@aws/nx-plugin 1.0.0-rc.87 → 1.0.0-rc.89

package/src/migrations/v1.0.0-rc.85/0001-terraform-project-checkov-target-and-bootstrap-destroy/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../packages/nx-plugin/src/migrations/v1.0.0-rc.85/0001-terraform-project-checkov-target-and-bootstrap-destroy/migration.ts"],"sourcesContent":["/**\n * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.\n * SPDX-License-Identifier: Apache-2.0\n */\nimport {\n  generateFiles,\n  getProjects,\n  joinPathFragments,\n  type MigrationReturnObject,\n  OverwriteStrategy,\n  type Tree,\n  updateProjectConfiguration,\n} from '@nx/devkit';\nimport { TERRAFORM_PROJECT_GENERATOR_INFO } from '../../../terraform/project/generator.js';\nimport { applyGritQL, matchGritQL } from '../../../utils/ast.js';\nimport { formatFilesInSubtree } from '../../../utils/format.js';\nimport { kebabCase } from '../../../utils/names.js';\nimport { normalizeTargetKeyOrder } from '../../../utils/nx.js';\nimport { sortObjectKeys } from '../../../utils/object.js';\n\n/**\n * Terraform projects gained three fixes:\n *\n * - A `checkov` target carries the security scan, matching the name CDK\n *   infrastructure projects already use, so `nx run-many --target checkov` no\n *   longer skips Terraform projects. An existing `test` target is the user's,\n *   so it is left exactly as it is.\n * - A `checkov.yml` gives Terraform users the same central place to configure\n *   skips that the CDK app has, wired in via `--config-file`.\n * - `bootstrap-destroy` runs a script that resolves the region from the AWS SDK\n *   credential chain and passes it as `-var=aws_region`. The vended\n *   `aws_region` variable has no default, so the previous bare\n *   `terraform destroy` blocked forever on an input prompt in any non-TTY\n *   context.\n * - Both vended `providers.tf` declare `required_version = \">= 1.0\"`, matching\n *   every other `.tf` file the plugin vends, and the bootstrap one pins the AWS\n *   provider.\n *\n * How to write a migration:\n * - https://nx.dev/docs/kb/migration-generators\n * - What `nextSteps` means: https://nx.dev/docs/reference/devkit/MigrationReturnObject\n */\n\nconst hcl = (pattern: string) => `language hcl\\n${pattern}`;\n\n/** The scan command, as the pre-fix generator vended it on `test`. */\nconst CHECKOV_COMMAND_PATTERN = /uvx --from checkov==/;\n\nconst divergedTargetsStep = (projectName: string) =>\n  `${projectName}: no 'test' target carrying the checkov scan was found, so no 'checkov' target was added - add one running checkov over the project so 'nx run-many --target checkov' includes this project.`;\n\nconst divergedProvidersStep = (filePath: string) =>\n  `${filePath}: has diverged from the generated shape - left untouched. Add \\`required_version = \">= 1.0\"\\` to its \\`terraform\\` block to pin the minimum Terraform version.`;\n\nconst divergedBootstrapDestroyStep = (projectName: string) =>\n  `${projectName}: its 'bootstrap-destroy' target no longer matches the shape the generator produced - left untouched. Pass \\`-var=aws_region=<region>\\` to \\`terraform destroy\\`, otherwise it blocks on an input prompt when run without a TTY.