@aws/nx-plugin 1.0.0-rc.87 → 1.0.0-rc.88

package/src/utils/lambda-runtime-resolution.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/lambda-runtime-resolution.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { type ILambdaRuntime, LAMBDA_RUNTIME_VERSIONS } from './versions.js';\n\n/**\n * Resolution of the Lambda runtimes and the CPython patch the version update\n * pins.\n *\n * Lives here rather than beside the script so it is covered by the plugin's test\n * suite; the script supplies the runtime list and the uv output.\n */\n\n/** Compare two dotted numeric versions (`24`, `3.14`) ascending. */\nexport const compareRuntimeVersions = (a: string, b: string): number => {\n  const left = a.split('.').map(Number);\n  const right = b.split('.').map(Number);\n  for (let i = 0; i < Math.max(left.length, right.length); i++) {\n    const diff = (left[i] ?? 0) - (right[i] ?? 0);\n    if (diff !== 0) {\n      return diff;\n    }\n  }\n  return 0;\n};\n\n/**\n * The version a managed runtime identifier names, or undefined for one that isn't\n * a versioned `nodejs`/`python` runtime.\n *\n * `nodejs24.x` -> `24`, `python3.14` -> `3.14`. The bare `nodejs` and\n * `nodejs4.3-edge` style identifiers carry no comparable version and are skipped.\n */\nexport const runtimeIdentifierVersion = (\n  identifier: string,\n): { language: ILambdaRuntime; version: string } | undefined => {\n  const node = /^nodejs(\\d+)\\.x$/.exec(identifier);\n  if (node) {\n    return { language: 'node', version: node[1] };\n  }\n  const python = /^python(\\d+\\.\\d+)$/.exec(identifier);\n  return python ? { language: 'python', version: python[1] } : undefined;\n};\n\n/** Why a language's runtime could not be resolved. */\nexport type UnresolvedReason = 'no-runtimes-listed';\n\nexport interface RuntimeResolution {\n  /** Runtime version per language, holding the current pin where unresolved. */\n  readonly versions: Record<string, string>;\n  /** Languages left on their current pin, and why. */\n  readonly unresolved: {\n    readonly language: string;\n    readonly kept: string;\n    readonly reason: UnresolvedReason;\n  }[];\n}\n\n/**\n * The latest managed runtime for each language in {@link LAMBDA_RUNTIME_VERSIONS},\n * from the runtime identifiers `aws-cdk-lib` publishes.\n *\n * `Runtime.ALL` is a curated list of the runtimes CDK supports, so a runtime still\n * in public preview does not appear — which is what makes it a usable source for a\n * generally-available runtime. Never moves a runtime backwards: a pin ahead of\n * what CDK offers stays.\n *\n * A language the list says nothing about keeps its current pin and is reported\n * through `unresolved`, so a failure costs this bump alone rather than the whole\n * version update.\n */\nexport const resolveLambdaRuntimes = (\n  identifiers: readonly string[],\n): RuntimeResolution => {\n  const unresolved: RuntimeResolution['unresolved'][number][] = [];\n\n  const versions = Object.fromEntries(\n    (Object.keys(LAMBDA_RUNTIME_VERSIONS) as ILambdaRuntime[]).map(\n      (language) => {\n        const current = LAMBDA_RUNTIME_VERSIONS[language];\n        const available = identifiers\n          .map(runtimeIdentifierVersion)\n          .filter((parsed) => parsed?.language === language)\n          .map((parsed) => parsed!.version);\n\n        if (available.length === 0) {\n          unresolved.push({\n            language,\n            kept: current,\n            reason: 'no-runtimes-listed',\n          });\n          return [language, current];\n        }\n\n        const latest = available.reduce((best, version) =>\n          compareRuntimeVersions(version, best) > 0 ? version : best,\n        );\n\n        return [\n          language,\n          compareRuntimeVersions(latest, current) > 0 ? latest : current,\n        ];\n      },\n    ),\n  );\n\n  return { versions, unresolved };\n};\n\n/** The warning a language's unresolved runtime reports. */\nexport const unresolvedRuntimeWarning = (\n  entry: RuntimeResolution['unresolved'][number],\n): string =>\n  `Found no ${entry.language} runtime in the aws-cdk-lib runtime list, so it keeps its pinned runtime (${entry.kept})`;\n\n/** A CPython build as `uv python list --output-format json` reports it. */\nexport interface UvPythonEntry {\n  readonly version: string;\n  readonly version_parts: {\n    readonly major: number;\n    readonly minor: number;\n    readonly patch: number;\n  };\n  readonly implementation: string;\n  readonly variant?: string;\n}\n\n/**\n * The latest CPython patch uv can install for a `major.minor`, or undefined when\n * it lists none.\n *\n * Lambda names only `major.minor` and patches the interpreter itself, but uv pins\n * an exact `major.minor.patch`, so the patch is resolved from what uv can actually\n * install for the runtime's minor. Pre-releases and the free-threaded variant are\n * excluded: a generated project needs the default build of a final release.\n */\nexport const resolveLatestPythonPatch = (\n  entries: readonly UvPythonEntry[],\n  minor: string = LAMBDA_RUNTIME_VERSIONS.python,\n): string | undefined => {\n  const [major, wanted] = minor.split('.').map(Number);\n  const patches = entries\n    .filter(\n      (entry) =>\n        entry.implementation === 'cpython' &&\n        entry.variant !== 'freethreaded' &&\n        entry.version_parts.major === major &&\n        entry.version_parts.minor === wanted &&\n        // A final release only; `3.15.0rc1` carries a suffix.\n        /^\\d+\\.\\d+\\.