@aws/nx-plugin 1.3.3 → 1.3.5

package/src/utils/versions.d.ts

@@ -10,22 +10,22 @@ export declare const TS_VERSIONS: {
     readonly '@a2a-js/sdk': "0.3.14";
     readonly '@aws/aws-distro-opentelemetry-node-autoinstrumentation': "0.13.0";
     readonly '@opentelemetry/propagator-jaeger': "2.12.0";
-    readonly minimatch: "10.2.6";
+    readonly minimatch: "11.0.5";
     readonly 'deepmerge-ts': "8.0.2";
     readonly mysql2: "3.24.6";
-    readonly '@aws-sdk/client-dynamodb': "3.1161.0";
-    readonly '@aws-sdk/client-api-gateway': "3.1161.0";
-    readonly '@aws-sdk/client-iam': "3.1161.0";
-    readonly '@aws-sdk/client-bedrock-agentcore': "3.1161.0";
-    readonly '@aws-sdk/client-bedrock-runtime': "3.1161.0";
-    readonly '@aws-sdk/client-greengrassv2': "3.1161.0";
-    readonly '@aws-sdk/client-s3': "3.1161.0";
-    readonly '@aws-sdk/client-sts': "3.1161.0";
-    readonly '@aws-sdk/client-cognito-identity-provider': "3.1161.0";
-    readonly '@aws-sdk/credential-providers': "3.1161.0";
-    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.79";
-    readonly '@aws-sdk/client-secrets-manager': "3.1161.0";
-    readonly '@aws-sdk/rds-signer': "3.1161.0";
+    readonly '@aws-sdk/client-dynamodb': "3.1164.0";
+    readonly '@aws-sdk/client-api-gateway': "3.1164.0";
+    readonly '@aws-sdk/client-iam': "3.1164.0";
+    readonly '@aws-sdk/client-bedrock-agentcore': "3.1164.0";
+    readonly '@aws-sdk/client-bedrock-runtime': "3.1164.0";
+    readonly '@aws-sdk/client-greengrassv2': "3.1164.0";
+    readonly '@aws-sdk/client-s3': "3.1164.0";
+    readonly '@aws-sdk/client-sts': "3.1164.0";
+    readonly '@aws-sdk/client-cognito-identity-provider': "3.1164.0";
+    readonly '@aws-sdk/credential-providers': "3.1164.0";
+    readonly '@aws-sdk/credential-provider-cognito-identity': "3.972.81";
+    readonly '@aws-sdk/client-secrets-manager': "3.1164.0";
+    readonly '@aws-sdk/rds-signer': "3.1164.0";
     readonly '@smithy/server-apigateway': "0.3.5";
     readonly '@smithy/server-node': "0.3.5";
     readonly '@aws-lambda-powertools/logger': "2.36.0";
@@ -33,7 +33,7 @@ export declare const TS_VERSIONS: {
     readonly '@aws-lambda-powertools/parameters': "2.36.0";
     readonly '@aws-lambda-powertools/tracer': "2.36.0";
     readonly '@aws-lambda-powertools/parser': "2.36.0";
-    readonly '@aws-sdk/client-appconfigdata': "3.1161.0";
+    readonly '@aws-sdk/client-appconfigdata': "3.1164.0";
     readonly '@middy/core': "7.9.2";
     readonly '@nxlv/python': "23.3.1";
     readonly '@nx-extend/terraform': "10.4.1";
@@ -46,33 +46,33 @@ export declare const TS_VERSIONS: {
     readonly '@nx/workspace': "23.3.1";
     readonly 'create-nx-workspace': "23.3.1";
     readonly '@swc-node/register': "1.12.1";
-    readonly '@swc/core': "1.16.21";
+    readonly '@swc/core': "1.16.22";
     readonly '@modelcontextprotocol/sdk': "1.32.2";
     readonly '@modelcontextprotocol/client': "2.4.0";
-    readonly '@modelcontextprotocol/inspector': "2.13.0";
+    readonly '@modelcontextprotocol/inspector': "2.14.0";
     readonly '@ag-ui/a2ui-toolkit': "0.0.5";
     readonly '@ag-ui/aws-strands': "1.0.1";
     readonly '@ag-ui/client': "1.0.2";
     readonly '@ag-ui/core': "1.0.2";
     readonly '@ag-ui/encoder': "1.0.2";
     readonly 'agent-chat-cli': "0.3.0";
-    readonly '@copilotkit/react-core': "1.83.0";
+    readonly '@copilotkit/react-core': "1.85.0";
     readonly rxjs: "7.8.2";
-    readonly '@strands-agents/sdk': "1.23.0";
+    readonly '@strands-agents/sdk': "1.24.0";
     readonly '@tanstack/react-router': "1.170.46";
-    readonly '@tanstack/router-plugin': "1.168.48";
-    readonly '@tanstack/router-generator': "1.167.46";
+    readonly '@tanstack/router-plugin': "1.169.0";
+    readonly '@tanstack/router-generator': "1.168.0";
     readonly '@tanstack/virtual-file-routes': "1.162.0";
-    readonly '@tanstack/router-utils': "1.162.4";
-    readonly '@cloudscape-design/board-components': "3.0.243";
-    readonly '@cloudscape-design/chat-components': "1.0.185";
-    readonly '@cloudscape-design/components': "3.0.1407";
-    readonly '@cloudscape-design/global-styles': "1.0.71";
-    readonly '@tanstack/react-query': "5.105.0";
-    readonly '@tanstack/react-query-devtools': "5.105.0";
-    readonly '@trpc/tanstack-react-query': "11.22.1";
-    readonly '@trpc/client': "11.22.1";
-    readonly '@trpc/server': "11.22.1";
+    readonly '@tanstack/router-utils': "1.163.0";
+    readonly '@cloudscape-design/board-components': "3.0.245";
+    readonly '@cloudscape-design/chat-components': "1.0.188";
+    readonly '@cloudscape-design/components': "3.0.1410";
+    readonly '@cloudscape-design/global-styles': "1.0.72";
+    readonly '@tanstack/react-query': "5.107.1";
+    readonly '@tanstack/react-query-devtools': "5.107.1";
+    readonly '@trpc/tanstack-react-query': "11.25.0";
+    readonly '@trpc/client': "11.25.0";
+    readonly '@trpc/server': "11.25.0";
     readonly '@types/node': "26.6.6";
     readonly '@types/aws-lambda': "8.10.164";
     readonly '@types/cors': "2.8.19";
@@ -82,16 +82,16 @@ export declare const TS_VERSIONS: {
     readonly '@types/express': "5.0.6";
     readonly '@smithy/config-resolver': "4.7.2";
     readonly '@smithy/node-config-provider': "4.6.2";
-    readonly '@smithy/node-http-handler': "4.14.1";
-    readonly '@smithy/types': "4.19.0";
-    readonly '@vitest/coverage-v8': "5.0.5";
-    readonly '@vitest/ui': "5.0.5";
+    readonly '@smithy/node-http-handler': "4.14.2";
+    readonly '@smithy/types': "4.20.0";
+    readonly '@vitest/coverage-v8': "5.1.0";
+    readonly '@vitest/ui': "5.1.0";
     readonly '@astrojs/react': "6.0.6";
-    readonly '@astrojs/starlight': "0.42.8";
-    readonly astro: "7.4.4";
-    readonly cookie: "2.0.1";
+    readonly '@astrojs/starlight': "0.42.10";
+    readonly astro: "7.4.7";
+    readonly cookie: "2.0.2";
     readonly aws4fetch: "1.0.20";
-    readonly 'aws-cdk': "2.1147.0";