`;\n\n/**\n * Add `required_version` to a `providers.tf` that omits it.\n *\n * The bootstrap copy has no `terraform` block at all, so it is created;\n * the src copy has one holding `required_providers`, so it is added to.\n */\nconst migrateRequiredVersion = async (\n  tree: Tree,\n  filePath: string,\n  nextSteps: string[],\n): Promise<void> => {\n  if (!tree.exists(filePath)) return;\n\n  // Already declared - nothing to do, whatever constraint the user chose.\n  if (await matchGritQL(tree, filePath, hcl('`required_version = $_`'))) {\n    return;\n  }\n\n  const hasRequiredProviders = await matchGritQL(\n    tree,\n    filePath,\n    hcl(\n      '`terraform { $body }` where { $body <: contains `required_providers` }',\n    ),\n  );\n\n  if (hasRequiredProviders) {\n    await applyGritQL(\n      tree,\n      filePath,\n      hcl(\n        '`terraform { $body }` => `terraform {\\n  required_version = \">= 1.0\"\\n\\n  $body\\n}`',\n      ),\n    );\n    return;\n  }\n\n  // No `terraform` block: prepend one ahead of the aws provider block.\n  const providerBlock = hcl('`provider \"aws\" { $body }`');\n  if (!(await matchGritQL(tree, filePath, providerBlock))) {\n    nextSteps.push(divergedProvidersStep(filePath));\n    return;\n  }\n\n  await applyGritQL(\n    tree,\n    filePath,\n    hcl(\n      '`provider \"aws\" { $body }` => `terraform {\\n  required_version = \">= 1.0\"\\n}\\n\\nprovider \"aws\" {\\n  $body\\n}`',\n    ),\n  );\n};\n\nexport default async function migration(\n  tree: Tree,\n): Promise<MigrationReturnObject> {\n  const nextSteps: string[] = [];\n\n  for (const [projectName, project] of getProjects(tree)) {\n    const generator = (project.metadata as { generator?: string } | undefined)\n      ?.generator;\n    if (generator !== TERRAFORM_PROJECT_GENERATOR_INFO.id) continue;\n\n    const targets = project.targets ?? {};\n    let changed = false;\n\n    // Add `checkov`, copying the scan from the `test` target the pre-fix\n    // generator put it on. `test` itself belongs to the user and is left as it\n    // is. Guarded on `checkov` being absent so a re-run is a no-op.\n    if (!targets.checkov) {\n      const command = targets.test?.options?.command;\n\n      if (\n        typeof command !== 'string' ||\n        !CHECKOV_COMMAND_PATTERN.test(command)\n      ) {\n        nextSteps.push(divergedTargetsStep(projectName));\n      } else {\n        // The config file is vended below, so wire it in at the same time.\n        const withConfigFile = command.includes('--config-file')\n          ? command\n          : command.replace(\n              'checkov --directory',\n              'checkov --config-file ../checkov.yml --directory',\n            );\n\n        targets.checkov = normalizeTargetKeyOrder({\n          ...targets.test,\n          options: { ...targets.test.options, command: withConfigFile },\n        });\n        changed = true;\n      }\n    }\n\n    // Point `bootstrap-destroy` at the vended script, which resolves the\n    // region rather than leaving terraform to prompt for it.\n    const bootstrapDestroy = targets['bootstrap-destroy'];\n    if (bootstrapDestroy) {\n      const scriptCommand = `tsx {projectRoot}/scripts/bootstrap-destroy.ts {projectRoot}`;\n      const alreadyMigrated =\n        bootstrapDestroy.options?.commands?.