\\d+$/.test(entry.version),\n    )\n    .map((entry) => entry.version_parts.patch);\n\n  return patches.length > 0 ? String(Math.max(...patches)) : undefined;\n};\n"],"names":["LAMBDA_RUNTIME_VERSIONS","compareRuntimeVersions","a","b","left","split","map","Number","right","i","Math","max","length","diff","runtimeIdentifierVersion","identifier","node","exec","language","version","python","undefined","resolveLambdaRuntimes","identifiers","unresolved","versions","Object","fromEntries","keys","current","available","filter","parsed","push","kept","reason","latest","reduce","best","unresolvedRuntimeWarning","entry","resolveLatestPythonPatch","entries","minor","major","wanted","patches","implementation","variant","version_parts","test","patch","String"],"mappings":"AAAA;;;CAGC,GACD,SAA8BA,uBAAuB,QAAQ,gBAAgB;AAE7E;;;;;;CAMC,GAED,kEAAkE,GAClE,OAAO,MAAMC,yBAAyB,CAACC,GAAWC;IAChD,MAAMC,OAAOF,EAAEG,KAAK,CAAC,KAAKC,GAAG,CAACC;IAC9B,MAAMC,QAAQL,EAAEE,KAAK,CAAC,KAAKC,GAAG,CAACC;IAC/B,IAAK,IAAIE,IAAI,GAAGA,IAAIC,KAAKC,GAAG,CAACP,KAAKQ,MAAM,EAAEJ,MAAMI,MAAM,GAAGH,IAAK;QAC5D,MAAMI,OAAO,AAACT,CAAAA,IAAI,CAACK,EAAE,IAAI,CAAA,IAAMD,CAAAA,KAAK,CAACC,EAAE,IAAI,CAAA;QAC3C,IAAII,SAAS,GAAG;YACd,OAAOA;QACT;IACF;IACA,OAAO;AACT,EAAE;AAEF;;;;;;CAMC,GACD,OAAO,MAAMC,2BAA2B,CACtCC;IAEA,MAAMC,OAAO,mBAAmBC,IAAI,CAACF;IACrC,IAAIC,MAAM;QACR,OAAO;YAAEE,UAAU;YAAQC,SAASH,IAAI,CAAC,EAAE;QAAC;IAC9C;IACA,MAAMI,SAAS,qBAAqBH,IAAI,CAACF;IACzC,OAAOK,SAAS;QAAEF,UAAU;QAAUC,SAASC,MAAM,CAAC,EAAE;IAAC,IAAIC;AAC/D,EAAE;AAgBF;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,wBAAwB,CACnCC;IAEA,MAAMC,aAAwD,EAAE;IAEhE,MAAMC,WAAWC,OAAOC,WAAW,CACjC,AAACD,OAAOE,IAAI,CAAC5B,yBAA8CM,GAAG,CAC5D,CAACY;QACC,MAAMW,UAAU7B,uBAAuB,CAACkB,SAAS;QACjD,MAAMY,YAAYP,YACfjB,GAAG,CAACQ,0BACJiB,MAAM,CAAC,CAACC,SAAWA,QAAQd,aAAaA,UACxCZ,GAAG,CAAC,CAAC0B,SAAWA,OAAQb,OAAO;QAElC,IAAIW,UAAUlB,MAAM,KAAK,GAAG;YAC1BY,WAAWS,IAAI,CAAC;gBACdf;gBACAgB,MAAML;gBACNM,QAAQ;YACV;YACA,OAAO;gBAACjB;gBAAUW;aAAQ;QAC5B;QAEA,MAAMO,SAASN,UAAUO,MAAM,CAAC,CAACC,MAAMnB,UACrClB,uBAAuBkB,SAASmB,QAAQ,IAAInB,UAAUmB;QAGxD,OAAO;YACLpB;YACAjB,uBAAuBmC,QAAQP,WAAW,IAAIO,SAASP;SACxD;IACH;IAIJ,OAAO;QAAEJ;QAAUD;IAAW;AAChC,EAAE;AAEF,yDAAyD,GACzD,OAAO,MAAMe,2BAA2B,CACtCC,QAEA,CAAC,SAAS,EAAEA,MAAMtB,QAAQ,CAAC,0EAA0E,EAAEsB,MAAMN,IAAI,CAAC,CAAC,CAAC,CAAC;AAcvH;;;;;;;;CAQC,GACD,OAAO,MAAMO,2BAA2B,CACtCC,SACAC,QAAgB3C,wBAAwBoB,MAAM;IAE9C,MAAM,CAACwB,OAAOC,OAAO,GAAGF,MAAMtC,KAAK,CAAC,KAAKC,GAAG,CAACC;IAC7C,MAAMuC,UAAUJ,QACbX,MAAM,CACL,CAACS,QACCA,MAAMO,cAAc,KAAK,aACzBP,MAAMQ,OAAO,KAAK,kBAClBR,MAAMS,aAAa,CAACL,KAAK,KAAKA,SAC9BJ,MAAMS,aAAa,CAACN,KAAK,KAAKE,UAC9B,sDAAsD;QACtD,kBAAkBK,IAAI,CAACV,MAAMrB,OAAO,GAEvCb,GAAG,CAAC,CAACkC,QAAUA,MAAMS,aAAa,CAACE,KAAK;IAE3C,OAAOL,QAAQlC,MAAM,GAAG,IAAIwC,OAAO1C,KAAKC,GAAG,IAAImC,YAAYzB;AAC7D,EAAE"}
+{"version":3,"sources":["../../../../../packages/nx-plugin/src/utils/lambda-runtime-resolution.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { type ILambdaRuntime, LAMBDA_RUNTIME_VERSIONS } from './versions.js';\n\n/**\n * Resolution of the Lambda runtimes and the CPython patch the version update\n * pins.\n *\n * Lives here rather than beside the script so it is covered by the plugin's test\n * suite; the script supplies the runtime list and the uv output.\n */\n\n/** Compare two dotted numeric versions (`24`, `3.14`) ascending. */\nexport const compareRuntimeVersions = (a: string, b: string): number => {\n  const left = a.split('.').map(Number);\n  const right = b.split('.').map(Number);\n  for (let i = 0; i < Math.max(left.length, right.length); i++) {\n    const diff = (left[i] ?? 0) - (right[i] ?? 0);\n    if (diff !== 0) {\n      return diff;\n    }\n  }\n  return 0;\n};\n\n/**\n * The version a managed runtime identifier names, or undefined for one that isn't\n * a versioned `nodejs`/`python` runtime.\n *\n * `nodejs24.x` -> `24`, `python3.14` -> `3.14`. The bare `nodejs` and\n * `nodejs4.3-edge` style identifiers carry no comparable version and are skipped.\n */\nexport const runtimeIdentifierVersion = (\n  identifier: string,\n): { language: ILambdaRuntime; version: string } | undefined => {\n  const node = /^nodejs(\\d+)\\.x$/.exec(identifier);\n  if (node) {\n    return { language: 'node', version: node[1] };\n  }\n  const python = /^python(\\d+\\.\\d+)$/.exec(identifier);\n  return python ? { language: 'python', version: python[1] } : undefined;\n};\n\n/** Why a language's runtime could not be resolved. */\nexport type UnresolvedReason = 'no-runtimes-listed';\n\nexport interface RuntimeResolution {\n  /** Runtime version per language, holding the current pin where unresolved. */\n  readonly versions: Record<string, string>;\n  /** Languages left on their current pin, and why. */\n  readonly unresolved: {\n    readonly language: string;\n    readonly kept: string;\n    readonly reason: UnresolvedReason;\n  }[];\n}\n\n/**\n * The latest managed runtime for each language in {@link LAMBDA_RUNTIME_VERSIONS},\n * from the runtime identifiers `aws-cdk-lib` publishes.\n *\n * `Runtime.ALL` is a curated list of the runtimes CDK supports, so a runtime still\n * in public preview does not appear — which is what makes it a usable source for a\n * generally-available runtime. Never moves a runtime backwards: a pin ahead of\n * what CDK offers stays.\n *\n * A language the list says nothing about keeps its current pin and is reported\n * through `unresolved`, so a failure costs this bump alone rather than the whole\n * version update.\n */\nexport const resolveLambdaRuntimes = (\n  identifiers: readonly string[],\n): RuntimeResolution => {\n  const unresolved: RuntimeResolution['unresolved'][number][] = [];\n\n  const versions = Object.fromEntries(\n    (Object.keys(LAMBDA_RUNTIME_VERSIONS) as ILambdaRuntime[]).map(\n      (language) => {\n        const current = LAMBDA_RUNTIME_VERSIONS[language];\n        const available = identifiers\n          .map(runtimeIdentifierVersion)\n          .filter((parsed) => parsed?.language === language)\n          .map((parsed) => parsed!.version);\n\n        if (available.length === 0) {\n          unresolved.push({\n            language,\n            kept: current,\n            reason: 'no-runtimes-listed',\n          });\n          return [language, current];\n        }\n\n        const latest = available.reduce((best, version) =>\n          compareRuntimeVersions(version, best) > 0 ? version : best,\n        );\n\n        return [\n          language,\n          compareRuntimeVersions(latest, current) > 0 ? latest : current,\n        ];\n      },\n    ),\n  );\n\n  return { versions, unresolved };\n};\n\n/** The warning a language's unresolved runtime reports. */\nexport const unresolvedRuntimeWarning = (\n  entry: RuntimeResolution['unresolved'][number],\n): string =>\n  `Found no ${entry.language} runtime in the aws-cdk-lib runtime list, so it keeps its pinned runtime (${entry.kept})`;\n"],"names":["LAMBDA_RUNTIME_VERSIONS","compareRuntimeVersions","a","b","left","split","map","Number","right","i","Math","max","length","diff","runtimeIdentifierVersion","identifier","node","exec","language","version","python","undefined","resolveLambdaRuntimes","identifiers","unresolved","versions","Object","fromEntries","keys","current","available","filter","parsed","push","kept","reason","latest","reduce","best","unresolvedRuntimeWarning","entry"],"mappings":"AAAA;;;CAGC,GACD,SAA8BA,uBAAuB,QAAQ,gBAAgB;AAE7E;;;;;;CAMC,GAED,kEAAkE,GAClE,OAAO,MAAMC,yBAAyB,CAACC,GAAWC;IAChD,MAAMC,OAAOF,EAAEG,KAAK,CAAC,KAAKC,GAAG,CAACC;IAC9B,MAAMC,QAAQL,EAAEE,KAAK,CAAC,KAAKC,GAAG,CAACC;IAC/B,IAAK,IAAIE,IAAI,GAAGA,IAAIC,KAAKC,GAAG,CAACP,KAAKQ,MAAM,EAAEJ,MAAMI,MAAM,GAAGH,IAAK;QAC5D,MAAMI,OAAO,AAACT,CAAAA,IAAI,CAACK,EAAE,IAAI,CAAA,IAAMD,CAAAA,KAAK,CAACC,EAAE,IAAI,CAAA;QAC3C,IAAII,SAAS,GAAG;YACd,OAAOA;QACT;IACF;IACA,OAAO;AACT,EAAE;AAEF;;;;;;CAMC,GACD,OAAO,MAAMC,2BAA2B,CACtCC;IAEA,MAAMC,OAAO,mBAAmBC,IAAI,CAACF;IACrC,IAAIC,MAAM;QACR,OAAO;YAAEE,UAAU;YAAQC,SAASH,IAAI,CAAC,EAAE;QAAC;IAC9C;IACA,MAAMI,SAAS,qBAAqBH,IAAI,CAACF;IACzC,OAAOK,SAAS;QAAEF,UAAU;QAAUC,SAASC,MAAM,CAAC,EAAE;IAAC,IAAIC;AAC/D,EAAE;AAgBF;;;;;;;;;;;;CAYC,GACD,OAAO,MAAMC,wBAAwB,CACnCC;IAEA,MAAMC,aAAwD,EAAE;IAEhE,MAAMC,WAAWC,OAAOC,WAAW,CACjC,AAACD,OAAOE,IAAI,CAAC5B,yBAA8CM,GAAG,CAC5D,CAACY;QACC,MAAMW,UAAU7B,uBAAuB,CAACkB,SAAS;QACjD,MAAMY,YAAYP,YACfjB,GAAG,CAACQ,0BACJiB,MAAM,CAAC,CAACC,SAAWA,QAAQd,aAAaA,UACxCZ,GAAG,CAAC,CAAC0B,SAAWA,OAAQb,OAAO;QAElC,IAAIW,UAAUlB,MAAM,KAAK,GAAG;YAC1BY,WAAWS,IAAI,CAAC;gBACdf;gBACAgB,MAAML;gBACNM,QAAQ;YACV;YACA,OAAO;gBAACjB;gBAAUW;aAAQ;QAC5B;QAEA,MAAMO,SAASN,UAAUO,MAAM,CAAC,CAACC,MAAMnB,UACrClB,uBAAuBkB,SAASmB,QAAQ,IAAInB,UAAUmB;QAGxD,OAAO;YACLpB;YACAjB,uBAAuBmC,QAAQP,WAAW,IAAIO,SAASP;SACxD;IACH;IAIJ,OAAO;QAAEJ;QAAUD;IAAW;AAChC,EAAE;AAEF,yDAAyD,GACzD,OAAO,MAAMe,2BAA2B,CACtCC,QAEA,CAAC,SAAS,EAAEA,MAAMtB,QAAQ,CAAC,0EAA0E,EAAEsB,MAAMN,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/src/utils/version-upgrade-migration/sync-python-language-version.d.ts

@@ -14,8 +14,8 @@ import { type Tree } from '@nx/devkit';
 /**
  * Sync the interpreter a uv project pins to the Lambda Python runtime.
  *
- * `.python-version` holds the exact interpreter and `[project].requires-python`
- * its lower bound; Ruff's `target-version` is derived from the latter, so leaving
+ * `.python-version` holds the interpreter and `[project].requires-python` its
+ * lower bound; Ruff's `target-version` is derived from the latter, so leaving
  * these behind lints against a different version than the function runs on. Only
  * moved forward, and only from a value this plugin vended.
  */

package/src/utils/version-upgrade-migration/sync-python-language-version.js

@@ -15,8 +15,8 @@ import { isVendedUpgrade } from "./vended-upgrade.js";
  */ /**
  * Sync the interpreter a uv project pins to the Lambda Python runtime.
  *
- * `.python-version` holds the exact interpreter and `[project].requires-python`
- * its lower bound; Ruff's `target-version` is derived from the latter, so leaving
+ * `.python-version` holds the interpreter and `[project].requires-python` its
+ * lower bound; Ruff's `target-version` is derived from the latter, so leaving
  * these behind lints against a different version than the function runs on. Only
  * moved forward, and only from a value this plugin vended.
  */ export const syncProjectPythonVersion = (tree)=>{

package/src/utils/version-upgrade-migration/sync-python-language-version.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-upgrade-migration/sync-python-language-version.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { type Tree, updateJson, visitNotIgnoredFiles } from '@nx/devkit';\nimport { updateToml } from '../toml.js';\nimport {\n  LAMBDA_RUNTIME_VERSIONS,\n  pyenvPythonVersion,\n  pyprojectPythonDependency,\n} from '../versions.js';\nimport { isVendedUpgrade } from './vended-upgrade.js';\n\n/**\n * Sync the Python language version a generated workspace builds and lints against\n * to the Lambda Python runtime it deploys onto.\n *\n * These are workspace-wide rather than scoped to the infrastructure projects: uv\n * writes a `.python-version` per Python project wherever it sits, and a bundle\n * target lives in the project it belongs to.\n */\n\n/**\n * Sync the interpreter a uv project pins to the Lambda Python runtime.\n *\n * `.python-version` holds the exact interpreter and `[project].requires-python`\n * its lower bound; Ruff's `target-version` is derived from the latter, so leaving\n * these behind lints against a different version than the function runs on. Only\n * moved forward, and only from a value this plugin vended.\n */\nexport const syncProjectPythonVersion = (tree: Tree): string[] => {\n  const updated: string[] = [];\n  const vendedInterpreter = pyenvPythonVersion();\n  const vendedRequires = pyprojectPythonDependency();\n\n  // Every `.python-version`, not just the root: uv writes one per project too,\n  // and a project left behind resolves a different interpreter than it deploys on.\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (path !== '.python-version' && !path.endsWith('/.python-version')) {\n      return;\n    }\n    const declared = (tree.read(path, 'utf-8') ?? '').trim();\n    if (declared && isVendedUpgrade(vendedInterpreter, declared)) {\n      tree.write(path, `${vendedInterpreter}\\n`);\n      updated.push(path);\n    }\n  });\n\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (!path.endsWith('pyproject.toml')) {\n      return;\n    }\n    let changed = false;\n    updateToml(tree, path, (toml) => {\n      const project = toml.project as Record<string, unknown> | undefined;\n      const declared = project?.['requires-python'];\n      if (typeof declared !== 'string') {\n        return toml;\n      }\n      // Only the `>=<major>.<minor>` shape the generators write, so a specifier\n      // the user tightened or widened is theirs to keep.\n      const lower = /^>=\\s*(\\d+\\.\\d+)$/.exec(declared.trim());\n      if (lower && isVendedUpgrade(LAMBDA_RUNTIME_VERSIONS.python, lower[1])) {\n        project!['requires-python'] = vendedRequires;\n        changed = true;\n      }\n      return toml;\n    });\n    if (changed) {\n      updated.push(path);\n    }\n  });\n\n  return updated;\n};\n\n/**\n * Sync the Python version a `bundle` target resolves wheels against.\n *\n * The target pins `--python-platform` but earlier releases pinned no\n * `--python-version`, so wheels resolved against whichever interpreter the build\n * machine had rather than the Lambda runtime. Both the missing flag and a stale\n * one are corrected, keyed on the `uv pip install` the generators write.