@cdklabs/cdk-ssm-documents 0.0.73 → 0.0.75

package/node_modules/@smithy/signature-v4/dist-es/getCanonicalQuery.js

@@ -1,9 +1,12 @@
+import { hasOwn } from "@smithy/core/serde";
 import { escapeUri } from "@smithy/core/protocols";
 import { SIGNATURE_HEADER } from "./constants";
 export const getCanonicalQuery = ({ query = {} }) => {
     const keys = [];
     const serialized = {};
-    for (const key of Object.keys(query)) {
+    for (const key in query) {
+        if (!hasOwn(query, key))
+            continue;
         if (key.toLowerCase() === SIGNATURE_HEADER) {
             continue;
         }

package/node_modules/@smithy/signature-v4/dist-es/getPayloadHash.js

@@ -1,7 +1,10 @@
+import { hasOwn } from "@smithy/core/serde";
 import { isArrayBuffer, toHex, toUint8Array } from "@smithy/core/serde";
 import { SHA256_HEADER, UNSIGNED_PAYLOAD } from "./constants";
 export const getPayloadHash = async ({ headers, body }, hashConstructor) => {
-    for (const headerName of Object.keys(headers)) {
+    for (const headerName in headers) {
+        if (!hasOwn(headers, headerName))
+            continue;
         if (headerName.toLowerCase() === SHA256_HEADER) {
             return headers[headerName];
         }

package/node_modules/@smithy/signature-v4/dist-es/headerUtil.js

@@ -1,6 +1,9 @@
+import { hasOwn } from "@smithy/core/serde";
 export const hasHeader = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
-    for (const headerName of Object.keys(headers)) {
+    for (const headerName in headers) {
+        if (!hasOwn(headers, headerName))
+            continue;
         if (soughtHeader === headerName.toLowerCase()) {
             return true;
         }
@@ -9,7 +12,9 @@ export const hasHeader = (soughtHeader, headers) => {
 };
 export const getHeaderValue = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
-    for (const headerName of Object.keys(headers)) {
+    for (const headerName in headers) {
+        if (!hasOwn(headers, headerName))
+            continue;
         if (soughtHeader === headerName.toLowerCase()) {
             return headers[headerName];
         }
@@ -18,7 +23,9 @@ export const getHeaderValue = (soughtHeader, headers) => {
 };
 export const deleteHeader = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
-    for (const headerName of Object.keys(headers)) {
+    for (const headerName in headers) {
+        if (!hasOwn(headers, headerName))
+            continue;
         if (soughtHeader === headerName.toLowerCase()) {
             delete headers[headerName];
         }

package/node_modules/@smithy/signature-v4/dist-es/moveHeadersToQuery.js

@@ -1,7 +1,10 @@
+import { hasOwn } from "@smithy/core/serde";
 import { HttpRequest } from "@smithy/core/protocols";
 export const moveHeadersToQuery = (request, options = {}) => {
     const { headers, query = {} } = HttpRequest.clone(request);
-    for (const name of Object.keys(headers)) {
+    for (const name in headers) {
+        if (!hasOwn(headers, name))
+            continue;
         const lname = name.toLowerCase();
         if ((lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) ||
             options.hoistableHeaders?.has(lname)) {

package/node_modules/@smithy/signature-v4/dist-es/prepareRequest.js

@@ -1,8 +1,11 @@
+import { hasOwn } from "@smithy/core/serde";
 import { HttpRequest } from "@smithy/core/protocols";
 import { GENERATED_HEADERS } from "./constants";
 export const prepareRequest = (request) => {
     request = HttpRequest.clone(request);
-    for (const headerName of Object.keys(request.headers)) {
+    for (const headerName in request.headers) {
+        if (!hasOwn(request.headers, headerName))
+            continue;
         if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
             delete request.headers[headerName];
         }

package/node_modules/@smithy/signature-v4/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/signature-v4",
-  "version": "5.6.12",
+  "version": "5.7.3",
   "description": "A standalone implementation of the AWS Signature V4 request signing algorithm",
   "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/signature-v4",
   "license": "Apache-2.0",
@@ -27,9 +27,6 @@
       ]
     }
   },
-  "publishConfig": {
-    "directory": ".release/package"
-  },
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
     "build:es:cjs": "node ../../scripts/compilation/es_cjs.js",
@@ -37,23 +34,18 @@
     "build:types:downlevel": "premove dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4",
     "clean": "premove dist-cjs dist-es dist-types",
     "extract:docs": "api-extractor run --local",
-    "stage-release": "premove .release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
     "test": "yarn g:vitest run",
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@smithy/core": "^3.31.1",
-    "@smithy/types": "^4.16.1",
+    "@smithy/core": "^3.33.3",
+    "@smithy/types": "^4.17.2",
     "tslib": "^2.6.2"
   },
   "devDependencies": {
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
-    "premove": "4.0.0",
-    "typedoc": "0.23.23"
-  },
-  "typedoc": {
-    "entryPoint": "src/index.ts"
+    "premove": "4.0.0"
   },
   "engines": {
     "node": ">=18.0.0"