[0] === scriptCommand;\n\n      if (!alreadyMigrated) {\n        const command = bootstrapDestroy.options?.command;\n        // Only rewrite the exact shape the generator produced.\n        const isVendedShape =\n          typeof command === 'string' &&\n          /^terraform destroy -state=\\S+bootstrap\\.tfstate$/.test(\n            command.trim(),\n          );\n\n        if (!isVendedShape) {\n          nextSteps.push(divergedBootstrapDestroyStep(projectName));\n        } else {\n          targets['bootstrap-destroy'] = normalizeTargetKeyOrder({\n            executor: bootstrapDestroy.executor,\n            options: {\n              forwardAllArgs: true,\n              commands: [scriptCommand],\n              cwd: '{workspaceRoot}',\n            },\n          });\n          changed = true;\n        }\n      }\n    }\n\n    if (changed) {\n      updateProjectConfiguration(tree, projectName, {\n        ...project,\n        targets: sortObjectKeys(targets),\n      });\n    }\n\n    // Vend the checkov config and the bootstrap-destroy script. KeepExisting\n    // leaves a user's own copy alone and makes a re-run a no-op.\n    generateFiles(\n      tree,\n      joinPathFragments(\n        import.meta.dirname,\n        '../../../terraform/project/files/checkov',\n      ),\n      project.root,\n      {},\n      { overwriteStrategy: OverwriteStrategy.KeepExisting },\n    );\n\n    // Only application projects have a bootstrap dir to destroy. The scripts\n    // dir is shared with the generator's templates, so `stateKeyPrefix` is\n    // resolved the same way it computes it; KeepExisting leaves the scripts\n    // that already exist untouched regardless.\n    if (tree.exists(joinPathFragments(project.root, 'bootstrap'))) {\n      generateFiles(\n        tree,\n        joinPathFragments(\n          import.meta.dirname,\n          '../../../terraform/project/files/application/scripts',\n        ),\n        joinPathFragments(project.root, 'scripts'),\n        { stateKeyPrefix: kebabCase(projectName) },\n        { overwriteStrategy: OverwriteStrategy.KeepExisting },\n      );\n    }\n\n    await migrateRequiredVersion(\n      tree,\n      joinPathFragments(project.root, 'src/providers.tf'),\n      nextSteps,\n    );\n    await migrateRequiredVersion(\n      tree,\n      joinPathFragments(project.root, 'bootstrap/providers.tf'),\n      nextSteps,\n    );\n  }\n\n  await formatFilesInSubtree(tree);\n\n  return { nextSteps };\n}\n"],"names":["generateFiles","getProjects","joinPathFragments","OverwriteStrategy","updateProjectConfiguration","TERRAFORM_PROJECT_GENERATOR_INFO","applyGritQL","matchGritQL","formatFilesInSubtree","kebabCase","normalizeTargetKeyOrder","sortObjectKeys","hcl","pattern","CHECKOV_COMMAND_PATTERN","divergedTargetsStep","projectName","divergedProvidersStep","filePath","divergedBootstrapDestroyStep","migrateRequiredVersion","tree","nextSteps","exists","hasRequiredProviders","providerBlock","push","migration","project","generator","metadata","id","targets","changed","checkov","command","test","options","withConfigFile","includes","replace","bootstrapDestroy","scriptCommand","alreadyMigrated","commands","isVendedShape","trim","executor","forwardAllArgs","cwd","dirname","root","overwriteStrategy","KeepExisting","stateKeyPrefix"],"mappings":"AAAA;;;CAGC,GACD,SACEA,aAAa,EACbC,WAAW,EACXC,iBAAiB,EAEjBC,iBAAiB,EAEjBC,0BAA0B,QACrB,aAAa;AACpB,SAASC,gCAAgC,QAAQ,0CAA0C;AAC3F,SAASC,WAAW,EAAEC,WAAW,QAAQ,wBAAwB;AACjE,SAASC,oBAAoB,QAAQ,2BAA2B;AAChE,SAASC,SAAS,QAAQ,0BAA0B;AACpD,SAASC,uBAAuB,QAAQ,uBAAuB;AAC/D,SAASC,cAAc,QAAQ,2BAA2B;AAE1D;;;;;;;;;;;;;;;;;;;;;CAqBC,GAED,MAAMC,MAAM,CAACC,UAAoB,CAAC,cAAc,EAAEA,SAAS;AAE3D,oEAAoE,GACpE,MAAMC,0BAA0B;AAEhC,MAAMC,sBAAsB,CAACC,cAC3B,GAAGA,YAAY,4LAA4L,CAAC;AAE9M,MAAMC,wBAAwB,CAACC,WAC7B,GAAGA,SAAS,8JAA8J,CAAC;AAE7K,MAAMC,+BAA+B,CAACH,cACpC,GAAGA,YAAY,gOAAgO,CAAC;AAElP;;;;;CAKC,GACD,MAAMI,yBAAyB,OAC7BC,MACAH,UACAI;IAEA,IAAI,CAACD,KAAKE,MAAM,CAACL,WAAW;IAE5B,wEAAwE;IACxE,IAAI,MAAMX,YAAYc,MAAMH,UAAUN,IAAI,6BAA6B;QACrE;IACF;IAEA,MAAMY,uBAAuB,MAAMjB,YACjCc,MACAH,UACAN,IACE;IAIJ,IAAIY,sBAAsB;QACxB,MAAMlB,YACJe,MACAH,UACAN,IACE;QAGJ;IACF;IAEA,qEAAqE;IACrE,MAAMa,gBAAgBb,IAAI;IAC1B,IAAI,CAAE,MAAML,YAAYc,MAAMH,UAAUO,gBAAiB;QACvDH,UAAUI,IAAI,CAACT,sBAAsBC;QACrC;IACF;IAEA,MAAMZ,YACJe,MACAH,UACAN,IACE;AAGN;AAEA,eAAe,eAAee,UAC5BN,IAAU;IAEV,MAAMC,YAAsB,EAAE;IAE9B,KAAK,MAAM,CAACN,aAAaY,QAAQ,IAAI3B,YAAYoB,MAAO;QACtD,MAAMQ,YAAaD,QAAQE,QAAQ,EAC/BD;QACJ,IAAIA,cAAcxB,iCAAiC0B,EAAE,EAAE;QAEvD,MAAMC,UAAUJ,QAAQI,OAAO,IAAI,CAAC;QACpC,IAAIC,UAAU;QAEd,qEAAqE;QACrE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,CAACD,QAAQE,OAAO,EAAE;YACpB,MAAMC,UAAUH,QAAQI,IAAI,EAAEC,SAASF;YAEvC,IACE,OAAOA,YAAY,YACnB,CAACrB,wBAAwBsB,IAAI,CAACD,UAC9B;gBACAb,UAAUI,IAAI,CAACX,oBAAoBC;YACrC,OAAO;gBACL,mEAAmE;gBACnE,MAAMsB,iBAAiBH,QAAQI,QAAQ,CAAC,mBACpCJ,UACAA,QAAQK,OAAO,CACb,uBACA;gBAGNR,QAAQE,OAAO,GAAGxB,wBAAwB;oBACxC,GAAGsB,QAAQI,IAAI;oBACfC,SAAS;wBAAE,GAAGL,QAAQI,IAAI,CAACC,OAAO;wBAAEF,SAASG;oBAAe;gBAC9D;gBACAL,UAAU;YACZ;QACF;QAEA,qEAAqE;QACrE,yDAAyD;QACzD,MAAMQ,mBAAmBT,OAAO,CAAC,oBAAoB;QACrD,IAAIS,kBAAkB;YACpB,MAAMC,gBAAgB,CAAC,4DAA4D,CAAC;YACpF,MAAMC,kBACJF,iBAAiBJ,OAAO,EAAEO,UAAU,CAAC,EAAE,KAAKF;YAE9C,IAAI,CAACC,iBAAiB;gBACpB,MAAMR,UAAUM,iBAAiBJ,OAAO,EAAEF;gBAC1C,uDAAuD;gBACvD,MAAMU,gBACJ,OAAOV,YAAY,YACnB,mDAAmDC,IAAI,CACrDD,QAAQW,IAAI;gBAGhB,IAAI,CAACD,eAAe;oBAClBvB,UAAUI,IAAI,CAACP,6BAA6BH;gBAC9C,OAAO;oBACLgB,OAAO,CAAC,oBAAoB,GAAGtB,wBAAwB;wBACrDqC,UAAUN,iBAAiBM,QAAQ;wBACnCV,SAAS;4BACPW,gBAAgB;4BAChBJ,UAAU;gCAACF;6BAAc;4BACzBO,KAAK;wBACP;oBACF;oBACAhB,UAAU;gBACZ;YACF;QACF;QAEA,IAAIA,SAAS;YACX7B,2BAA2BiB,MAAML,aAAa;gBAC5C,GAAGY,OAAO;gBACVI,SAASrB,eAAeqB;YAC1B;QACF;QAEA,yEAAyE;QACzE,6DAA6D;QAC7DhC,cACEqB,MACAnB,kBACE,YAAYgD,OAAO,EACnB,6CAEFtB,QAAQuB,IAAI,EACZ,CAAC,GACD;YAAEC,mBAAmBjD,kBAAkBkD,YAAY;QAAC;QAGtD,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,2CAA2C;QAC3C,IAAIhC,KAAKE,MAAM,CAACrB,kBAAkB0B,QAAQuB,IAAI,EAAE,eAAe;YAC7DnD,cACEqB,MACAnB,kBACE,YAAYgD,OAAO,EACnB,yDAEFhD,kBAAkB0B,QAAQuB,IAAI,EAAE,YAChC;gBAAEG,gBAAgB7C,UAAUO;YAAa,GACzC;gBAAEoC,mBAAmBjD,kBAAkBkD,YAAY;YAAC;QAExD;QAEA,MAAMjC,uBACJC,MACAnB,kBAAkB0B,QAAQuB,IAAI,EAAE,qBAChC7B;QAEF,MAAMF,uBACJC,MACAnB,kBAAkB0B,QAAQuB,IAAI,EAAE,2BAChC7B;IAEJ;IAEA,MAAMd,qBAAqBa;IAE3B,OAAO;QAAEC;IAAU;AACrB"}

