deployable-awscdk-app-ts 0.1.860 → 0.1.861

package/.jsii

@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "constructs": "^10.6.0",
-    "projen": "^0.101.6"
+    "projen": "^0.101.8"
   },
   "dependencyClosure": {
     "constructs": {
@@ -2047,6 +2047,6 @@
       "symbolId": "src/types:EnvironmentOptions"
     }
   },
-  "version": "0.1.860",
-  "fingerprint": "ifbW32PazGsx7tqaGRm3jz24CpHOzhpOIErTEMxJzqc="
+  "version": "0.1.861",
+  "fingerprint": "iJKmoyZP25tsGhdu16S2sKciaBKL8ILFOmtbwYbULdU="
 }

package/API.md

@@ -1760,6 +1760,7 @@ const deployableAwsCdkTypeScriptAppOptions: DeployableAwsCdkTypeScriptAppOptions
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.vscode">vscode</a></code> | <code>boolean</code> | Enable VSCode integration. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.addPackageManagerToDevEngines">addPackageManagerToDevEngines</a></code> | <code>boolean</code> | Automatically add the resolved `packageManager` to `devEngines.packageManager` in `package.json`, setting `onFail` to `ignore`. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.allowLibraryDependencies">allowLibraryDependencies</a></code> | <code>boolean</code> | Allow the project to include `peerDependencies` and `bundledDependencies`. |
+| <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.allowScripts">allowScripts</a></code> | <code>string[]</code> | List of dependency (package) names that are allowed to run lifecycle install scripts (`preinstall`, `install`, `postinstall`, `prepare`) during dependency installation. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.authorEmail">authorEmail</a></code> | <code>string</code> | Author's e-mail. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.authorName">authorName</a></code> | <code>string</code> | Author's name. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.authorOrganization">authorOrganization</a></code> | <code>boolean</code> | Is the author an organization. |
@@ -1792,6 +1793,7 @@ const deployableAwsCdkTypeScriptAppOptions: DeployableAwsCdkTypeScriptAppOptions
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.packageName">packageName</a></code> | <code>string</code> | The "name" in package.json. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.peerDependencyOptions">peerDependencyOptions</a></code> | <code>projen.javascript.PeerDependencyOptions</code> | Options for `peerDeps`. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.peerDeps">peerDeps</a></code> | <code>string[]</code> | Peer dependencies for this module. |
+| <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.pnpmOptions">pnpmOptions</a></code> | <code>projen.javascript.PnpmOptions</code> | Options for pnpm. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.pnpmVersion">pnpmVersion</a></code> | <code>string</code> | The version of PNPM to use if using PNPM as a package manager. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.repository">repository</a></code> | <code>string</code> | The repository is the location where the actual code for your package lives. |
 | <code><a href="#deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.repositoryDirectory">repositoryDirectory</a></code> | <code>string</code> | If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives. |
@@ -2300,6 +2302,44 @@ for specifying these.
 
 ---
 
+##### `allowScripts`<sup>Optional</sup> <a name="allowScripts" id="deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.allowScripts"></a>
+
+```typescript
+public readonly allowScripts: string[];
+```
+
+- *Type:* string[]
+- *Default:* all install scripts are allowed to run (package manager default)
+
+List of dependency (package) names that are allowed to run lifecycle install scripts (`preinstall`, `install`, `postinstall`, `prepare`) during dependency installation.
+
+These scripts can execute arbitrary code, making them a common
+supply-chain attack vector. Package managers are moving toward
+blocking them by default and requiring an explicit allowlist.
+Configuring `allowScripts` sets up that allowlist so scripts only run
+for the packages you have explicitly reviewed and trust.
+
+Support for this setting depends on the configured `packageManager`:
+
+- `NPM`: written to the native `allowScripts` field in `package.json`
+  (requires npm >= 11.16; see https://docs.npmjs.com/cli/v11/commands/npm-approve-scripts).
+- `BUN`: written to the native `trustedDependencies` field in
+  `package.json` (see https://bun.com/docs/pm/lifecycle).
+- `PNPM`: written to the `onlyBuiltDependencies` setting in
+  `pnpm-workspace.yaml` (see https://pnpm.io/settings#onlybuiltdependencies).
+- `YARN2`, `YARN_BERRY`: written to the native
+  `dependenciesMeta.<pkg>.built` allowlist in `package.json`, combined
+  with `enableScripts: false` in `.yarnrc.yml` (see
+  https://yarnpkg.com/features/security#postinstalls). If you set
+  `yarnBerryOptions.yarnRcOptions.enableScripts` explicitly, that value
+  is respected instead of being overridden.
+- `YARN`, `YARN_CLASSIC`: not supported. Yarn Classic has no native
+  mechanism to allowlist install scripts for specific dependencies.
+  Setting this option with one of these package managers throws an
+  error at synthesis time.
+
+---
+
 ##### `authorEmail`<sup>Optional</sup> <a name="authorEmail" id="deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.authorEmail"></a>
 
 ```typescript
@@ -2811,6 +2851,19 @@ test your module against the lowest peer version required.
 
 ---
 
+##### `pnpmOptions`<sup>Optional</sup> <a name="pnpmOptions" id="deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.pnpmOptions"></a>
+
+```typescript
+public readonly pnpmOptions: PnpmOptions;
+```
+
+- *Type:* projen.javascript.PnpmOptions
+- *Default:* all default options
+
+Options for pnpm.
+
+---
+
 ##### `pnpmVersion`<sup>Optional</sup> <a name="pnpmVersion" id="deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppOptions.property.pnpmVersion"></a>
 
 ```typescript

package/lib/index.js

@@ -47,7 +47,7 @@ __exportStar(require("./types"), exports);
 exports.utils = __importStar(require("./utils"));
 __exportStar(require("./steps"), exports);
 class DeployableAwsCdkTypeScriptApp extends projen_1.awscdk.AwsCdkTypeScriptApp {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptApp", version: "0.1.860" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptApp", version: "0.1.861" };
     /**
      * If the diff output is enabled, adds a script and a job step to generate the CDK diff output to a file in cdk.out
      * @returns void

package/lib/steps.js

@@ -19,7 +19,7 @@ const formattedDiffAnnotationCommentStepId = 'formatted_diff_annotation_comment'
 class DeployableAwsCdkTypeScriptAppStepsFactory {
     project;
     props;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppStepsFactory", version: "0.1.860" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "deployable-awscdk-app-ts.DeployableAwsCdkTypeScriptAppStepsFactory", version: "0.1.861" };
     /**
      * Validate that the provided environment deployment dependencies are valid
      * @param deployOptions The deployment options

package/package.json

@@ -31,7 +31,7 @@
     "jsii-docgen": "^10.5.0",
     "jsii-pacmak": "^1.138.0",
     "jsii-rosetta": "5.9.x",
-    "projen": "^0.101.6",
+    "projen": "^0.101.8",
     "ts-jest": "^29.4.11",
     "ts-node": "^10.9.2",
     "typescript": "^5.9.3",
@@ -39,10 +39,10 @@
   },
   "peerDependencies": {
     "constructs": "^10.6.0",
-    "projen": "^0.101.6"
+    "projen": "^0.101.8"
   },
   "dependencies": {
-    "projen": "^0.101.6",
+    "projen": "^0.101.8",
     "semver": "^7.8.5"
   },
   "bundledDependencies": [
@@ -70,7 +70,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "0.1.860",
+  "version": "0.1.861",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [