@aws/nx-plugin 1.0.0-rc.86 → 1.0.0-rc.88

package/src/trpc/backend/__snapshots__/generator.spec.ts.snap

@@ -437,7 +437,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -647,7 +647,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -865,7 +865,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -904,7 +904,7 @@ export class TestApi<
       scope,
       'TestApiAuthorizerFunction',
       {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -1082,7 +1082,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -1122,7 +1122,7 @@ export class TestApi<
       scope,
       'TestApiAuthorizerFunction',
       {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -1454,7 +1454,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -2500,7 +2500,7 @@ export class TestApi<
       pattern: 'isolated',
       operations: routerToOperations(appRouter),
       defaultIntegrationOptions: {
-        runtime: Runtime.NODEJS_LATEST,
+        runtime: Runtime.NODEJS_24_X,
         handler: 'index.handler',
         code: Code.fromAsset(
           url.fileURLToPath(
@@ -3175,7 +3175,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -3426,7 +3426,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3669,7 +3669,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -3990,7 +3990,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -4241,7 +4241,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4474,7 +4474,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -4613,7 +4613,7 @@ resource "aws_lambda_function" "authorizer_lambda" {
   function_name    = "TestApiAuthorizer-\${random_string.suffix.result}"
   role            = aws_iam_role.authorizer_execution_role.arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 10
   memory_size     = 128
 
@@ -4878,7 +4878,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -5129,7 +5129,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5362,7 +5362,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -5670,7 +5670,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5983,7 +5983,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -6422,7 +6422,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -6984,7 +6984,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -7297,7 +7297,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -7726,7 +7726,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -8287,7 +8287,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -8600,7 +8600,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -9029,7 +9029,7 @@ resource "aws_lambda_function" "api_lambda" {
   function_name    = local.function_name[each.key]
   role            = aws_iam_role.lambda_execution_role[each.key].arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 30
   memory_size     = 128
 
@@ -9168,7 +9168,7 @@ resource "aws_lambda_function" "authorizer_lambda" {
   function_name    = "TestApiAuthorizer-\${random_string.suffix.result}"
   role            = aws_iam_role.authorizer_execution_role.arn
   handler         = "index.handler"
-  runtime         = "nodejs22.x"
+  runtime         = "nodejs24.x"
   timeout         = 10
   memory_size     = 128
 

package/src/ts/agent/__snapshots__/generator.spec.ts.snap

@@ -984,7 +984,7 @@ exports[`ts#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1295,7 +1295,7 @@ exports[`ts#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -1715,7 +1715,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os

package/src/ts/dcr-proxy/__snapshots__/generator.spec.ts.snap

@@ -214,7 +214,7 @@ export class SnapshotProxy extends Construct {
       new lambda.Function(this, id_, {
         code: asset(bundlePathFromRoot),
         handler: 'index.handler',
-        runtime: lambda.Runtime.NODEJS_22_X,
+        runtime: lambda.Runtime.NODEJS_24_X,
         architecture: lambda.Architecture.ARM_64,
         timeout: Duration.seconds(10),
         memorySize: 256,
@@ -579,7 +579,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -810,7 +810,7 @@ resource "aws_lambda_function" "standard" {
   function_name    = "snapshot-proxy-\${each.key}-\${random_string.suffix.result}"
   role             = each.key == "token" ? aws_iam_role.token.arn : aws_iam_role.proxy.arn
   handler          = "index.handler"
-  runtime          = "nodejs22.x"
+  runtime          = "nodejs24.x"
   architectures    = ["arm64"]
   source_code_hash = data.archive_file.handler_zip[each.key].output_base64sha256
   timeout          = 10
@@ -839,7 +839,7 @@ resource "aws_lambda_function" "mcp_proxy" {
   function_name    = "snapshot-proxy-mcp-proxy-\${random_string.suffix.result}"
   role             = aws_iam_role.proxy.arn
   handler          = "index.handler"
-  runtime          = "nodejs22.x"
+  runtime          = "nodejs24.x"
   architectures    = ["arm64"]
   source_code_hash = data.archive_file.handler_zip["mcp-proxy"].output_base64sha256
   timeout          = var.mcp_proxy_timeout

package/src/ts/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`ts#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -232,7 +232,7 @@ exports[`ts#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/ts/lambda-function/__snapshots__/generator.spec.ts.snap