package/node_modules/@smithy/types/dist-types/schema/sentinels.d.ts

@@ -3,63 +3,63 @@
  * such as Buffer, string, or Readable(Stream) depending on circumstances.
  * @public
  */
-export type BlobSchema = 21;
+export type BlobSchema = 0b0001_0101;
 /**
  * @public
  */
-export type StreamingBlobSchema = 42;
+export type StreamingBlobSchema = 0b0010_1010;
 /**
  * @public
  */
-export type BooleanSchema = 2;
+export type BooleanSchema = 0b0000_0010;
 /**
  * Includes string and enum Smithy types.
  * @public
  */
-export type StringSchema = 0;
+export type StringSchema = 0b0000_0000;
 /**
  * Includes all numeric Smithy types except bigInteger and bigDecimal.
  * byte, short, integer, long, float, double, intEnum.
  *
  * @public
  */
-export type NumericSchema = 1;
+export type NumericSchema = 0b0000_0001;
 /**
  * @public
  */
-export type BigIntegerSchema = 17;
+export type BigIntegerSchema = 0b0001_0001;
 /**
  * @public
  */
-export type BigDecimalSchema = 19;
+export type BigDecimalSchema = 0b0001_0011;
 /**
  * @public
  */
-export type DocumentSchema = 15;
+export type DocumentSchema = 0b0000_1111;
 /**
  * Smithy type timestamp, in JS as native Date object.
  * @public
  */
-export type TimestampDefaultSchema = 4;
+export type TimestampDefaultSchema = 0b0000_0100;
 /**
  * @public
  */
-export type TimestampDateTimeSchema = 5;
+export type TimestampDateTimeSchema = 0b0000_0101;
 /**
  * @public
  */
-export type TimestampHttpDateSchema = 6;
+export type TimestampHttpDateSchema = 0b0000_0110;
 /**
  * @public
  */
-export type TimestampEpochSecondsSchema = 7;
+export type TimestampEpochSecondsSchema = 0b0000_0111;
 /**
  * Additional bit indicating the type is a list.
  * @public
  */
-export type ListSchemaModifier = 64;
+export type ListSchemaModifier = 0b0100_0000;
 /**
  * Additional bit indicating the type is a map.
  * @public
  */
-export type MapSchemaModifier = 128;
+export type MapSchemaModifier = 0b1000_0000;

package/node_modules/@smithy/types/package.json

@@ -1,60 +1,50 @@
 {
   "name": "@smithy/types",
-  "version": "4.16.1",
+  "version": "4.17.2",
+  "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/types",
+  "license": "Apache-2.0",
+  "author": {
+    "name": "AWS Smithy Team",
+    "email": "",
+    "url": "https://smithy.io"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/smithy-lang/smithy-typescript.git",
+    "directory": "packages/types"
+  },
+  "files": [
+    "dist-*/**"
+  ],
+  "sideEffects": false,
+  "main": "./dist-cjs/index.js",
+  "module": "./dist-es/index.js",
+  "types": "./dist-types/index.d.ts",
+  "typesVersions": {
+    "<=4.5": {
+      "dist-types/*": [
+        "dist-types/ts3.4/*"
+      ]
+    }
+  },
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es:cjs'",
-    "build:es:cjs": "premove dist-es && yarn g:tsc -p tsconfig.es.json && node ../../scripts/inline",
+    "build:es:cjs": "node ../../scripts/compilation/es_cjs.js",
     "build:types": "premove dist-types && yarn g:tsc -p tsconfig.types.json",
     "build:types:downlevel": "premove dist-types/ts3.4 && downlevel-dts dist-types dist-types/ts3.4 && node scripts/downlevel",
     "clean": "premove dist-cjs dist-es dist-types",
     "extract:docs": "api-extractor run --local",
-    "format": "prettier --config ../../prettier.config.js --ignore-path ../../.prettierignore --write \"**/*.{ts,md,json}\"",
-    "lint": "eslint -c ../../.eslintrc.js \"src/**/*.ts\"",
-    "stage-release": "premove .release && yarn pack && mkdir ./.release && tar zxvf ./package.tgz --directory ./.release && rm ./package.tgz",
     "test": "yarn g:tsc -p tsconfig.test.json"
   },
-  "main": "./dist-cjs/index.js",
-  "module": "./dist-es/index.js",
-  "types": "./dist-types/index.d.ts",
-  "author": {
-    "name": "AWS Smithy Team",
-    "email": "",
-    "url": "https://smithy.io"
-  },
-  "license": "Apache-2.0",
-  "sideEffects": false,
   "dependencies": {
     "tslib": "^2.6.2"
   },
   "devDependencies": {
     "concurrently": "7.0.0",
     "downlevel-dts": "0.10.1",
-    "premove": "4.0.0",
-    "typedoc": "0.23.23"
+    "premove": "4.0.0"
   },
   "engines": {
     "node": ">=18.0.0"
-  },
-  "typesVersions": {
-    "<=4.5": {
-      "dist-types/*": [
-        "dist-types/ts3.4/*"
-      ]
-    }
-  },
-  "files": [
-    "dist-*/**"
-  ],
-  "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/types",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/smithy-lang/smithy-typescript.git",
-    "directory": "packages/types"
-  },
-  "typedoc": {
-    "entryPoint": "src/index.ts"
-  },
-  "publishConfig": {
-    "directory": ".release/package"
   }
 }

