@jjrawlins/cdk-ami-builder 0.0.189 → 0.0.190

package/node_modules/lodash/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lodash",
-  "version": "4.17.23",
+  "version": "4.18.1",
   "description": "Lodash modular utilities.",
   "keywords": "modules, stdlib, util",
   "homepage": "https://lodash.com/",
@@ -13,5 +13,7 @@
     "John-David Dalton <john.david.dalton@gmail.com>",
     "Mathias Bynens <mathias@qiwi.be>"
   ],
-  "scripts": { "test": "echo \"See https://travis-ci.org/lodash-archive/lodash-cli for testing details.\"" }
+  "scripts": {
+    "test": "echo \"See https://travis-ci.org/lodash-archive/lodash-cli for testing details.\""
+  }
 }

package/node_modules/lodash/random.js

@@ -18,6 +18,8 @@ var nativeMin = Math.min,
  * **Note:** JavaScript follows the IEEE-754 standard for resolving
  * floating-point values which can produce unexpected results.
  *
+ * **Note:** If `lower` is greater than `upper`, the values are swapped.
+ *
  * @static
  * @memberOf _
  * @since 0.7.0
@@ -31,9 +33,16 @@ var nativeMin = Math.min,
  * _.random(0, 5);
  * // => an integer between 0 and 5
  *
+ * // when lower is greater than upper the values are swapped
+ * _.random(5, 0);
+ * // => an integer between 0 and 5
+ *
  * _.random(5);
  * // => also an integer between 0 and 5
  *
+ * _.random(-5);
+ * // => an integer between -5 and 0
+ *
  * _.random(5, true);
  * // => a floating-point number between 0 and 5
  *

package/node_modules/lodash/template.js

@@ -1,4 +1,5 @@
-var assignInWith = require('./assignInWith'),
+var arrayEach = require('./_arrayEach'),
+    assignWith = require('./assignWith'),
     attempt = require('./attempt'),
     baseValues = require('./_baseValues'),
     customDefaultsAssignIn = require('./_customDefaultsAssignIn'),
@@ -11,7 +12,8 @@ var assignInWith = require('./assignInWith'),
     toString = require('./toString');
 
 /** Error message constants. */
-var INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`';
+var INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`',
+    INVALID_TEMPL_IMPORTS_ERROR_TEXT = 'Invalid `imports` option passed into `_.template`';
 
 /** Used to match empty string literals in compiled template source. */
 var reEmptyStringLeading = /\b__p \+= '';/g,
@@ -55,6 +57,10 @@ var hasOwnProperty = objectProto.hasOwnProperty;
  * properties may be accessed as free variables in the template. If a setting
  * object is given, it takes precedence over `_.templateSettings` values.
  *
+ * **Security:** `_.template` is insecure and should not be used. It will be
+ * removed in Lodash v5. Avoid untrusted input. See
+ * [threat model](https://github.com/lodash/lodash/blob/main/threat-model.md).
+ *
  * **Note:** In the development build `_.template` utilizes
  * [sourceURLs](http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
  * for easier debugging.
@@ -162,12 +168,18 @@ function template(string, options, guard) {
     options = undefined;
   }
   string = toString(string);
-  options = assignInWith({}, options, settings, customDefaultsAssignIn);
+  options = assignWith({}, options, settings, customDefaultsAssignIn);
 
-  var imports = assignInWith({}, options.imports, settings.imports, customDefaultsAssignIn),
+  var imports = assignWith({}, options.imports, settings.imports, customDefaultsAssignIn),
       importsKeys = keys(imports),
       importsValues = baseValues(imports, importsKeys);
 
+  arrayEach(importsKeys, function(key) {
+    if (reForbiddenIdentifierChars.test(key)) {
+      throw new Error(INVALID_TEMPL_IMPORTS_ERROR_TEXT);
+    }
+  });
+
   var isEscaping,
       isEvaluating,
       index = 0,

package/node_modules/lodash/templateSettings.js

@@ -8,6 +8,10 @@ var escape = require('./escape'),
  * embedded Ruby (ERB) as well as ES2015 template strings. Change the
  * following template settings to use alternative delimiters.
  *
+ * **Security:** See
+ * [threat model](https://github.com/lodash/lodash/blob/main/threat-model.md)
+ * — `_.template` is insecure and will be removed in v5.
+ *
  * @static
  * @memberOf _
  * @type {Object}

package/package.json

@@ -69,7 +69,7 @@
     "jsii-pacmak": "^1.127.0",
     "jsii-rosetta": "~5.8.0",
     "projen": "^0.95.6",
-    "ts-jest": "^29.4.6",
+    "ts-jest": "^29.4.9",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3"
   },
@@ -78,21 +78,21 @@
     "constructs": ">=10.0.5 <11.0.0"
   },
   "dependencies": {
-    "@aws-sdk/client-ec2": "^3.1020.0",
-    "@aws-sdk/client-ecs": "^3.1020.0",
-    "@aws-sdk/client-kms": "^3.1020.0",
-    "@aws-sdk/client-s3": "^3.1020.0",
-    "@aws-sdk/client-secrets-manager": "^3.1020.0",
-    "@aws-sdk/client-sfn": "^3.1020.0",
-    "@aws-sdk/client-sns": "^3.1020.0",
-    "@aws-sdk/client-sqs": "^3.1020.0",
-    "@aws-sdk/client-ssm": "^3.1020.0",
+    "@aws-sdk/client-ec2": "^3.1022.0",
+    "@aws-sdk/client-ecs": "^3.1022.0",
+    "@aws-sdk/client-kms": "^3.1022.0",
+    "@aws-sdk/client-s3": "^3.1022.0",
+    "@aws-sdk/client-secrets-manager": "^3.1022.0",
+    "@aws-sdk/client-sfn": "^3.1022.0",
+    "@aws-sdk/client-sns": "^3.1022.0",
+    "@aws-sdk/client-sqs": "^3.1022.0",
+    "@aws-sdk/client-ssm": "^3.1022.0",
     "@types/aws-lambda": "^8.10.161",
     "@types/crypto-js": "^4.2.2",
     "@types/js-yaml": "^4.0.9",
     "crypto-js": "^4.2.0",
     "js-yaml": "^4.1.1",
-    "lodash": "^4.17.23",
+    "lodash": "^4.18.1",
     "lodash.merge": "^4.6.2"
   },
   "bundledDependencies": [
@@ -136,7 +136,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.0.189",
+  "version": "0.0.190",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [