@nikovirtala/projen-constructs 0.3.66 → 0.3.67

package/.jsii

@@ -13,7 +13,7 @@
   "dependencies": {
     "@mrgrain/cdk-esbuild": "^5.8.5",
     "constructs": "^10.8.1",
-    "projen": "^0.104.9"
+    "projen": "^0.104.10"
   },
   "dependencyClosure": {
     "@aws-cdk/asset-awscli-v1": {
@@ -20946,6 +20946,6 @@
       "symbolId": "src/components/vitest:VitestOptions"
     }
   },
-  "version": "0.3.66",
-  "fingerprint": "s6WFDlJiPqLUeSWZc2YLfccIe9U1M+NGSbIze2kOQ3k="
+  "version": "0.3.67",
+  "fingerprint": "kB1yEkk/VIcgeyCG5GOdE7v4ucglrar8CSD3A3NpNdA="
 }

package/lib/components/bundle-lambda-function-code.js

@@ -55,7 +55,7 @@ function convertToPosixPath(p) {
     return p.split(node_path_1.sep).join(node_path_1.posix.sep);
 }
 class Bundler extends projen_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Bundler", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Bundler", version: "0.3.67" };
     static of(project) {
         const isBundler = (o) => o instanceof Bundler;
         return project.components.find(isBundler);
@@ -157,7 +157,7 @@ class Bundler extends projen_1.Component {
 }
 exports.Bundler = Bundler;
 class LambdaFunctionCodeBundle extends projen_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionCodeBundle", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionCodeBundle", version: "0.3.67" };
     constructor(project, options) {
         super(project);
         const bundler = Bundler.of(project);
@@ -200,7 +200,7 @@ class LambdaFunctionCodeBundle extends projen_1.Component {
 }
 exports.LambdaFunctionCodeBundle = LambdaFunctionCodeBundle;
 class LambdaFunctionCodeBundler extends projen_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionCodeBundler", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionCodeBundler", version: "0.3.67" };
     constructor(project, options) {
         super(project);
         const entrypoints = [];

package/lib/components/colima.js

@@ -6,7 +6,7 @@ const component_1 = require("projen/lib/component");
 const task_shell_1 = require("projen/lib/task-shell");
 const homebrew_1 = require("./homebrew");
 class Colima extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Colima", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Colima", version: "0.3.67" };
     constructor(scope) {
         super(scope);
         const project = this.project;

package/lib/components/homebrew.js

@@ -6,7 +6,7 @@ const component_1 = require("projen/lib/component");
 const task_shell_1 = require("projen/lib/task-shell");
 const textfile_1 = require("projen/lib/textfile");
 class Homebrew extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Homebrew", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Homebrew", version: "0.3.67" };
     static of(project) {
         const isHomebrew = (c) => c instanceof Homebrew;
         return project.components.find(isHomebrew);

package/lib/components/lambda-function-construct-generator.js

@@ -39,7 +39,7 @@ const path = __importStar(require("node:path"));
 const projen_1 = require("projen");
 const utils_1 = require("../utils");
 class LambdaFunctionConstructGenerator extends projen_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionConstructGenerator", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LambdaFunctionConstructGenerator", version: "0.3.67" };
     sourceDir;
     outputDir;
     filePattern;

package/lib/components/localstack.js

@@ -7,7 +7,7 @@ const javascript_1 = require("projen/lib/javascript");
 const colima_1 = require("./colima");
 const homebrew_1 = require("./homebrew");
 class LocalStack extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LocalStack", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.LocalStack", version: "0.3.67" };
     constructor(scope, options = {}) {
         super(scope);
         const project = javascript_1.NodeProject.of(this);

package/lib/components/mise.js

@@ -7,7 +7,7 @@ const component_1 = require("projen/lib/component");
 const textfile_1 = require("projen/lib/textfile");
 const homebrew_1 = require("./homebrew");
 class Mise extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Mise", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Mise", version: "0.3.67" };
     static of(project) {
         const isMise = (c) => c instanceof Mise;
         return project.components.find(isMise);

package/lib/components/typedoc.js

@@ -34,7 +34,7 @@ const DEFAULT_CONFIG = {
  * TypeDoc component for projen projects
  */
 class TypeDoc extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.TypeDoc", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.TypeDoc", version: "0.3.67" };
     static of(project) {
         const isTypeDoc = (c) => c instanceof TypeDoc;
         return project.components.find(isTypeDoc);

package/lib/components/vitest.js

@@ -140,7 +140,7 @@ var CoverageReporter;
     CoverageReporter["TEXT"] = "text";
 })(CoverageReporter || (exports.CoverageReporter = CoverageReporter = {}));
 class Vitest extends component_1.Component {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Vitest", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.Vitest", version: "0.3.67" };
     static of(project) {
         const isVitest = (c) => c instanceof Vitest;
         return project.components.find(isVitest);

package/lib/project-generator.js

@@ -422,7 +422,7 @@ class TypeScriptClassRenderer {
  */
 class ProjectGenerator extends projen.Component {
     options;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.ProjectGenerator", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.ProjectGenerator", version: "0.3.67" };
     renderer;
     static enumGenerated = false;
     /**

package/lib/projects/awscdk-construct-library.generated.js

@@ -15,7 +15,7 @@ const utils_1 = require("../utils");
  * Extends Projen's base class with opinionated defaults and automatic component setup.
  */
 class AwsCdkConstructLibraryProject extends projen_1.awscdk.AwsCdkConstructLibrary {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.AwsCdkConstructLibraryProject", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.AwsCdkConstructLibraryProject", version: "0.3.67" };
     /**
      * @param options - Project configuration
      */

package/lib/projects/awscdk-typescript-app.generated.js

@@ -15,7 +15,7 @@ const utils_1 = require("../utils");
  * Extends Projen's base class with opinionated defaults and automatic component setup.
  */
 class AwsCdkTypeScriptAppProject extends projen_1.awscdk.AwsCdkTypeScriptApp {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.AwsCdkTypeScriptAppProject", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.AwsCdkTypeScriptAppProject", version: "0.3.67" };
     /**
      * @param options - Project configuration
      */

package/lib/projects/jsii.generated.js

@@ -16,7 +16,7 @@ const utils_1 = require("../utils");
  * Extends Projen's base class with opinionated defaults and automatic component setup.
  */
 class JsiiProject extends projen_1.cdk.JsiiProject {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.JsiiProject", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.JsiiProject", version: "0.3.67" };
     /**
      * @param options - Project configuration
      */

package/lib/projects/typescript.generated.js

@@ -15,7 +15,7 @@ const utils_1 = require("../utils");
  * Extends Projen's base class with opinionated defaults and automatic component setup.
  */
 class TypeScriptProject extends projen_1.typescript.TypeScriptProject {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.TypeScriptProject", version: "0.3.66" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@nikovirtala/projen-constructs.TypeScriptProject", version: "0.3.67" };
     /**
      * @param options - Project configuration
      */

package/lib/versions.json

@@ -1,5 +1,5 @@
 {
-    "cdkVersion": "2.273.0",
+    "cdkVersion": "2.274.0",
     "typescriptVersion": "6.0.3",
     "minNodeVersion": "24.22.0"
 }