package/node_modules/fflate/CHANGELOG.md

@@ -1,3 +1,25 @@
+## 0.8.3
+- Fix buffer over-read for Zip64 extra fields
+- Support sync flushes (`Z_SYNC_FLUSH` in zlib)
+  - Allows for immediate decompression of all pushed bytes
+  - Enables DEFLATE stream concatenation
+- Fix `zip`/`zipSync` when using cross-realm `Uint8Array`
+- Improve Zip64 support for streamed or undersized archives
+- Update performance estimates in README
+- Fix typings for TypeScript v5.7+
+- Reduce memory consumption after compression stream completion
+## 0.8.2
+- Fixed broken UMD build
+- Fixed edge-case causing skipped data during streaming compression
+- Fixed bug in GZIP streaming on member boundary
+- Improved streaming performance on inconsistent chunk sizes
+- Improved `unzip` performance on undercompressed archives
+- Added flushing support into streaming API
+- Added backpressure support into async streaming API
+  - Use new `ondrain` handler and `queuedSize`
+## 0.8.1
+- Fixed reallocating on pre-supplied buffer in `inflateSync` and `unzlibSync`
+- Minor documentation fixes
 ## 0.8.0
 - BREAKING: synchronous decompression functions now take an options object rather than an output buffer as a second parameter
   - `inflateSync(compressed, outBuf)` is now `inflateSync(compressed, { out: outBuf })`

package/node_modules/fflate/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2023 Arjun Barrett
+Copyright (c) 2026 Arjun Barrett
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/node_modules/fflate/README.md

@@ -8,7 +8,7 @@ In addition to the base decompression and compression APIs, `fflate` supports hi
 
 |                             | `pako` | `tiny-inflate`         | `UZIP.js`             | `fflate`                       |
 |-----------------------------|--------|------------------------|-----------------------|--------------------------------|
-| Decompression performance   | 1x     | Up to 40% slower       | **Up to 40% faster**  | **Up to 40% faster**           |
+| Decompression performance   | 1x     | Up to 40% slower       | **Up to 25% faster**  | **Up to 25% faster**           |
 | Compression performance     | 1x     | N/A                    | Up to 25% faster      | **Up to 50% faster**           |
 | Base bundle size (minified) | 45.6kB | **3kB (inflate only)** | 14.2kB                | 8kB **(3kB for inflate only)** |
 | Decompression support       | ✅     | ✅                      | ✅                    | ✅                             |
@@ -58,15 +58,15 @@ You should use either UNPKG or jsDelivr (i.e. only one of the following)
 
 Note that tree shaking is completely unsupported from the CDN. If you want
 a small build without build tools, please ask me and I will make one manually
-with only the features you need. This build is about 31kB, or 11.5kB gzipped.
+with only the features you need. This build is about 33kB, or 12.5kB gzipped.
 -->
-<script src="https://unpkg.com/fflate@0.8.0"></script>
-<script src="https://cdn.jsdelivr.net/npm/fflate@0.8.0/umd/index.js"></script>
+<script src="https://unpkg.com/fflate@0.8.3"></script>
+<script src="https://cdn.jsdelivr.net/npm/fflate@0.8.3/umd/index.js"></script>
 <!-- Now, the global variable fflate contains the library -->
 