+    readonly 'aws-cdk': "2.1148.0";
     readonly 'aws-cdk-lib': "2.275.0";
     readonly 'aws-iot-device-sdk-v2': "1.28.2";
     readonly 'aws-xray-sdk-core': "3.12.0";
@@ -99,13 +99,13 @@ export declare const TS_VERSIONS: {
     readonly cors: "2.8.6";
     readonly chalk: "6.0.1";
     readonly 'class-variance-authority': "0.7.1";
-    readonly cn: "0.5.1";
-    readonly commander: "15.0.0";
+    readonly cn: "0.5.2";
+    readonly commander: "15.1.0";
     readonly electrodb: "3.9.3";
     readonly esbuild: "0.28.2";
     readonly 'event-source-polyfill': "1.0.31";
     readonly '@types/event-source-polyfill': "1.0.5";
-    readonly '@biomejs/biome': "2.6.4";
+    readonly '@biomejs/biome': "2.6.6";
     readonly '@prisma/adapter-mariadb': "7.10.1";
     readonly '@prisma/adapter-pg': "7.10.1";
     readonly '@prisma/client': "7.10.1";
@@ -118,8 +118,8 @@ export declare const TS_VERSIONS: {
     readonly '@types/fs-extra': "11.0.4";
     readonly 'js-yaml': "4.3.2";
     readonly mariadb: "3.5.4";
-    readonly mise: "2026.10.25";
-    readonly npm: "12.2.1";
+    readonly mise: "2026.11.4";
+    readonly npm: "12.2.2";
     readonly 'npm-check-updates': "23.1.1";
     readonly 'oidc-client-ts': "3.5.0";
     readonly pg: "8.23.1";
@@ -127,22 +127,22 @@ export declare const TS_VERSIONS: {
     readonly 'react-oidc-context': "3.3.1";
     readonly react: "19.3.1";
     readonly 'react-dom': "19.3.1";
-    readonly rolldown: "1.2.16";
-    readonly 'rolldown-plugin-dts': "0.29.0";
+    readonly rolldown: "1.3.0";
+    readonly 'rolldown-plugin-dts': "0.30.0";
     readonly shx: "0.4.0";
     readonly 'simple-git': "4.0.2";
     readonly 'source-map-support': "0.5.21";
     readonly 'starlight-blog': "0.30.2";
-    readonly tailwindcss: "4.3.3";
-    readonly '@tailwindcss/vite': "4.3.3";
+    readonly tailwindcss: "4.3.5";
+    readonly '@tailwindcss/vite': "4.3.5";
     readonly tsx: "4.23.15";
-    readonly 'lucide-react': "1.66.0";
+    readonly 'lucide-react': "1.70.0";
     readonly 'radix-ui': "1.8.1";
     readonly shadcn: "4.23.0";
     readonly 'tw-animate-css': "1.4.0";
-    readonly vite: "8.3.5";
+    readonly vite: "8.3.6";
     readonly typescript: "6.0.3";
-    readonly vitest: "5.0.5";
+    readonly vitest: "5.1.0";
     readonly jsdom: "29.1.1";
     readonly zod: "4.6.7";
     readonly ws: "8.22.1";
@@ -200,30 +200,30 @@ export declare const PY_VERSIONS: {
     readonly 'ag-ui-protocol': "==0.1.22";
     readonly 'ag-ui-strands': "==0.4.1";
     readonly aiosqlite: "==0.22.1";
-    readonly 'aws-lambda-powertools': "==3.38.0";
-    readonly 'aws-lambda-powertools[tracer]': "==3.38.0";
-    readonly 'aws-lambda-powertools[parser]': "==3.38.0";
+    readonly 'aws-lambda-powertools': "==3.39.0";
+    readonly 'aws-lambda-powertools[tracer]': "==3.39.0";
+    readonly 'aws-lambda-powertools[parser]': "==3.39.0";
     readonly 'aws-opentelemetry-distro': "==0.22.0";
     readonly awsiotsdk: "==1.31.0";