\n */\nexport const syncPythonBundleVersion = (tree: Tree): string[] => {\n  const updated: string[] = [];\n  const vended = LAMBDA_RUNTIME_VERSIONS.python;\n\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (!path.endsWith('project.json')) {\n      return;\n    }\n    let changed = false;\n    updateJson(tree, path, (json) => {\n      for (const target of Object.values(\n        (json.targets ?? {}) as Record<string, { options?: unknown }>,\n      )) {\n        const options = target.options as { commands?: unknown[] } | undefined;\n        if (!Array.isArray(options?.commands)) {\n          continue;\n        }\n        options.commands = options.commands.map((command) => {\n          if (\n            typeof command !== 'string' ||\n            !command.includes('uv pip install') ||\n            !command.includes('--python-platform')\n          ) {\n            return command;\n          }\n          const declared = /--python-version (\\S+)/.exec(command);\n          if (!declared) {\n            changed = true;\n            return command.replace(\n              /(--python-platform \\S+)/,\n              `$1 --python-version ${vended}`,\n            );\n          }\n          if (isVendedUpgrade(vended, declared[1])) {\n            changed = true;\n            return command.replace(\n              /--python-version \\S+/,\n              `--python-version ${vended}`,\n            );\n          }\n          return command;\n        });\n      }\n      return json;\n    });\n    if (changed) {\n      updated.push(path);\n    }\n  });\n\n  return updated;\n};\n"],"names":["updateJson","visitNotIgnoredFiles","updateToml","LAMBDA_RUNTIME_VERSIONS","pyenvPythonVersion","pyprojectPythonDependency","isVendedUpgrade","syncProjectPythonVersion","tree","updated","vendedInterpreter","vendedRequires","path","endsWith","declared","read","trim","write","push","changed","toml","project","lower","exec","python","syncPythonBundleVersion","vended","json","target","Object","values","targets","options","Array","isArray","commands","map","command","includes","replace"],"mappings":"AAAA;;;CAGC,GACD,SAAoBA,UAAU,EAAEC,oBAAoB,QAAQ,aAAa;AACzE,SAASC,UAAU,QAAQ,aAAa;AACxC,SACEC,uBAAuB,EACvBC,kBAAkB,EAClBC,yBAAyB,QACpB,iBAAiB;AACxB,SAASC,eAAe,QAAQ,sBAAsB;AAEtD;;;;;;;CAOC,GAED;;;;;;;CAOC,GACD,OAAO,MAAMC,2BAA2B,CAACC;IACvC,MAAMC,UAAoB,EAAE;IAC5B,MAAMC,oBAAoBN;IAC1B,MAAMO,iBAAiBN;IAEvB,6EAA6E;IAC7E,iFAAiF;IACjFJ,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAIA,SAAS,qBAAqB,CAACA,KAAKC,QAAQ,CAAC,qBAAqB;YACpE;QACF;QACA,MAAMC,WAAW,AAACN,CAAAA,KAAKO,IAAI,CAACH,MAAM,YAAY,EAAC,EAAGI,IAAI;QACtD,IAAIF,YAAYR,gBAAgBI,mBAAmBI,WAAW;YAC5DN,KAAKS,KAAK,CAACL,MAAM,GAAGF,kBAAkB,EAAE,CAAC;YACzCD,QAAQS,IAAI,CAACN;QACf;IACF;IAEAX,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAI,CAACA,KAAKC,QAAQ,CAAC,mBAAmB;YACpC;QACF;QACA,IAAIM,UAAU;QACdjB,WAAWM,MAAMI,MAAM,CAACQ;YACtB,MAAMC,UAAUD,KAAKC,OAAO;YAC5B,MAAMP,WAAWO,SAAS,CAAC,kBAAkB;YAC7C,IAAI,OAAOP,aAAa,UAAU;gBAChC,OAAOM;YACT;YACA,0EAA0E;YAC1E,mDAAmD;YACnD,MAAME,QAAQ,oBAAoBC,IAAI,CAACT,SAASE,IAAI;YACpD,IAAIM,SAAShB,gBAAgBH,wBAAwBqB,MAAM,EAAEF,KAAK,CAAC,EAAE,GAAG;gBACtED,OAAQ,CAAC,kBAAkB,GAAGV;gBAC9BQ,UAAU;YACZ;YACA,OAAOC;QACT;QACA,IAAID,SAAS;YACXV,QAAQS,IAAI,CAACN;QACf;IACF;IAEA,OAAOH;AACT,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMgB,0BAA0B,CAACjB;IACtC,MAAMC,UAAoB,EAAE;IAC5B,MAAMiB,SAASvB,wBAAwBqB,MAAM;IAE7CvB,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAI,CAACA,KAAKC,QAAQ,CAAC,iBAAiB;YAClC;QACF;QACA,IAAIM,UAAU;QACdnB,WAAWQ,MAAMI,MAAM,CAACe;YACtB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAC/BH,KAAKI,OAAO,IAAI,CAAC,GACjB;gBACD,MAAMC,UAAUJ,OAAOI,OAAO;gBAC9B,IAAI,CAACC,MAAMC,OAAO,CAACF,SAASG,WAAW;oBACrC;gBACF;gBACAH,QAAQG,QAAQ,GAAGH,QAAQG,QAAQ,CAACC,GAAG,CAAC,CAACC;oBACvC,IACE,OAAOA,YAAY,YACnB,CAACA,QAAQC,QAAQ,CAAC,qBAClB,CAACD,QAAQC,QAAQ,CAAC,sBAClB;wBACA,OAAOD;oBACT;oBACA,MAAMvB,WAAW,yBAAyBS,IAAI,CAACc;oBAC/C,IAAI,CAACvB,UAAU;wBACbK,UAAU;wBACV,OAAOkB,QAAQE,OAAO,CACpB,2BACA,CAAC,oBAAoB,EAAEb,QAAQ;oBAEnC;oBACA,IAAIpB,gBAAgBoB,QAAQZ,QAAQ,CAAC,EAAE,GAAG;wBACxCK,UAAU;wBACV,OAAOkB,QAAQE,OAAO,CACpB,wBACA,CAAC,iBAAiB,EAAEb,QAAQ;oBAEhC;oBACA,OAAOW;gBACT;YACF;YACA,OAAOV;QACT;QACA,IAAIR,SAAS;YACXV,QAAQS,IAAI,CAACN;QACf;IACF;IAEA,OAAOH;AACT,EAAE"}
+{"version":3,"sources":["../../../../../../packages/nx-plugin/src/utils/version-upgrade-migration/sync-python-language-version.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport { type Tree, updateJson, visitNotIgnoredFiles } from '@nx/devkit';\nimport { updateToml } from '../toml.js';\nimport {\n  LAMBDA_RUNTIME_VERSIONS,\n  pyenvPythonVersion,\n  pyprojectPythonDependency,\n} from '../versions.js';\nimport { isVendedUpgrade } from './vended-upgrade.js';\n\n/**\n * Sync the Python language version a generated workspace builds and lints against\n * to the Lambda Python runtime it deploys onto.\n *\n * These are workspace-wide rather than scoped to the infrastructure projects: uv\n * writes a `.python-version` per Python project wherever it sits, and a bundle\n * target lives in the project it belongs to.\n */\n\n/**\n * Sync the interpreter a uv project pins to the Lambda Python runtime.\n *\n * `.python-version` holds the interpreter and `[project].requires-python` its\n * lower bound; Ruff's `target-version` is derived from the latter, so leaving\n * these behind lints against a different version than the function runs on. Only\n * moved forward, and only from a value this plugin vended.\n */\nexport const syncProjectPythonVersion = (tree: Tree): string[] => {\n  const updated: string[] = [];\n  const vendedInterpreter = pyenvPythonVersion();\n  const vendedRequires = pyprojectPythonDependency();\n\n  // Every `.python-version`, not just the root: uv writes one per project too,\n  // and a project left behind resolves a different interpreter than it deploys on.\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (path !== '.python-version' && !path.endsWith('/.python-version')) {\n      return;\n    }\n    const declared = (tree.read(path, 'utf-8') ?? '').trim();\n    if (declared && isVendedUpgrade(vendedInterpreter, declared)) {\n      tree.write(path, `${vendedInterpreter}\\n`);\n      updated.push(path);\n    }\n  });\n\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (!path.endsWith('pyproject.toml')) {\n      return;\n    }\n    let changed = false;\n    updateToml(tree, path, (toml) => {\n      const project = toml.project as Record<string, unknown> | undefined;\n      const declared = project?.['requires-python'];\n      if (typeof declared !== 'string') {\n        return toml;\n      }\n      // Only the `>=<major>.<minor>` shape the generators write, so a specifier\n      // the user tightened or widened is theirs to keep.\n      const lower = /^>=\\s*(\\d+\\.\\d+)$/.exec(declared.trim());\n      if (lower && isVendedUpgrade(LAMBDA_RUNTIME_VERSIONS.python, lower[1])) {\n        project!['requires-python'] = vendedRequires;\n        changed = true;\n      }\n      return toml;\n    });\n    if (changed) {\n      updated.push(path);\n    }\n  });\n\n  return updated;\n};\n\n/**\n * Sync the Python version a `bundle` target resolves wheels against.\n *\n * The target pins `--python-platform` but earlier releases pinned no\n * `--python-version`, so wheels resolved against whichever interpreter the build\n * machine had rather than the Lambda runtime. Both the missing flag and a stale\n * one are corrected, keyed on the `uv pip install` the generators write.\n */\nexport const syncPythonBundleVersion = (tree: Tree): string[] => {\n  const updated: string[] = [];\n  const vended = LAMBDA_RUNTIME_VERSIONS.python;\n\n  visitNotIgnoredFiles(tree, '.', (path) => {\n    if (!path.endsWith('project.json')) {\n      return;\n    }\n    let changed = false;\n    updateJson(tree, path, (json) => {\n      for (const target of Object.values(\n        (json.targets ?? {}) as Record<string, { options?: unknown }>,\n      )) {\n        const options = target.options as { commands?: unknown[] } | undefined;\n        if (!Array.isArray(options?.commands)) {\n          continue;\n        }\n        options.commands = options.commands.map((command) => {\n          if (\n            typeof command !== 'string' ||\n            !command.includes('uv pip install') ||\n            !command.includes('--python-platform')\n          ) {\n            return command;\n          }\n          const declared = /--python-version (\\S+)/.exec(command);\n          if (!declared) {\n            changed = true;\n            return command.replace(\n              /(--python-platform \\S+)/,\n              `$1 --python-version ${vended}`,\n            );\n          }\n          if (isVendedUpgrade(vended, declared[1])) {\n            changed = true;\n            return command.replace(\n              /--python-version \\S+/,\n              `--python-version ${vended}`,\n            );\n          }\n          return command;\n        });\n      }\n      return json;\n    });\n    if (changed) {\n      updated.push(path);\n    }\n  });\n\n  return updated;\n};\n"],"names":["updateJson","visitNotIgnoredFiles","updateToml","LAMBDA_RUNTIME_VERSIONS","pyenvPythonVersion","pyprojectPythonDependency","isVendedUpgrade","syncProjectPythonVersion","tree","updated","vendedInterpreter","vendedRequires","path","endsWith","declared","read","trim","write","push","changed","toml","project","lower","exec","python","syncPythonBundleVersion","vended","json","target","Object","values","targets","options","Array","isArray","commands","map","command","includes","replace"],"mappings":"AAAA;;;CAGC,GACD,SAAoBA,UAAU,EAAEC,oBAAoB,QAAQ,aAAa;AACzE,SAASC,UAAU,QAAQ,aAAa;AACxC,SACEC,uBAAuB,EACvBC,kBAAkB,EAClBC,yBAAyB,QACpB,iBAAiB;AACxB,SAASC,eAAe,QAAQ,sBAAsB;AAEtD;;;;;;;CAOC,GAED;;;;;;;CAOC,GACD,OAAO,MAAMC,2BAA2B,CAACC;IACvC,MAAMC,UAAoB,EAAE;IAC5B,MAAMC,oBAAoBN;IAC1B,MAAMO,iBAAiBN;IAEvB,6EAA6E;IAC7E,iFAAiF;IACjFJ,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAIA,SAAS,qBAAqB,CAACA,KAAKC,QAAQ,CAAC,qBAAqB;YACpE;QACF;QACA,MAAMC,WAAW,AAACN,CAAAA,KAAKO,IAAI,CAACH,MAAM,YAAY,EAAC,EAAGI,IAAI;QACtD,IAAIF,YAAYR,gBAAgBI,mBAAmBI,WAAW;YAC5DN,KAAKS,KAAK,CAACL,MAAM,GAAGF,kBAAkB,EAAE,CAAC;YACzCD,QAAQS,IAAI,CAACN;QACf;IACF;IAEAX,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAI,CAACA,KAAKC,QAAQ,CAAC,mBAAmB;YACpC;QACF;QACA,IAAIM,UAAU;QACdjB,WAAWM,MAAMI,MAAM,CAACQ;YACtB,MAAMC,UAAUD,KAAKC,OAAO;YAC5B,MAAMP,WAAWO,SAAS,CAAC,kBAAkB;YAC7C,IAAI,OAAOP,aAAa,UAAU;gBAChC,OAAOM;YACT;YACA,0EAA0E;YAC1E,mDAAmD;YACnD,MAAME,QAAQ,oBAAoBC,IAAI,CAACT,SAASE,IAAI;YACpD,IAAIM,SAAShB,gBAAgBH,wBAAwBqB,MAAM,EAAEF,KAAK,CAAC,EAAE,GAAG;gBACtED,OAAQ,CAAC,kBAAkB,GAAGV;gBAC9BQ,UAAU;YACZ;YACA,OAAOC;QACT;QACA,IAAID,SAAS;YACXV,QAAQS,IAAI,CAACN;QACf;IACF;IAEA,OAAOH;AACT,EAAE;AAEF;;;;;;;CAOC,GACD,OAAO,MAAMgB,0BAA0B,CAACjB;IACtC,MAAMC,UAAoB,EAAE;IAC5B,MAAMiB,SAASvB,wBAAwBqB,MAAM;IAE7CvB,qBAAqBO,MAAM,KAAK,CAACI;QAC/B,IAAI,CAACA,KAAKC,QAAQ,CAAC,iBAAiB;YAClC;QACF;QACA,IAAIM,UAAU;QACdnB,WAAWQ,MAAMI,MAAM,CAACe;YACtB,KAAK,MAAMC,UAAUC,OAAOC,MAAM,CAC/BH,KAAKI,OAAO,IAAI,CAAC,GACjB;gBACD,MAAMC,UAAUJ,OAAOI,OAAO;gBAC9B,IAAI,CAACC,MAAMC,OAAO,CAACF,SAASG,WAAW;oBACrC;gBACF;gBACAH,QAAQG,QAAQ,GAAGH,QAAQG,QAAQ,CAACC,GAAG,CAAC,CAACC;oBACvC,IACE,OAAOA,YAAY,YACnB,CAACA,QAAQC,QAAQ,CAAC,qBAClB,CAACD,QAAQC,QAAQ,CAAC,sBAClB;wBACA,OAAOD;oBACT;oBACA,MAAMvB,WAAW,yBAAyBS,IAAI,CAACc;oBAC/C,IAAI,CAACvB,UAAU;wBACbK,UAAU;wBACV,OAAOkB,QAAQE,OAAO,CACpB,2BACA,CAAC,oBAAoB,EAAEb,QAAQ;oBAEnC;oBACA,IAAIpB,gBAAgBoB,QAAQZ,QAAQ,CAAC,EAAE,GAAG;wBACxCK,UAAU;wBACV,OAAOkB,QAAQE,OAAO,CACpB,wBACA,CAAC,iBAAiB,EAAEb,QAAQ;oBAEhC;oBACA,OAAOW;gBACT;YACF;YACA,OAAOV;QACT;QACA,IAAIR,SAAS;YACXV,QAAQS,IAAI,CAACN;QACf;IACF;IAEA,OAAOH;AACT,EAAE"}

package/src/utils/versions.d.ts

@@ -11,17 +11,17 @@ export declare const TS_VERSIONS: {
     readonly '@aws/aws-distro-opentelemetry-node-autoinstrumentation': "0.12.0";
     readonly '@opentelemetry/propagator-jaeger': "2.10.0";
     readonly minimatch: "10.2.6";
-    readonly '@aws-sdk/client-dynamodb': "3.1116.0";
-    readonly '@aws-sdk/client-api-gateway': "3.1116.0";
-    readonly '@aws-sdk/client-iam': "3.1116.0";
-    readonly '@aws-sdk/client-bedrock-agentcore': "3.1116.0";
-    readonly '@aws-sdk/client-bedrock-runtime': "3.1116.0";
-    readonly '@aws-sdk/client-s3': "3.1116.0";
-    readonly '@aws-sdk/client-sts': "3.1116.0";
-    readonly '@aws-sdk/credential-providers': "3.1116.0";
+    readonly '@aws-sdk/client-dynamodb': "3.1119.0";
+    readonly '@aws-sdk/client-api-gateway': "3.1119.0";
+    readonly '@aws-sdk/client-iam': "3.1119.0";
+    readonly '@aws-sdk/client-bedrock-agentcore': "3.1119.0";