@@ -10,7 +10,7 @@ export class TestProjectTestFunction extends Function {
   constructor(scope: Construct, id: string) {
     super(scope, id, {
       timeout: Duration.seconds(30),
-      runtime: Runtime.NODEJS_LATEST,
+      runtime: Runtime.NODEJS_24_X,
       handler: 'index.handler',
       code: Code.fromAsset(
         url.fileURLToPath(
@@ -141,7 +141,7 @@ exports[`ts-lambda-function generator > terraform iac > should generate terrafor
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -282,7 +282,7 @@ resource "aws_lambda_function" "lambda_function" {
   role              = aws_iam_role.lambda_role.arn
   handler           = "index.handler"
   source_code_hash  = data.archive_file.lambda_zip.output_base64sha256
-  runtime           = "nodejs22.x"
+  runtime           = "nodejs24.x"
   timeout           = 30
 
   tracing_config {
@@ -326,7 +326,7 @@ exports[`ts-lambda-function generator > terraform iac > should match snapshot fo
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -467,7 +467,7 @@ resource "aws_lambda_function" "lambda_function" {
   role              = aws_iam_role.lambda_role.arn
   handler           = "index.handler"
   source_code_hash  = data.archive_file.lambda_zip.output_base64sha256
-  runtime           = "nodejs22.x"
+  runtime           = "nodejs24.x"
   timeout           = 30
 
   tracing_config {

package/src/ts/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -155,7 +155,7 @@ exports[`ts#mcp-server generator > should match snapshot for Terraform generated
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -575,7 +575,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os

package/src/ts/rdb/__snapshots__/generator.spec.ts.snap

@@ -848,7 +848,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     null = {
       source  = "hashicorp/null"
@@ -1519,7 +1519,7 @@ exports[`ts#rdb generator > should generate terraform modules when iac is Terraf
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -2261,7 +2261,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     null = {
       source  = "hashicorp/null"
@@ -2932,7 +2932,7 @@ exports[`ts#rdb generator > should generate terraform modules with MySQL engine
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -3113,17 +3113,10 @@ resource "aws_iam_role_policy" "proxy_db_user_connect" {
     Statement = [
       {
         Effect = "Allow"
-        Action = [
-          "secretsmanager:GetSecretValue"
-        ]
-        Resource = [module.aurora.secret_arn]
-      },
-      {
-        Effect = "Allow"
-        Action = [
-          "kms:Decrypt"
+        Action = ["rds-db:connect"]
+        Resource = [
+          "arn:aws:rds-db:\${data.aws_region.current.region}:\${data.aws_caller_identity.current.account_id}:dbuser:\${module.aurora.cluster_resource_id}/\${local.database_runtime_user}"
         ]
-        Resource = [module.aurora.kms_key_arn]
       }
     ]
   })
@@ -4570,7 +4563,7 @@ export class Db extends AuroraDatabase {
       ...baseProps,
       code: Code.fromAsset(createDbUserBundleDir),
       handler: 'index.handler',
-      runtime: Runtime.NODEJS_LATEST,
+      runtime: Runtime.NODEJS_24_X,
       environment: {
         NODE_EXTRA_CA_CERTS: '/var/runtime/ca-cert.pem',
       },
@@ -4638,7 +4631,7 @@ WORKDIR \${LAMBDA_TASK_ROOT}
 # binary directly, and npm's bundled dependencies would otherwise carry known
 # HIGH/CRITICAL vulnerabilities into the image.
 RUN printf 'allow-scripts[]=prisma\\nallow-scripts[]=@prisma/engines\\n' > .npmrc \\
-    && npm install prisma@7.9.1 \\
+    && npm install prisma@7.10.0 \\
     && rm .npmrc \\
     && npm uninstall -g npm