-    readonly 'bedrock-agentcore': "==1.25.2";
-    readonly boto3: "==1.43.123";
-    readonly checkov: "==3.4.0";
-    readonly fastapi: "==0.162.0";
-    readonly 'fastapi[standard]': "==0.162.0";
+    readonly 'bedrock-agentcore': "==1.25.4";
+    readonly boto3: "==1.43.126";
+    readonly checkov: "==3.4.3";
+    readonly fastapi: "==0.162.2";
+    readonly 'fastapi[standard]': "==0.162.2";
     readonly httpx: "==0.28.1";
-    readonly langchain: "==1.4.7";
-    readonly 'langchain-aws': "==1.9.1";
+    readonly langchain: "==1.4.9";
+    readonly 'langchain-aws': "==1.9.2";
     readonly 'langchain-mcp-adapters': "==0.3.2";
-    readonly langgraph: "==1.2.19";
-    readonly 'langgraph-checkpoint-aws': "==1.2.6";
+    readonly langgraph: "==1.2.20";
+    readonly 'langgraph-checkpoint-aws': "==1.2.7";
     readonly 'langgraph-checkpoint-sqlite': "==3.1.3";
     readonly mcp: "==1.28.1";
     readonly 'pip-check-updates': "==0.29.0";
     readonly 'pip-licenses': "==5.5.5";
-    readonly pydantic: "==2.14.2";
-    readonly ruff: "==0.17.3";
-    readonly 'strands-agents': "==1.63.0";
-    readonly 'strands-agents[a2a]': "==1.63.0";
+    readonly pydantic: "==2.14.3";
+    readonly ruff: "==0.17.4";
+    readonly 'strands-agents': "==1.64.0";
+    readonly 'strands-agents[a2a]': "==1.64.0";
     readonly 'strands-agents-tools': "==0.8.11";
     readonly ty: "==0.0.89";
     readonly pynamodb: "==6.1.0";
@@ -384,8 +384,8 @@ export declare const terraformLambdaRuntimeVars: () => {
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */
 export declare const TERRAFORM_VERSIONS: {
-    readonly aws: "6.71.0";
-    readonly awscc: "1.108.0";
+    readonly aws: "6.72.0";
+    readonly awscc: "1.109.0";
     readonly random: "3.9.1";
     readonly null: "3.3.2";
     readonly archive: "2.8.1";
@@ -399,8 +399,8 @@ export type ITerraformProviderVersion = keyof typeof TERRAFORM_VERSIONS;
  * generated `.tf` templates (e.g. `version = "<%- awsProviderVersion %>"`)
  */
 export declare const terraformProviderVersions: () => {
-    awsProviderVersion: "6.71.0";
-    awsccProviderVersion: "1.108.0";
+    awsProviderVersion: "6.72.0";
+    awsccProviderVersion: "1.109.0";
     randomProviderVersion: "3.9.1";
     nullProviderVersion: "3.3.2";
     archiveProviderVersion: "2.8.1";

package/src/utils/versions.js

@@ -15,26 +15,26 @@
     // brace-expansion 5.x, the only line Trivy's `< 5.0.8` advisory range treats
     // as fixed. Overriding brace-expansion directly is not viable — 5.x drops the
     // CommonJS default export that minimatch 9 calls.
-    minimatch: '10.2.6',
+    minimatch: '11.0.5',
     // Both overridden in the vended RDB migration image build, which installs the
     // prisma CLI to run migrations: its own ranges resolve deepmerge-ts below the
     // CVE-2026-40345 fix (HIGH) and mysql2 below the GHSA-3f6p-5ww8-9rcr fix
     // (HIGH). Neither is imported by the handler, which drives the schema engine.