package/src/preset/__snapshots__/generator.spec.ts.snap

@@ -360,7 +360,8 @@ exports[`preset generator > should run successfully > nx.json 1`] = `
       }
     }
   ],
-  "analytics": false
+  "analytics": false,
+  "parallel": 8
 }
 "
 `;
@@ -414,9 +415,9 @@ onlyBuiltDependencies:
   - sharp
 catalogMode: strict
 catalog:
-  nx: 23.1.1
-  '@nx/js': 23.1.1
-  '@nx/workspace': 23.1.1
+  nx: 23.1.2
+  '@nx/js': 23.1.2
+  '@nx/workspace': 23.1.2
   typescript: ~6.0.3
   '@biomejs/biome': 2.5.10
   '@aws/nx-plugin': ^0.0.0

package/src/py/agent/__snapshots__/generator.constructs.spec.ts.snap

@@ -766,10 +766,10 @@ dependencies = [
   "aws-lambda-powertools==3.34.0",
   "aws-opentelemetry-distro==0.19.0",
   "bedrock-agentcore==1.22.0",
-  "boto3==1.43.78",
+  "boto3==1.43.82",
   "fastapi==0.141.1",
   "mcp==1.28.1",
-  "strands-agents==1.53.0",
+  "strands-agents==1.54.0",
   "strands-agents-tools==0.8.6",
   "uvicorn==0.52.4"
 ]

package/src/py/agent/__snapshots__/generator.frameworks.spec.ts.snap

@@ -704,16 +704,16 @@ dependencies = [
   "aws-lambda-powertools==3.34.0",
   "aws-opentelemetry-distro==0.19.0",
   "bedrock-agentcore==1.22.0",
-  "boto3==1.43.78",
+  "boto3==1.43.82",
   "fastapi==0.141.1",
   "mcp==1.28.1",
-  "langchain==1.3.16",
-  "langchain-aws==1.7.3",
+  "langchain==1.3.18",
+  "langchain-aws==1.7.4",
   "langgraph==1.2.11",
   "langgraph-checkpoint-sqlite==3.1.1",
   "aiosqlite==0.22.1",
-  "ag-ui-protocol==0.1.20",
-  "ag-ui-langgraph==0.0.43",
+  "ag-ui-protocol==0.1.21",
+  "ag-ui-langgraph==0.0.44",
   "uvicorn==0.52.4"
 ]
 

