',
+    'react-dom': '19.2.8',
     rimraf: '6.1.3',
-    rolldown: '1.2.0',
+    rolldown: '1.2.2',
+    'rolldown-plugin-dts': '0.28.0',
+    '@rollup/plugin-esm-shim': '0.1.8',
     'simple-git': '3.36.0',
     'source-map-support': '0.5.21',
     'starlight-blog': '0.28.0',
     tailwindcss: '4.3.3',
     '@tailwindcss/vite': '4.3.3',
-    tsx: '4.23.1',
-    'lucide-react': '1.25.0',
-    'radix-ui': '1.6.2',
-    shadcn: '4.13.1',
+    tsx: '4.23.5',
+    'lucide-react': '1.28.0',
+    'radix-ui': '1.6.7',
+    shadcn: '4.16.1',
     'tw-animate-css': '1.4.0',
     'tailwind-merge': '3.6.0',
-    vite: '8.1.5',
+    vite: '8.2.0',
     typescript: '6.0.3',
     vitest: '4.1.10',
     zod: '4.4.3',
@@ -181,31 +183,31 @@
     'a2a-sdk': '==0.3.26',
     'ag-ui-langgraph': '==0.0.42',
     'ag-ui-protocol': '==0.1.19',
-    'ag-ui-strands': '==0.2.2',
+    'ag-ui-strands': '==0.2.4',
     'aws-lambda-powertools': '==3.31.1',
     'aws-lambda-powertools[tracer]': '==3.31.1',
     'aws-lambda-powertools[parser]': '==3.31.1',
-    'aws-opentelemetry-distro': '==0.18.0',
-    'bedrock-agentcore': '==1.18.1',
-    boto3: '==1.43.51',
-    checkov: '==3.3.8',
-    fastapi: '==0.139.2',
-    'fastapi[standard]': '==0.139.2',
+    'aws-opentelemetry-distro': '==0.19.0',
+    'bedrock-agentcore': '==1.19.0',
+    boto3: '==1.43.63',
+    checkov: '==3.3.9',
+    fastapi: '==0.141.1',
+    'fastapi[standard]': '==0.141.1',
     httpx: '==0.28.1',
     langchain: '==1.3.14',
-    'langchain-aws': '==1.6.2',
-    'langchain-mcp-adapters': '==0.3.0',
-    langgraph: '==1.2.9',
+    'langchain-aws': '==1.6.4',
+    'langchain-mcp-adapters': '==0.3.1',
+    langgraph: '==1.2.10',
     mcp: '==1.28.1',
     'pip-check-updates': '==0.29.0',
     'pip-licenses': '==5.5.5',
-    ruff: '==0.15.22',
-    'strands-agents': '==1.48.0',
-    'strands-agents[a2a]': '==1.48.0',
-    'strands-agents-tools': '==0.8.4',
-    ty: '==0.0.61',
+    ruff: '==0.16.1',
+    'strands-agents': '==1.50.2',
+    'strands-agents[a2a]': '==1.50.2',
+    'strands-agents-tools': '==0.8.5',
+    ty: '==0.0.66',
     pynamodb: '==6.1.0',
-    uvicorn: '==0.51.0',
+    uvicorn: '==0.52.1',
     sqlmodel: '==0.0.39',
     alembic: '==1.18.5',
     aiomysql: '==0.3.2',
@@ -248,11 +250,20 @@
     // ECR-hosted Trivy image used to scan built images during the build.
     trivy: '0.72.0'
 };
+/**
+ * Repository each pinned tool image is pulled from, keyed as
+ * {@link CONTAINER_VERSIONS}. Kept beside the versions so a tool added here is
+ * one entry rather than a reference built somewhere else, which is also what
+ * lets the version sync find these pins wherever a target command runs them.
+ */ export const CONTAINER_REPOSITORIES = {
+    trivy: 'public.ecr.aws/aquasecurity/trivy'
+};
+/** The pinned reference for a tool image, as a target command runs it. */ export const containerImage = (tool)=>`${CONTAINER_REPOSITORIES[tool]}:${CONTAINER_VERSIONS[tool]}`;
 /**
  * Exact versions for Terraform providers used by generated `.tf` modules.
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */ export const TERRAFORM_VERSIONS = {
-    aws: '6.55.0',
+    aws: '6.57.1',
     random: '3.9.0',
     null: '3.3.0',
     archive: '2.8.0',