+    readonly '@aws-sdk/client-bedrock-runtime': "3.1119.0";
+    readonly '@aws-sdk/client-s3': "3.1119.0";
+    readonly '@aws-sdk/client-sts': "3.1119.0";
+    readonly '@aws-sdk/credential-providers': "3.1119.0";
     readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.69";
-    readonly '@aws-sdk/client-secrets-manager': "3.1116.0";
-    readonly '@aws-sdk/rds-signer': "3.1116.0";
+    readonly '@aws-sdk/client-secrets-manager': "3.1119.0";
+    readonly '@aws-sdk/rds-signer': "3.1119.0";
     readonly '@smithy/server-apigateway': "0.3.3";
     readonly '@smithy/server-node': "0.3.3";
     readonly '@aws-lambda-powertools/logger': "2.35.0";
@@ -29,46 +29,46 @@ export declare const TS_VERSIONS: {
     readonly '@aws-lambda-powertools/parameters': "2.35.0";
     readonly '@aws-lambda-powertools/tracer': "2.35.0";
     readonly '@aws-lambda-powertools/parser': "2.35.0";
-    readonly '@aws-sdk/client-appconfigdata': "3.1116.0";
+    readonly '@aws-sdk/client-appconfigdata': "3.1119.0";
     readonly '@middy/core': "7.8.0";
     readonly '@nxlv/python': "23.0.0";
     readonly '@nx-extend/terraform': "10.4.1";
-    readonly nx: "23.1.1";
-    readonly '@nx/devkit': "23.1.1";
-    readonly '@nx/js': "23.1.1";
-    readonly '@nx/react': "23.1.1";
-    readonly '@nx/vite': "23.1.1";
-    readonly '@nx/vitest': "23.1.1";
-    readonly '@nx/workspace': "23.1.1";
-    readonly 'create-nx-workspace': "23.1.1";
+    readonly nx: "23.1.2";
+    readonly '@nx/devkit': "23.1.2";
+    readonly '@nx/js': "23.1.2";
+    readonly '@nx/react': "23.1.2";
+    readonly '@nx/vite': "23.1.2";
+    readonly '@nx/vitest': "23.1.2";
+    readonly '@nx/workspace': "23.1.2";
+    readonly 'create-nx-workspace': "23.1.2";
     readonly '@swc-node/register': "1.12.1";
     readonly '@swc/core': "1.16.1";
     readonly '@modelcontextprotocol/sdk': "1.30.0";
-    readonly '@modelcontextprotocol/inspector': "2.3.0";
+    readonly '@modelcontextprotocol/inspector': "2.4.0";
     readonly '@ag-ui/a2ui-toolkit': "0.0.4";
     readonly '@ag-ui/aws-strands': "0.2.3";
     readonly '@ag-ui/client': "0.0.57";
     readonly '@ag-ui/core': "0.0.57";
     readonly '@ag-ui/encoder': "0.0.57";
     readonly 'agent-chat-cli': "0.3.0";
-    readonly '@copilotkit/react-core': "1.69.0";
+    readonly '@copilotkit/react-core': "1.69.2";
     readonly rxjs: "7.8.2";
     readonly '@strands-agents/sdk': "1.14.0";
-    readonly '@tanstack/react-router': "1.170.31";
-    readonly '@tanstack/router-plugin': "1.168.34";
-    readonly '@tanstack/router-generator': "1.167.32";
+    readonly '@tanstack/react-router': "1.170.32";
+    readonly '@tanstack/router-plugin': "1.168.35";
+    readonly '@tanstack/router-generator': "1.167.33";
     readonly '@tanstack/virtual-file-routes': "1.162.0";
     readonly '@tanstack/router-utils': "1.162.2";
     readonly '@cloudscape-design/board-components': "3.0.220";
     readonly '@cloudscape-design/chat-components': "1.0.164";
-    readonly '@cloudscape-design/components': "3.0.1352";
+    readonly '@cloudscape-design/components': "3.0.1354";
     readonly '@cloudscape-design/global-styles': "1.0.67";
-    readonly '@tanstack/react-query': "5.102.0";
-    readonly '@tanstack/react-query-devtools': "5.102.0";
+    readonly '@tanstack/react-query': "5.102.6";
+    readonly '@tanstack/react-query-devtools': "5.102.6";
     readonly '@trpc/tanstack-react-query': "11.18.0";
     readonly '@trpc/client': "11.18.0";
     readonly '@trpc/server': "11.18.0";
-    readonly '@types/node': "26.2.0";
+    readonly '@types/node': "26.4.0";
     readonly '@types/aws-lambda': "8.10.162";
     readonly '@types/cors': "2.8.19";
     readonly '@types/pg': "8.23.1";
@@ -81,11 +81,11 @@ export declare const TS_VERSIONS: {
     readonly '@vitest/coverage-v8': "4.1.11";
     readonly '@vitest/ui': "4.1.11";
     readonly '@astrojs/react': "6.0.4";
-    readonly '@astrojs/starlight': "0.41.7";
-    readonly astro: "7.2.4";
+    readonly '@astrojs/starlight': "0.41.9";
+    readonly astro: "7.2.8";
     readonly cookie: "2.0.1";
     readonly aws4fetch: "1.0.20";
-    readonly 'aws-cdk': "2.1138.0";
+    readonly 'aws-cdk': "2.1139.0";
     readonly 'aws-cdk-lib': "2.266.0";
     readonly 'aws-xray-sdk-core': "3.12.0";
     readonly constructs: "10.8.1";
@@ -100,9 +100,9 @@ export declare const TS_VERSIONS: {
     readonly 'event-source-polyfill': "1.0.31";
     readonly '@types/event-source-polyfill': "1.0.5";
     readonly '@biomejs/biome': "2.5.10";
-    readonly '@prisma/adapter-mariadb': "7.9.1";
-    readonly '@prisma/adapter-pg': "7.9.1";
-    readonly '@prisma/client': "7.9.1";
+    readonly '@prisma/adapter-mariadb': "7.10.0";
+    readonly '@prisma/adapter-pg': "7.10.0";
+    readonly '@prisma/client': "7.10.0";
     readonly ejs: "6.0.1";
     readonly '@types/ejs': "3.1.5";
     readonly express: "5.2.1";
@@ -112,18 +112,18 @@ export declare const TS_VERSIONS: {
     readonly '@types/fs-extra': "11.0.4";
     readonly 'make-dir-cli': "4.0.0";
     readonly mariadb: "3.5.3";
-    readonly mise: "2026.8.10";
+    readonly mise: "2026.8.14";
     readonly ncp: "2.0.0";
     readonly npm: "12.0.2";
-    readonly 'npm-check-updates': "23.0.2";
+    readonly 'npm-check-updates': "23.1.0";
     readonly 'oidc-client-ts': "3.5.0";
     readonly pg: "8.23.0";
-    readonly prisma: "7.9.1";
+    readonly prisma: "7.10.0";
     readonly 'react-oidc-context': "3.3.1";
     readonly react: "19.2.8";
     readonly 'react-dom': "19.2.8";
     readonly rimraf: "6.1.3";
-    readonly rolldown: "1.2.5";
+    readonly rolldown: "1.2.6";
     readonly 'rolldown-plugin-dts': "0.28.2";
     readonly 'simple-git': "3.36.0";
     readonly 'source-map-support': "0.5.21";
@@ -131,7 +131,7 @@ export declare const TS_VERSIONS: {
     readonly tailwindcss: "4.3.3";
     readonly '@tailwindcss/vite': "4.3.3";
     readonly tsx: "4.23.12";
-    readonly 'lucide-react': "1.33.0";
+    readonly 'lucide-react': "1.34.0";
     readonly 'radix-ui': "1.6.7";
     readonly shadcn: "4.19.0";
     readonly 'tw-animate-css': "1.4.0";
@@ -162,14 +162,14 @@ export declare const NX_PACKAGES: readonly ["nx", "@nx/devkit", "@nx/js", "@nx/r
  * The nx version the plugin is built against, and the single source of truth
  * for every place a workspace's nx is pinned.