 <!-- If you're going buildless but want ESM, import from Skypack -->
 <script type="module">
-  import * as fflate from 'https://cdn.skypack.dev/fflate@0.8.0?min';
+  import * as fflate from 'https://cdn.skypack.dev/fflate@0.8.3?min';
 </script>
 ```
 
@@ -75,8 +75,8 @@ If you are using Deno:
 // Don't use the ?dts Skypack flag; it isn't necessary for Deno support
 // The @deno-types comment adds TypeScript typings
 
-// @deno-types="https://cdn.skypack.dev/fflate@0.8.0/lib/index.d.ts"
-import * as fflate from 'https://cdn.skypack.dev/fflate@0.8.0?min';
+// @deno-types="https://cdn.skypack.dev/fflate@0.8.3/lib/index.d.ts"
+import * as fflate from 'https://cdn.skypack.dev/fflate@0.8.3?min';
 ```
 
 
@@ -376,9 +376,9 @@ unzipper.push(zipChunk2);
 unzipper.push(zipChunk3, true);
 ```
 
-As you may have guessed, there is an asynchronous version of every method as well. Unlike most libraries, this will cause the compression or decompression run in a separate thread entirely and automatically by using Web (or Node) Workers (as of now, Deno is unsupported). This means that the processing will not block the main thread at all. 
+As you may have guessed, there is an asynchronous version of every method as well. Unlike most libraries, this will cause the compression or decompression run in a separate thread entirely and automatically by using Web (or Node) Workers. This means that the processing will not block the main thread at all. 
 
-Note that there is a significant initial overhead to using workers of about 70ms for each asynchronous function. For instance, if you call `unzip` ten times, the overhead only applies for the first call, but if you call `unzip` and `zlib`, they will each cause the 70ms delay. Therefore, it's best to avoid the asynchronous API unless necessary. However, if you're compressing multiple large files at once, or the synchronous API causes the main thread to hang for too long, the callback APIs are an order of magnitude better.
+Note that there is a significant initial overhead to using workers of about 50ms for each asynchronous function. For instance, if you call `unzip` ten times, the overhead only applies for the first call, but if you call `unzip` and `zlib`, they will each cause the 50ms delay. For small (under about 50kB) payloads, the asynchronous APIs will be much slower. However, if you're compressing larger files/multiple files at once, or if the synchronous API causes the main thread to hang for too long, the callback APIs are an order of magnitude better.
 ```js
 import {
   gzip, zlib, AsyncGzip, zip, unzip, strFromU8,
@@ -386,9 +386,6 @@ import {
 } from 'fflate';
 
 // Workers will work in almost any browser (even IE11!)
-// However, they fail below Node v12 without the --experimental-worker
-// CLI flag, and will fail entirely on Node below v10.
-
 // All of the async APIs use a node-style callback as so:
 const terminate = gzip(aMassiveFile, (err, data) => {
   if (err) {
@@ -507,7 +504,7 @@ See the [documentation](https://github.com/101arrowz/fflate/blob/master/docs/REA
 
 The bundle size measurements for `fflate` on sites like Bundlephobia include every feature of the library and should be seen as an upper bound. As long as you are using tree shaking or dead code elimination, this table should give you a general idea of `fflate`'s bundle size for the features you need.
 
-The maximum bundle size that is possible with `fflate` is about 31kB (11.5kB gzipped) if you use every single feature, but feature parity with `pako` is only around 10kB (as opposed to 45kB from `pako`). If your bundle size increases dramatically after adding `fflate`, please [create an issue](https://github.com/101arrowz/fflate/issues/new).
+The maximum bundle size that is possible with `fflate` is about 33kB (12.5kB gzipped) if you use every single feature, but feature parity with `pako` is only around 10kB (as opposed to 45kB from `pako`). If your bundle size increases dramatically after adding `fflate`, please [create an issue](https://github.com/101arrowz/fflate/issues/new).
 
 | Feature                 | Bundle size (minified)         | Nearest competitor      |
 |-------------------------|--------------------------------|-------------------------|
@@ -527,18 +524,18 @@ Many JavaScript compression/decompression libraries exist. However, the most pop
 
 Note that there exist some small libraries like [`tiny-inflate`](https://npmjs.com/package/tiny-inflate) for solely decompression, and with a minified size of 3 kB, it can be appealing; however, its performance is lackluster, typically 40% worse than `pako` in my tests.
 