     'deepmerge-ts': '8.0.2',
     mysql2: '3.24.6',
-    '@aws-sdk/client-dynamodb': '3.1161.0',
-    '@aws-sdk/client-api-gateway': '3.1161.0',
-    '@aws-sdk/client-iam': '3.1161.0',
-    '@aws-sdk/client-bedrock-agentcore': '3.1161.0',
-    '@aws-sdk/client-bedrock-runtime': '3.1161.0',
-    '@aws-sdk/client-greengrassv2': '3.1161.0',
-    '@aws-sdk/client-s3': '3.1161.0',
-    '@aws-sdk/client-sts': '3.1161.0',
-    '@aws-sdk/client-cognito-identity-provider': '3.1161.0',
-    '@aws-sdk/credential-providers': '3.1161.0',
-    '@aws-sdk/credential-provider-cognito-identity': '3.972.79',
-    '@aws-sdk/client-secrets-manager': '3.1161.0',
-    '@aws-sdk/rds-signer': '3.1161.0',
+    '@aws-sdk/client-dynamodb': '3.1164.0',
+    '@aws-sdk/client-api-gateway': '3.1164.0',
+    '@aws-sdk/client-iam': '3.1164.0',
+    '@aws-sdk/client-bedrock-agentcore': '3.1164.0',
+    '@aws-sdk/client-bedrock-runtime': '3.1164.0',
+    '@aws-sdk/client-greengrassv2': '3.1164.0',
+    '@aws-sdk/client-s3': '3.1164.0',
+    '@aws-sdk/client-sts': '3.1164.0',
+    '@aws-sdk/client-cognito-identity-provider': '3.1164.0',
+    '@aws-sdk/credential-providers': '3.1164.0',
+    '@aws-sdk/credential-provider-cognito-identity': '3.972.81',
+    '@aws-sdk/client-secrets-manager': '3.1164.0',
+    '@aws-sdk/rds-signer': '3.1164.0',
     '@smithy/server-apigateway': '0.3.5',
     '@smithy/server-node': '0.3.5',
     '@aws-lambda-powertools/logger': '2.36.0',
@@ -42,7 +42,7 @@
     '@aws-lambda-powertools/parameters': '2.36.0',
     '@aws-lambda-powertools/tracer': '2.36.0',
     '@aws-lambda-powertools/parser': '2.36.0',
-    '@aws-sdk/client-appconfigdata': '3.1161.0',
+    '@aws-sdk/client-appconfigdata': '3.1164.0',
     '@middy/core': '7.9.2',
     '@nxlv/python': '23.3.1',
     '@nx-extend/terraform': '10.4.1',
@@ -56,33 +56,33 @@
     '@nx/workspace': '23.3.1',
     'create-nx-workspace': '23.3.1',
     '@swc-node/register': '1.12.1',
-    '@swc/core': '1.16.21',
+    '@swc/core': '1.16.22',
     '@modelcontextprotocol/sdk': '1.32.2',
     '@modelcontextprotocol/client': '2.4.0',
-    '@modelcontextprotocol/inspector': '2.13.0',
+    '@modelcontextprotocol/inspector': '2.14.0',
     '@ag-ui/a2ui-toolkit': '0.0.5',
     '@ag-ui/aws-strands': '1.0.1',
     '@ag-ui/client': '1.0.2',
     '@ag-ui/core': '1.0.2',
     '@ag-ui/encoder': '1.0.2',
     'agent-chat-cli': '0.3.0',
-    '@copilotkit/react-core': '1.83.0',
+    '@copilotkit/react-core': '1.85.0',
     rxjs: '7.8.2',
-    '@strands-agents/sdk': '1.23.0',
+    '@strands-agents/sdk': '1.24.0',
     '@tanstack/react-router': '1.170.46',
-    '@tanstack/router-plugin': '1.168.48',
-    '@tanstack/router-generator': '1.167.46',
+    '@tanstack/router-plugin': '1.169.0',
+    '@tanstack/router-generator': '1.168.0',