package/node_modules/@jsii/spec/lib/assembly-utils.js

@@ -114,6 +114,12 @@ function writeAssembly(directory, assembly, { compress = false } = {}) {
     }
     return compress;
 }
+/**
+ * The maximum number of `jsii/file-redirect` hops followed when loading an
+ * assembly. The jsii compiler only ever emits a single redirect (to the
+ * compressed assembly), so this leaves ample headroom while preventing loops.
+ */
+const MAX_ASSEMBLY_REDIRECTS = 5;
 const failNoReadfileProvided = (filename) => {
     throw new Error(`Unable to load assembly support file ${JSON.stringify(filename)}: no readFile callback provided!`);
 };
@@ -129,7 +135,11 @@ const failNoReadfileProvided = (filename) => {
 function loadAssemblyFromBuffer(assemblyBuffer, readFile = failNoReadfileProvided, validate = true, supportedFeatures = []) {
     let contents = JSON.parse(assemblyBuffer.toString('utf-8'));
     // check if the file holds instructions to the actual assembly file
+    let redirects = 0;
     while ((0, redirect_1.isAssemblyRedirect)(contents)) {
+        if (++redirects > MAX_ASSEMBLY_REDIRECTS) {
+            throw new Error(`Too many assembly redirects (more than ${MAX_ASSEMBLY_REDIRECTS})`);
+        }
         contents = followRedirect(contents, readFile);
     }
     // Do feature checking *before* validating using JSONSchema, and do it always.
@@ -166,15 +176,43 @@ function loadAssemblyFromPath(directory, validate = true, supportedFeatures) {
 function loadAssemblyFromFile(pathToFile, validate = true, supportedFeatures) {
     const data = fs.readFileSync(pathToFile);
     try {
-        return loadAssemblyFromBuffer(data, (filename) => fs.readFileSync(path.resolve(pathToFile, '..', filename)), validate, supportedFeatures);
+        return loadAssemblyFromBuffer(data, (filename) => readSupportFile(path.dirname(pathToFile), filename), validate, supportedFeatures);
     }
     catch (e) {
         throw new Error(`Error loading assembly from file ${pathToFile}:\n${e}`);
     }
 }
+/**
+ * Reads an assembly support file, making sure it is located inside `directory`
+ * (after resolving any symbolic links).
+ */
+function readSupportFile(directory, filename) {
+    const realDir = fs.realpathSync(directory);
+    const realFile = fs.realpathSync(path.resolve(realDir, filename));
+    const relative = path.relative(realDir, realFile);
+    if (relative === '' ||
+        relative === '..' ||
+        relative.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relative)) {
+        throw new Error(`Assembly redirect target ${JSON.stringify(filename)} resolves outside of ${directory}`);
+    }
+    return fs.readFileSync(realFile);
+}
+/**
+ * Lexically checks that a redirect `filename` is a relative path that does not
+ * escape the directory containing the redirect.
+ */
+function assertRelativeRedirectFilename(filename) {
+    if (path.posix.isAbsolute(filename) ||
+        path.win32.isAbsolute(filename) ||
+        filename.split(/[\\/]/).includes('..')) {
+        throw new Error(`Invalid assembly redirect filename ${JSON.stringify(filename)}: must be a relative path inside the package`);
+    }
+}
 function followRedirect(assemblyRedirect, readFile) {
     // Validating the schema, this is cheap (the schema is small).
     (0, redirect_1.validateAssemblyRedirect)(assemblyRedirect);
+    assertRelativeRedirectFilename(assemblyRedirect.filename);
     let data = readFile(assemblyRedirect.filename);
     switch (assemblyRedirect.compression) {
         case 'gzip':

package/node_modules/@jsii/spec/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jsii/spec",
-  "version": "1.141.0",
+  "version": "1.142.0",
   "description": "Specification for jsii assemblies",
   "license": "Apache-2.0",
   "author": {
@@ -34,8 +34,8 @@
     "ajv": "^8.20.0",
     "esbuild": "^0.28.2",
     "eslint": "^9.39.5",
-    "jest": "^30.5.1",
-    "jsii-build-tools": "^1.141.0",
+    "jest": "^30.5.2",
+    "jsii-build-tools": "^1.142.0",
     "typescript": "6.x",
     "typescript-json-schema": "^0.68.0"
   }

package/package.json

@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5",
-    "@jsii/spec": "^1.141.0",
+    "@jsii/spec": "^1.142.0",
     "@mrgrain/cdk-esbuild": "5.8.5",
     "@types/node": "^24",
     "@vitest/coverage-v8": "^4",
@@ -20,11 +20,11 @@
     "constructs": "^10.8.1",
     "esbuild": "^0.28.2",
     "jsii": "~6.0.3",
-    "jsii-diff": "^1.141.0",
+    "jsii-diff": "^1.142.0",
     "jsii-docgen": "^10.5.0",
-    "jsii-pacmak": "^1.141.0",
+    "jsii-pacmak": "^1.142.0",
     "jsii-rosetta": "~6.0.3",
-    "projen": "^0.104.9",
+    "projen": "^0.104.10",
     "tsx": "^4.23.15",
     "typedoc": "^0.28",
     "typescript": "6.0.3",
@@ -33,12 +33,12 @@
   "peerDependencies": {
     "@mrgrain/cdk-esbuild": "^5.8.5",
     "constructs": "^10.8.1",
-    "projen": "^0.104.9"
+    "projen": "^0.104.10"
   },
   "dependencies": {
     "@mrgrain/jsii-struct-builder": "^0.7.64",
     "case": "^1.6.3",
-    "projen": "^0.104.9"
+    "projen": "^0.104.10"
   },
   "bundledDependencies": [
     "@mrgrain/jsii-struct-builder",
@@ -60,7 +60,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.3.66",
+  "version": "0.3.67",
   "types": "lib/index.d.ts",
   "jsii": {
     "outdir": "dist",