package/src/py/agent/__snapshots__/generator.protocols.spec.ts.snap

@@ -5,7 +5,7 @@ exports[`py#agent generator > should create DynamoDB checkpoint table and S3 off
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -369,7 +369,7 @@ exports[`py#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -680,7 +680,7 @@ exports[`py#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -1100,7 +1100,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os

package/src/py/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -232,7 +232,7 @@ exports[`py#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/fast-api/__snapshots__/generator.terraform.spec.ts.snap

@@ -11,7 +11,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -262,7 +262,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -846,7 +846,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -1097,7 +1097,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1754,7 +1754,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -2005,7 +2005,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2566,7 +2566,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2879,7 +2879,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3914,7 +3914,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4227,7 +4227,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5251,7 +5251,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5564,7 +5564,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/py/lambda-function/__snapshots__/generator.spec.ts.snap

@@ -70,7 +70,7 @@ exports[`lambda-handler project generator > terraform iac > should generate terr
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -255,7 +255,7 @@ exports[`lambda-handler project generator > terraform iac > should match snapsho
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"

package/src/py/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -155,7 +155,7 @@ exports[`py#mcp-server generator > should match snapshot for Terraform generated
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -575,7 +575,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os
@@ -853,7 +853,7 @@ dependencies = [
   "aws-lambda-powertools==3.34.0",
   "mcp==1.28.1",
   "uvicorn==0.52.4",
-  "boto3==1.43.78",
+  "boto3==1.43.82",
   "aws-opentelemetry-distro==0.19.0"
 ]
 

package/src/py/rdb/__snapshots__/generator.spec.ts.snap

@@ -214,7 +214,7 @@ exports[`py#rdb generator > should generate Terraform modules 1`] = `
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -1526,7 +1526,7 @@ dependencies = [
   "alembic==1.19.1",
   "greenlet==3.5.5",
   "asyncpg==0.31.0",
-  "boto3==1.43.78",
+  "boto3==1.43.82",
   "aws-lambda-powertools==3.34.0"
 ]
 

package/src/smithy/project/__snapshots__/generator.spec.ts.snap

@@ -42,7 +42,7 @@ exports[`smithyProjectGenerator > shape libraries > should generate a shape libr
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "ncp dist/{projectRoot}/smithy/source/model/model.json dist/{projectRoot}/build/model.json"
         ],
         "parallel": false,
@@ -116,7 +116,7 @@ exports[`smithyProjectGenerator > should generate smithy project with all custom
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "cpy \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi --flat --rename=openapi.json"
         ],
         "parallel": false,
@@ -170,7 +170,7 @@ exports[`smithyProjectGenerator > should generate smithy project with custom dir
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "cpy \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi --flat --rename=openapi.json"
         ],
         "parallel": false,
@@ -316,7 +316,7 @@ exports[`smithyProjectGenerator > should generate smithy project with default op
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "cpy \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi --flat --rename=openapi.json"
         ],
         "parallel": false,
@@ -364,7 +364,7 @@ exports[`smithyProjectGenerator > should generate smithy project with default op
       "software.amazon.smithy:smithy-aws-traits:1.73.0",
       "software.amazon.smithy:smithy-validation-model:1.73.0",
       "software.amazon.smithy:smithy-openapi:1.73.0",
-      "software.amazon.smithy.typescript:smithy-aws-typescript-codegen:0.52.0"
+      "software.amazon.smithy.typescript:smithy-aws-typescript-codegen:0.53.0"
     ]
   }
 }
@@ -456,7 +456,7 @@ exports[`smithyProjectGenerator > should generate smithy project with subdirecto
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "cpy \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi --flat --rename=openapi.json"
         ],
         "parallel": false,
@@ -550,7 +550,7 @@ exports[`smithyProjectGenerator > should handle kebab-case conversion for servic
       "software.amazon.smithy:smithy-aws-traits:1.73.0",
       "software.amazon.smithy:smithy-validation-model:1.73.0",
       "software.amazon.smithy:smithy-openapi:1.73.0",
-      "software.amazon.smithy.typescript:smithy-aws-typescript-codegen:0.52.0"
+      "software.amazon.smithy.typescript:smithy-aws-typescript-codegen:0.53.0"
     ]
   }
 }