     '@tanstack/virtual-file-routes': '1.162.0',
-    '@tanstack/router-utils': '1.162.4',
-    '@cloudscape-design/board-components': '3.0.243',
-    '@cloudscape-design/chat-components': '1.0.185',
-    '@cloudscape-design/components': '3.0.1407',
-    '@cloudscape-design/global-styles': '1.0.71',
-    '@tanstack/react-query': '5.105.0',
-    '@tanstack/react-query-devtools': '5.105.0',
-    '@trpc/tanstack-react-query': '11.22.1',
-    '@trpc/client': '11.22.1',
-    '@trpc/server': '11.22.1',
+    '@tanstack/router-utils': '1.163.0',
+    '@cloudscape-design/board-components': '3.0.245',
+    '@cloudscape-design/chat-components': '1.0.188',
+    '@cloudscape-design/components': '3.0.1410',
+    '@cloudscape-design/global-styles': '1.0.72',
+    '@tanstack/react-query': '5.107.1',
+    '@tanstack/react-query-devtools': '5.107.1',
+    '@trpc/tanstack-react-query': '11.25.0',
+    '@trpc/client': '11.25.0',
+    '@trpc/server': '11.25.0',
     '@types/node': '26.6.6',
     '@types/aws-lambda': '8.10.164',
     '@types/cors': '2.8.19',
@@ -92,16 +92,16 @@
     '@types/express': '5.0.6',
     '@smithy/config-resolver': '4.7.2',
     '@smithy/node-config-provider': '4.6.2',
-    '@smithy/node-http-handler': '4.14.1',
-    '@smithy/types': '4.19.0',
-    '@vitest/coverage-v8': '5.0.5',
-    '@vitest/ui': '5.0.5',
+    '@smithy/node-http-handler': '4.14.2',
+    '@smithy/types': '4.20.0',
+    '@vitest/coverage-v8': '5.1.0',
+    '@vitest/ui': '5.1.0',
     '@astrojs/react': '6.0.6',
-    '@astrojs/starlight': '0.42.8',
-    astro: '7.4.4',
-    cookie: '2.0.1',
+    '@astrojs/starlight': '0.42.10',
+    astro: '7.4.7',
+    cookie: '2.0.2',
     aws4fetch: '1.0.20',
-    'aws-cdk': '2.1147.0',
+    'aws-cdk': '2.1148.0',
     'aws-cdk-lib': '2.275.0',
     'aws-iot-device-sdk-v2': '1.28.2',
     'aws-xray-sdk-core': '3.12.0',
@@ -109,13 +109,13 @@
     cors: '2.8.6',
     chalk: '6.0.1',
     'class-variance-authority': '0.7.1',
-    cn: '0.5.1',
-    commander: '15.0.0',
+    cn: '0.5.2',
+    commander: '15.1.0',
     electrodb: '3.9.3',
     esbuild: '0.28.2',
     'event-source-polyfill': '1.0.31',
     '@types/event-source-polyfill': '1.0.5',
-    '@biomejs/biome': '2.6.4',
+    '@biomejs/biome': '2.6.6',
     '@prisma/adapter-mariadb': '7.10.1',
     '@prisma/adapter-pg': '7.10.1',
     '@prisma/client': '7.10.1',
@@ -127,9 +127,14 @@
     'fs-extra': '11.4.1',
     '@types/fs-extra': '11.0.4',
     'js-yaml': '4.3.2',
+    // Held at 3.5.4 by the `reject` entry in .ncurc.cjs. From 3.5.5,
+    // Pool.escape() throws "(conn:-1, no: 45066) Cannot escape value: the pool
+    // has no connection", and the vended ts#rdb create-db-user handler calls
+    // pool.escape before opening a connection. A follow-up PR switches the
+    // handler to conn.escape on an open connection.