  */
-export declare const NX_VERSION: "23.1.1";
+export declare const NX_VERSION: "23.1.2";
 /**
  * Versions for Python dependencies added by generators
  */
 export declare const PY_VERSIONS: {
     readonly 'a2a-sdk': "==0.3.26";
-    readonly 'ag-ui-langgraph': "==0.0.43";
-    readonly 'ag-ui-protocol': "==0.1.20";
+    readonly 'ag-ui-langgraph': "==0.0.44";
+    readonly 'ag-ui-protocol': "==0.1.21";
     readonly 'ag-ui-strands': "==0.3.0";
     readonly aiosqlite: "==0.22.1";
     readonly 'aws-lambda-powertools': "==3.34.0";
@@ -177,13 +177,13 @@ export declare const PY_VERSIONS: {
     readonly 'aws-lambda-powertools[parser]': "==3.34.0";
     readonly 'aws-opentelemetry-distro': "==0.19.0";
     readonly 'bedrock-agentcore': "==1.22.0";
-    readonly boto3: "==1.43.78";
-    readonly checkov: "==3.3.13";
+    readonly boto3: "==1.43.82";
+    readonly checkov: "==3.3.15";
     readonly fastapi: "==0.141.1";
     readonly 'fastapi[standard]': "==0.141.1";
     readonly httpx: "==0.28.1";
-    readonly langchain: "==1.3.16";
-    readonly 'langchain-aws': "==1.7.3";
+    readonly langchain: "==1.3.18";
+    readonly 'langchain-aws': "==1.7.4";
     readonly 'langchain-mcp-adapters': "==0.3.2";
     readonly langgraph: "==1.2.11";
     readonly 'langgraph-checkpoint-aws': "==1.2.2";
@@ -192,10 +192,10 @@ export declare const PY_VERSIONS: {
     readonly 'pip-check-updates': "==0.29.0";
     readonly 'pip-licenses': "==5.5.5";
     readonly ruff: "==0.16.4";
-    readonly 'strands-agents': "==1.53.0";
-    readonly 'strands-agents[a2a]': "==1.53.0";
+    readonly 'strands-agents': "==1.54.0";
+    readonly 'strands-agents[a2a]': "==1.54.0";
     readonly 'strands-agents-tools': "==0.8.6";
-    readonly ty: "==0.0.74";
+    readonly ty: "==0.0.75";
     readonly pynamodb: "==6.1.0";
     readonly uvicorn: "==0.52.4";
     readonly sqlmodel: "==0.0.39";
@@ -226,7 +226,7 @@ export declare const JAVA_VERSIONS: {
     readonly 'software.amazon.smithy:smithy-aws-traits': "1.73.0";
     readonly 'software.amazon.smithy:smithy-validation-model': "1.73.0";
     readonly 'software.amazon.smithy:smithy-openapi': "1.73.0";
-    readonly 'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': "0.52.0";
+    readonly 'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': "0.53.0";
 };
 export type IJavaVersion = keyof typeof JAVA_VERSIONS;
 /** The Maven coordinates the version update resolves, in declaration order. */
@@ -287,17 +287,13 @@ export declare const LAMBDA_RUNTIME_VERSIONS: {
 };
 export type ILambdaRuntime = keyof typeof LAMBDA_RUNTIME_VERSIONS;
 /**
- * Patch of the CPython release uv pins as the project interpreter.
+ * The interpreter uv pins for a generated Python project, as the Lambda runtime's
+ * `major.minor`.
  *
- * A Lambda runtime names only `major.minor`, but uv pins an exact
- * `major.minor.patch`, so only the patch lives here — the `major.minor` comes from
- * {@link LAMBDA_RUNTIME_VERSIONS}. Resolved from uv by the version update
- * workflow.
- */
-export declare const PYTHON_RUNTIME_PATCH = "7";
-/**
- * The interpreter uv pins for a generated Python project, as `major.minor.patch`.
- * Matches the Lambda Python runtime by construction.
+ * No patch: uv reads this as a request for any patch of that minor, so it resolves
+ * whichever one the platform has a build for. Naming an exact patch pins one that
+ * may not exist everywhere, and Lambda patches the interpreter itself, so the minor
+ * is the whole of what a project needs to agree on.
  */
 export declare const pyenvPythonVersion: () => string;
 /**
@@ -338,7 +334,7 @@ export declare const terraformLambdaRuntimeVars: () => {
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */
 export declare const TERRAFORM_VERSIONS: {
-    readonly aws: "6.61.0";
+    readonly aws: "6.62.0";
     readonly random: "3.9.0";
     readonly null: "3.3.1";
     readonly archive: "2.8.0";
@@ -352,7 +348,7 @@ export type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;
  * generated `.tf` templates (e.g. `version = "<%- awsProviderVersion %>"`)
  */
 export declare const terraformProviderVersions: () => {
-    awsProviderVersion: "6.61.0";
+    awsProviderVersion: "6.62.0";
     randomProviderVersion: "3.9.0";
     nullProviderVersion: "3.3.1";
     archiveProviderVersion: "2.8.0";

package/src/utils/versions.js

@@ -16,17 +16,17 @@
     // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the
     // CommonJS default export that minimatch 9 calls.
     minimatch: '10.2.6',
-    '@aws-sdk/client-dynamodb': '3.1116.0',
-    '@aws-sdk/client-api-gateway': '3.1116.0',
-    '@aws-sdk/client-iam': '3.1116.0',
-    '@aws-sdk/client-bedrock-agentcore': '3.1116.0',
-    '@aws-sdk/client-bedrock-runtime': '3.1116.0',
-    '@aws-sdk/client-s3': '3.1116.0',
-    '@aws-sdk/client-sts': '3.1116.0',
-    '@aws-sdk/credential-providers': '3.1116.0',
+    '@aws-sdk/client-dynamodb': '3.1119.0',
+    '@aws-sdk/client-api-gateway': '3.1119.0',
+    '@aws-sdk/client-iam': '3.1119.0',
+    '@aws-sdk/client-bedrock-agentcore': '3.1119.0',
+    '@aws-sdk/client-bedrock-runtime': '3.1119.0',
+    '@aws-sdk/client-s3': '3.1119.0',
+    '@aws-sdk/client-sts': '3.1119.0',
+    '@aws-sdk/credential-providers': '3.1119.0',
     '@aws-sdk/credential-provider-cognito-identity': '3.972.69',
-    '@aws-sdk/client-secrets-manager': '3.1116.0',
-    '@aws-sdk/rds-signer': '3.1116.0',
+    '@aws-sdk/client-secrets-manager': '3.1119.0',
+    '@aws-sdk/rds-signer': '3.1119.0',
     '@smithy/server-apigateway': '0.3.3',
     '@smithy/server-node': '0.3.3',
     '@aws-lambda-powertools/logger': '2.35.0',
@@ -34,47 +34,47 @@
     '@aws-lambda-powertools/parameters': '2.35.0',
     '@aws-lambda-powertools/tracer': '2.35.0',
     '@aws-lambda-powertools/parser': '2.35.0',
-    '@aws-sdk/client-appconfigdata': '3.1116.0',
+    '@aws-sdk/client-appconfigdata': '3.1119.0',
     '@middy/core': '7.8.0',
     '@nxlv/python': '23.0.0',
     '@nx-extend/terraform': '10.4.1',
     // These must all hold the same version — see NX_PACKAGES.