-[`UZIP.js`](https://github.com/photopea/UZIP.js) is both faster (by up to 40%) and smaller (14 kB minified) than `pako`, and it contains a variety of innovations that make it excellent for both performance and compression ratio. However, the developer made a variety of tiny mistakes and inefficient design choices that make it imperfect. Moreover, it does not support GZIP or Zlib data directly; one must remove the headers manually to use `UZIP.js`.
+[`UZIP.js`](https://github.com/photopea/UZIP.js) is both faster (by up to 25%) and smaller (14 kB minified) than `pako`, and it contains a variety of innovations that make it excellent for both performance and compression ratio. However, the developer made a variety of tiny mistakes and inefficient design choices that make it imperfect. Moreover, it does not support GZIP or Zlib data directly; one must remove the headers manually to use `UZIP.js`.
 
-So what makes `fflate` different? It takes the brilliant innovations of `UZIP.js` and optimizes them while adding direct support for GZIP and Zlib data. And unlike all of the above libraries, it uses ES Modules to allow for partial builds through tree shaking, meaning that it can rival even `tiny-inflate` in size while maintaining excellent performance. The end result is a library that, in total, weighs 8kB minified for the core build (3kB for decompression only and 5kB for compression only), is about 15% faster than `UZIP.js` or up to 60% faster than `pako`, and achieves the same or better compression ratio than the rest.
+So what makes `fflate` different? It takes the brilliant innovations of `UZIP.js` and optimizes them while adding direct support for GZIP and Zlib data. And unlike all of the above libraries, it uses ES Modules to allow for partial builds through tree shaking, meaning that it can rival even `tiny-inflate` in size while maintaining excellent performance. The end result is a library that, in total, weighs 8kB minified for the core build (3kB for decompression only and 5kB for compression only), is about 25% faster than `UZIP.js` or up to 50% faster than `pako`, and achieves the same or better compression ratio than the rest.
 
 Before you decide that `fflate` is the end-all compression library, you should note that JavaScript simply cannot rival the performance of a native program. If you're only using Node.js, it's probably better to use the [native Zlib bindings](https://nodejs.org/api/zlib.html), which tend to offer the best performance. Though note that even against Zlib, `fflate` is only around 30% slower in decompression and 10% slower in compression, and can still achieve better compression ratios!
 
 ## What about `CompressionStream`?
 Like `fflate`, the [Compression Streams API](https://developer.mozilla.org/en-US/docs/Web/API/Compression_Streams_API) provides DEFLATE, GZIP, and Zlib compression and decompression support. It's a good option if you'd like to compress or decompress data without installing any third-party libraries, and it wraps native Zlib bindings to achieve better performance than what most JavaScript programs can achieve.
 
-However, browsers do not offer any native non-streaming compression API, and `CompressionStream` has surprisingly poor performance on data already loaded into memory; `fflate` tends to be faster even for files that are dozens of megabytes large. Similarly, `fflate` is much faster for files under a megabyte because it avoids marshalling overheads. Even when streaming hundreds of megabytes of data, the native API usually only performs between 5% slower and 10% faster than `fflate`. And Compression Streams have many other disadvantages - no ability to control compression level, poor support for older browsers, no ZIP support, etc.
+However, browsers do not offer any native non-streaming compression API, and `CompressionStream` has surprisingly poor performance on data already loaded into memory; `fflate` tends to be faster even for files that are dozens of megabytes large. Similarly, `fflate` is much faster for files under a megabyte because it avoids marshalling overheads. Even when streaming hundreds of megabytes of data, the native API usually performs between 30% faster and 10% slower than `fflate`. And Compression Streams have many other disadvantages - no ability to control compression level, poor support for older browsers, no ZIP support, etc.
 
-If you'd still prefer to depend upon a native browser API, you can use an `fflate`-based [Compression Streams ponyfill](https://github.com/101arrowz/compression-streams-polyfill) for a seamless transition to `CompressionStream` and `DecompressionStream` if ever they become substantially faster than `fflate`.
+If you'd still prefer to depend upon a native browser API but want to support older browsers, you can use an `fflate`-based [Compression Streams ponyfill](https://github.com/101arrowz/compression-streams-polyfill).
 
 ## Browser support
 `fflate` makes heavy use of typed arrays (`Uint8Array`, `Uint16Array`, etc.). Typed arrays can be polyfilled at the cost of performance, but the most recent browser that doesn't support them [is from 2011](https://caniuse.com/typedarrays), so I wouldn't bother.