     mariadb: '3.5.4',
-    mise: '2026.10.25',
-    npm: '12.2.1',
+    mise: '2026.11.4',
+    npm: '12.2.2',
     'npm-check-updates': '23.1.1',
     'oidc-client-ts': '3.5.0',
     pg: '8.23.1',
@@ -137,22 +142,22 @@
     'react-oidc-context': '3.3.1',
     react: '19.3.1',
     'react-dom': '19.3.1',
-    rolldown: '1.2.16',
-    'rolldown-plugin-dts': '0.29.0',
+    rolldown: '1.3.0',
+    'rolldown-plugin-dts': '0.30.0',
     shx: '0.4.0',
     'simple-git': '4.0.2',
     'source-map-support': '0.5.21',
     'starlight-blog': '0.30.2',
-    tailwindcss: '4.3.3',
-    '@tailwindcss/vite': '4.3.3',
+    tailwindcss: '4.3.5',
+    '@tailwindcss/vite': '4.3.5',
     tsx: '4.23.15',
-    'lucide-react': '1.66.0',
+    'lucide-react': '1.70.0',
     'radix-ui': '1.8.1',
     shadcn: '4.23.0',
     'tw-animate-css': '1.4.0',
-    vite: '8.3.5',
+    vite: '8.3.6',
     typescript: '6.0.3',
-    vitest: '5.0.5',
+    vitest: '5.1.0',
     // The `testEnvironment` @nx/vitest writes into every generated config.
     jsdom: '29.1.1',
     zod: '4.6.7',
@@ -248,30 +253,30 @@
     'ag-ui-protocol': '==0.1.22',
     'ag-ui-strands': '==0.4.1',
     aiosqlite: '==0.22.1',
-    'aws-lambda-powertools': '==3.38.0',
-    'aws-lambda-powertools[tracer]': '==3.38.0',
-    'aws-lambda-powertools[parser]': '==3.38.0',
+    'aws-lambda-powertools': '==3.39.0',
+    'aws-lambda-powertools[tracer]': '==3.39.0',
+    'aws-lambda-powertools[parser]': '==3.39.0',
     'aws-opentelemetry-distro': '==0.22.0',
     awsiotsdk: '==1.31.0',
-    'bedrock-agentcore': '==1.25.2',
-    boto3: '==1.43.123',
-    checkov: '==3.4.0',
-    fastapi: '==0.162.0',
-    'fastapi[standard]': '==0.162.0',
+    'bedrock-agentcore': '==1.25.4',
+    boto3: '==1.43.126',
+    checkov: '==3.4.3',
+    fastapi: '==0.162.2',
+    'fastapi[standard]': '==0.162.2',
     httpx: '==0.28.1',
-    langchain: '==1.4.7',
-    'langchain-aws': '==1.9.1',
+    langchain: '==1.4.9',
+    'langchain-aws': '==1.9.2',
     'langchain-mcp-adapters': '==0.3.2',
-    langgraph: '==1.2.19',
-    'langgraph-checkpoint-aws': '==1.2.6',
+    langgraph: '==1.2.20',
+    'langgraph-checkpoint-aws': '==1.2.7',
     'langgraph-checkpoint-sqlite': '==3.1.3',
     mcp: '==1.28.1',
     'pip-check-updates': '==0.29.0',
     'pip-licenses': '==5.5.5',
-    pydantic: '==2.14.2',
-    ruff: '==0.17.3',
-    'strands-agents': '==1.63.0',
-    'strands-agents[a2a]': '==1.63.0',
+    pydantic: '==2.14.3',
+    ruff: '==0.17.4',
+    'strands-agents': '==1.64.0',
+    'strands-agents[a2a]': '==1.64.0',
     'strands-agents-tools': '==0.8.11',
     ty: '==0.0.89',
     pynamodb: '==6.1.0',
@@ -420,8 +425,8 @@
  * Exact versions for Terraform providers used by generated `.tf` modules.
  * Pinned exactly (no range operator) so generated infrastructure is reproducible.
  */ export const TERRAFORM_VERSIONS = {
-    aws: '6.71.0',
-    awscc: '1.108.0',
+    aws: '6.72.0',
+    awscc: '1.109.0',
     random: '3.9.1',
     null: '3.3.2',
     archive: '2.8.1',