-    nx: '23.1.1',
-    '@nx/devkit': '23.1.1',
-    '@nx/js': '23.1.1',
-    '@nx/react': '23.1.1',
-    '@nx/vite': '23.1.1',
-    '@nx/vitest': '23.1.1',
-    '@nx/workspace': '23.1.1',
-    'create-nx-workspace': '23.1.1',
+    nx: '23.1.2',
+    '@nx/devkit': '23.1.2',
+    '@nx/js': '23.1.2',
+    '@nx/react': '23.1.2',
+    '@nx/vite': '23.1.2',
+    '@nx/vitest': '23.1.2',
+    '@nx/workspace': '23.1.2',
+    'create-nx-workspace': '23.1.2',
     '@swc-node/register': '1.12.1',
     '@swc/core': '1.16.1',
     '@modelcontextprotocol/sdk': '1.30.0',
-    '@modelcontextprotocol/inspector': '2.3.0',
+    '@modelcontextprotocol/inspector': '2.4.0',
     '@ag-ui/a2ui-toolkit': '0.0.4',
     '@ag-ui/aws-strands': '0.2.3',
     '@ag-ui/client': '0.0.57',
     '@ag-ui/core': '0.0.57',
     '@ag-ui/encoder': '0.0.57',
     'agent-chat-cli': '0.3.0',
-    '@copilotkit/react-core': '1.69.0',
+    '@copilotkit/react-core': '1.69.2',
     rxjs: '7.8.2',
     '@strands-agents/sdk': '1.14.0',
-    '@tanstack/react-router': '1.170.31',
-    '@tanstack/router-plugin': '1.168.34',
-    '@tanstack/router-generator': '1.167.32',
+    '@tanstack/react-router': '1.170.32',
+    '@tanstack/router-plugin': '1.168.35',
+    '@tanstack/router-generator': '1.167.33',
     '@tanstack/virtual-file-routes': '1.162.0',
     '@tanstack/router-utils': '1.162.2',
     '@cloudscape-design/board-components': '3.0.220',
     '@cloudscape-design/chat-components': '1.0.164',
-    '@cloudscape-design/components': '3.0.1352',
+    '@cloudscape-design/components': '3.0.1354',
     '@cloudscape-design/global-styles': '1.0.67',
-    '@tanstack/react-query': '5.102.0',
-    '@tanstack/react-query-devtools': '5.102.0',
+    '@tanstack/react-query': '5.102.6',
+    '@tanstack/react-query-devtools': '5.102.6',
     '@trpc/tanstack-react-query': '11.18.0',
     '@trpc/client': '11.18.0',
     '@trpc/server': '11.18.0',
-    '@types/node': '26.2.0',
+    '@types/node': '26.4.0',
     '@types/aws-lambda': '8.10.162',
     '@types/cors': '2.8.19',
     '@types/pg': '8.23.1',
@@ -87,11 +87,11 @@
     '@vitest/coverage-v8': '4.1.11',
     '@vitest/ui': '4.1.11',
     '@astrojs/react': '6.0.4',
-    '@astrojs/starlight': '0.41.7',
-    astro: '7.2.4',
+    '@astrojs/starlight': '0.41.9',
+    astro: '7.2.8',
     cookie: '2.0.1',
     aws4fetch: '1.0.20',
-    'aws-cdk': '2.1138.0',
+    'aws-cdk': '2.1139.0',
     'aws-cdk-lib': '2.266.0',
     'aws-xray-sdk-core': '3.12.0',
     constructs: '10.8.1',
@@ -106,9 +106,9 @@
     'event-source-polyfill': '1.0.31',
     '@types/event-source-polyfill': '1.0.5',
     '@biomejs/biome': '2.5.10',
-    '@prisma/adapter-mariadb': '7.9.1',
-    '@prisma/adapter-pg': '7.9.1',
-    '@prisma/client': '7.9.1',
+    '@prisma/adapter-mariadb': '7.10.0',
+    '@prisma/adapter-pg': '7.10.0',
+    '@prisma/client': '7.10.0',
     ejs: '6.0.1',
     '@types/ejs': '3.1.5',
     express: '5.2.1',
@@ -118,18 +118,18 @@
     '@types/fs-extra': '11.0.4',
     'make-dir-cli': '4.0.0',
     mariadb: '3.5.3',
-    mise: '2026.8.10',
+    mise: '2026.8.14',
     ncp: '2.0.0',
     npm: '12.0.2',
-    'npm-check-updates': '23.0.2',
+    'npm-check-updates': '23.1.0',
     'oidc-client-ts': '3.5.0',
     pg: '8.23.0',
-    prisma: '7.9.1',
+    prisma: '7.10.0',
     'react-oidc-context': '3.3.1',
     react: '19.2.8',
     'react-dom': '19.2.8',
     rimraf: '6.1.3',
-    rolldown: '1.2.5',
+    rolldown: '1.2.6',
     'rolldown-plugin-dts': '0.28.2',
     'simple-git': '3.36.0',
     'source-map-support': '0.5.21',
@@ -137,7 +137,7 @@
     tailwindcss: '4.3.3',
     '@tailwindcss/vite': '4.3.3',
     tsx: '4.23.12',
-    'lucide-react': '1.33.0',
+    'lucide-react': '1.34.0',
     'radix-ui': '1.6.7',
     shadcn: '4.19.0',
     'tw-animate-css': '1.4.0',
@@ -183,8 +183,8 @@
  * Versions for Python dependencies added by generators
  */ export const PY_VERSIONS = {
     'a2a-sdk': '==0.3.26',
-    'ag-ui-langgraph': '==0.0.43',
-    'ag-ui-protocol': '==0.1.20',
+    'ag-ui-langgraph': '==0.0.44',
+    'ag-ui-protocol': '==0.1.21',
     'ag-ui-strands': '==0.3.0',
     aiosqlite: '==0.22.1',
     'aws-lambda-powertools': '==3.34.0',
@@ -192,13 +192,13 @@
     'aws-lambda-powertools[parser]': '==3.34.0',
     'aws-opentelemetry-distro': '==0.19.0',
     'bedrock-agentcore': '==1.22.0',
-    boto3: '==1.43.78',
-    checkov: '==3.3.13',
+    boto3: '==1.43.82',
+    checkov: '==3.3.15',
     fastapi: '==0.141.1',
     'fastapi[standard]': '==0.141.1',
     httpx: '==0.28.1',
-    langchain: '==1.3.16',
-    'langchain-aws': '==1.7.3',
+    langchain: '==1.3.18',
+    'langchain-aws': '==1.7.4',
     'langchain-mcp-adapters': '==0.3.2',
     langgraph: '==1.2.11',
     'langgraph-checkpoint-aws': '==1.2.2',
@@ -207,10 +207,10 @@
     'pip-check-updates': '==0.29.0',
     'pip-licenses': '==5.5.5',
     ruff: '==0.16.4',
-    'strands-agents': '==1.53.0',
-    'strands-agents[a2a]': '==1.53.0',
+    'strands-agents': '==1.54.0',
+    'strands-agents[a2a]': '==1.54.0',
     'strands-agents-tools': '==0.8.6',
-    ty: '==0.0.74',
+    ty: '==0.0.75',
     pynamodb: '==6.1.0',
     uvicorn: '==0.52.4',
     sqlmodel: '==0.0.39',
@@ -250,7 +250,7 @@
     'software.amazon.smithy:smithy-aws-traits': '1.73.0',
     'software.amazon.smithy:smithy-validation-model': '1.73.0',
     'software.amazon.smithy:smithy-openapi': '1.73.0',
-    'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.52.0'
+    'software.amazon.smithy.typescript:smithy-aws-typescript-codegen': '0.53.0'
 };
 /** The Maven coordinates the version update resolves, in declaration order. */ export const JAVA_ARTIFACTS = Object.keys(JAVA_VERSIONS);
 /** A Maven coordinate as a dependency names it: `<group>:<artifact>:<version>`. */ export const javaMavenDependency = (artifact)=>`${artifact}:${JAVA_VERSIONS[artifact]}`;
@@ -300,17 +300,14 @@
     python: '3.14'
 };
 /**
- * Patch of the CPython release uv pins as the project interpreter.
+ * The interpreter uv pins for a generated Python project, as the Lambda runtime's
+ * `major.minor`.
  *
- * A Lambda runtime names only `major.minor`, but uv pins an exact
- * `major.minor.patch`, so only the patch lives here — the `major.minor` comes from
- * {@link LAMBDA_RUNTIME_VERSIONS}. Resolved from uv by the version update
- * workflow.
- */ export const PYTHON_RUNTIME_PATCH = '7';
-/**
- * The interpreter uv pins for a generated Python project, as `major.minor.patch`.
- * Matches the Lambda Python runtime by construction.
- */ export const pyenvPythonVersion = ()=>`${LAMBDA_RUNTIME_VERSIONS.python}.${PYTHON_RUNTIME_PATCH}`;
+ * No patch: uv reads this as a request for any patch of that minor, so it resolves
+ * whichever one the platform has a build for. Naming an exact patch pins one that
+ * may not exist everywhere, and Lambda patches the interpreter itself, so the minor
+ * is the whole of what a project needs to agree on.
+ */ export const pyenvPythonVersion = ()=>LAMBDA_RUNTIME_VERSIONS.python;
 /**
  * The `[project].requires-python` specifier for a generated Python project.
  *
@@ -343,7 +340,7 @@
  * Exact versions for Terraform providers used by generated `.tf` modules.
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */ export const TERRAFORM_VERSIONS = {
-    aws: '6.61.0',
+    aws: '6.62.0',
     random: '3.9.0',
     null: '3.3.1',
     archive: '2.8.0',