package/src/smithy/ts/api/__snapshots__/generator.spec.ts.snap

@@ -413,7 +413,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -729,7 +729,7 @@ exports[`tsSmithyApiGenerator > should generate smithy ts api with Terraform pro
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2103,7 +2103,7 @@ exports[`tsSmithyApiGenerator > should generate smithy ts api with default optio
           "rimraf dist/{projectRoot}/build",
           "rimraf dist/{projectRoot}/smithy",
           "make-dir dist/{projectRoot}/build",
-          "npx -y mise@2026.8.10 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
+          "npx -y mise@2026.8.14 exec smithy@1.73.0 -- smithy build -c {projectRoot}/smithy-build.json --output dist/{projectRoot}/smithy",
           "cpy \\"dist/{projectRoot}/smithy/source/openapi/*.openapi.json\\" dist/{projectRoot}/build/openapi --flat --rename=openapi.json"
         ],
         "parallel": false,
@@ -2242,7 +2242,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -2555,7 +2555,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3555,7 +3555,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3868,7 +3868,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4857,7 +4857,7 @@ exports[`tsSmithyApiGenerator > terraform iac > should generate terraform with c
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/trpc/backend/__snapshots__/generator.spec.ts.snap

@@ -3175,7 +3175,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -3426,7 +3426,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -3990,7 +3990,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -4241,7 +4241,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -4878,7 +4878,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -5129,7 +5129,7 @@ output "api_log_group_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5670,7 +5670,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -5983,7 +5983,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -6984,7 +6984,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -7297,7 +7297,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -8287,7 +8287,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -8600,7 +8600,7 @@ output "waf_web_acl_arn" {
     }
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/ts/agent/__snapshots__/generator.spec.ts.snap

@@ -984,7 +984,7 @@ exports[`ts#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"
@@ -1295,7 +1295,7 @@ exports[`ts#agent generator > should match snapshot for Terraform generated file
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -1715,7 +1715,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os

package/src/ts/dcr-proxy/__snapshots__/generator.spec.ts.snap

@@ -579,7 +579,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"

package/src/ts/dynamodb/__snapshots__/generator.spec.ts.snap

@@ -35,7 +35,7 @@ exports[`ts#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
   }
 }
@@ -232,7 +232,7 @@ exports[`ts#dynamodb generator > should generate terraform modules when iac is t
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     random = {
       source  = "hashicorp/random"

package/src/ts/lambda-function/__snapshots__/generator.spec.ts.snap

@@ -141,7 +141,7 @@ exports[`ts-lambda-function generator > terraform iac > should generate terrafor
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"
@@ -326,7 +326,7 @@ exports[`ts-lambda-function generator > terraform iac > should match snapshot fo
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     archive = {
       source  = "hashicorp/archive"

package/src/ts/mcp-server/__snapshots__/generator.spec.ts.snap

@@ -155,7 +155,7 @@ exports[`ts#mcp-server generator > should match snapshot for Terraform generated
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "6.61.0"
+      version = "6.62.0"
     }
     external = {
       source  = "hashicorp/external"
@@ -575,7 +575,7 @@ resource "null_resource" "runtime_ready" {
 
   provisioner "local-exec" {
     command = <<-EOT
-      uv run --with boto3==1.43.78 python -c "
+      uv run --with boto3==1.43.82 python -c "
 import boto3
 import json
 import os