projen 0.79.4__py3-none-any.whl → 0.98.25__py3-none-any.whl

projen/javascript/__init__.py

@@ -1,3 +1,6 @@
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
 import abc
 import builtins
 import datetime
@@ -8,7 +11,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -18,10 +36,12 @@ from .. import (
     DependencyType as _DependencyType_6b786d68,
     GitOptions as _GitOptions_a65916a3,
     GroupRunnerOptions as _GroupRunnerOptions_148c59c1,
+    ICompareString as _ICompareString_f119e19c,
     IgnoreFile as _IgnoreFile_3df2076a,
     IgnoreFileOptions as _IgnoreFileOptions_86c48b91,
     JsonFile as _JsonFile_fa8164db,
     LoggerOptions as _LoggerOptions_eb0f6309,
+    ObjectFile as _ObjectFile_a34b4727,
     Project as _Project_57d89203,
     ProjectType as _ProjectType_fd80c725,
     ProjenrcFile as _ProjenrcFile_50432c7e,
@@ -31,7 +51,10 @@ from .. import (
     SampleReadmeProps as _SampleReadmeProps_3518b03b,
     Task as _Task_9fa875b6,
 )
-from ..build import BuildWorkflow as _BuildWorkflow_bdd5e6cc
+from ..build import (
+    BuildWorkflow as _BuildWorkflow_bdd5e6cc,
+    BuildWorkflowCommonOptions as _BuildWorkflowCommonOptions_7e3d5c39,
+)
 from ..github import (
     AutoApproveOptions as _AutoApproveOptions_dac86cbe,
     AutoMerge as _AutoMerge_f73f9be0,
@@ -60,6 +83,7 @@ from ..release import (
     ReleaseProjectOptions as _ReleaseProjectOptions_929803c8,
     ReleaseTrigger as _ReleaseTrigger_e4dc221f,
 )
+from .biome_config import BiomeConfiguration as _BiomeConfiguration_dd1a6c83
 
 
 @jsii.enum(jsii_type="projen.javascript.ArrowParens")
@@ -78,29 +102,509 @@ class ArrowParens(enum.Enum):
     AVOID = "AVOID"
     '''(experimental) Omit parens when possible.
 
-    Example: ``x => x``
+    Example: ``x => x``
+
+    :stability: experimental
+    '''
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.AuditOptions",
+    jsii_struct_bases=[],
+    name_mapping={"level": "level", "prod_only": "prodOnly", "run_on": "runOn"},
+)
+class AuditOptions:
+    def __init__(
+        self,
+        *,
+        level: typing.Optional[builtins.str] = None,
+        prod_only: typing.Optional[builtins.bool] = None,
+        run_on: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Options for security audit configuration.
+
+        :param level: (experimental) Minimum vulnerability level to check for during audit. Default: "high"
+        :param prod_only: (experimental) Only audit production dependencies. When false, both production and development dependencies are audited. This is recommended as build dependencies can also contain security vulnerabilities. Default: false
+        :param run_on: (experimental) When to run the audit task. - "build": Run during every build (default) - "release": Only run during release workflow - "manual": Create the task but don't run it automatically Default: "build"
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fa4156d4e0a4a5a2efe965ea98ba35b587dcbfe01e1b4d659a959bcf54294ed2)
+            check_type(argname="argument level", value=level, expected_type=type_hints["level"])
+            check_type(argname="argument prod_only", value=prod_only, expected_type=type_hints["prod_only"])
+            check_type(argname="argument run_on", value=run_on, expected_type=type_hints["run_on"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if level is not None:
+            self._values["level"] = level
+        if prod_only is not None:
+            self._values["prod_only"] = prod_only
+        if run_on is not None:
+            self._values["run_on"] = run_on
+
+    @builtins.property
+    def level(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Minimum vulnerability level to check for during audit.
+
+        :default: "high"
+
+        :stability: experimental
+        '''
+        result = self._values.get("level")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def prod_only(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Only audit production dependencies.
+
+        When false, both production and development dependencies are audited.
+        This is recommended as build dependencies can also contain security vulnerabilities.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("prod_only")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def run_on(self) -> typing.Optional[builtins.str]:
+        '''(experimental) When to run the audit task.
+
+        - "build": Run during every build (default)
+        - "release": Only run during release workflow
+        - "manual": Create the task but don't run it automatically
+
+        :default: "build"
+
+        :stability: experimental
+        '''
+        result = self._values.get("run_on")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "AuditOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.enum(jsii_type="projen.javascript.AutoRelease")
+class AutoRelease(enum.Enum):
+    '''(experimental) Automatic bump modes.
+
+    :stability: experimental
+    '''
+
+    EVERY_COMMIT = "EVERY_COMMIT"
+    '''(experimental) Automatically bump & release a new version for every commit to "main".
+
+    :stability: experimental
+    '''
+    DAILY = "DAILY"
+    '''(experimental) Automatically bump & release a new version on a daily basis.
+
+    :stability: experimental
+    '''
+
+
+class Biome(
+    _Component_2b0ad27f,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="projen.javascript.Biome",
+):
+    '''(experimental) Biome component.
+
+    :stability: experimental
+    '''
+
+    def __init__(
+        self,
+        project: "NodeProject",
+        *,
+        assist: typing.Optional[builtins.bool] = None,
+        biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+        formatter: typing.Optional[builtins.bool] = None,
+        ignore_generated_files: typing.Optional[builtins.bool] = None,
+        linter: typing.Optional[builtins.bool] = None,
+        merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+        version: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param project: -
+        :param assist: (experimental) Enable code assist with recommended actions. Default: true
+        :param biome_config: (experimental) Full Biome configuration. This configuration dictates the final outcome if value is set. For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+        :param formatter: (experimental) Enable code formatter with recommended settings. Default: true
+        :param ignore_generated_files: (experimental) Automatically ignore all generated files. This prevents Biome from trying to format or lint files that are marked as generated, which would fail since generated files are typically read-only. Default: true
+        :param linter: (experimental) Enable linting with recommended rules. Default: true
+        :param merge_arrays_in_configuration: (experimental) Should arrays be merged or overwritten when creating Biome configuration. By default arrays are merged and duplicate values are removed Default: true
+        :param version: (experimental) Version of Biome to use. Default: "^2"
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f2264088409136f62af7e2ac4488206c06c3b9a69056be8b9ead20ab895f1bc)
+            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+        options = BiomeOptions(
+            assist=assist,
+            biome_config=biome_config,
+            formatter=formatter,
+            ignore_generated_files=ignore_generated_files,
+            linter=linter,
+            merge_arrays_in_configuration=merge_arrays_in_configuration,
+            version=version,
+        )
+
+        jsii.create(self.__class__, self, [project, options])
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, project: _Project_57d89203) -> typing.Optional["Biome"]:
+        '''
+        :param project: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__02197aa3a69f17c43ff359679227be724559aba6ef0881da4e04e9a0bf66d078)
+            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+        return typing.cast(typing.Optional["Biome"], jsii.sinvoke(cls, "of", [project]))
+
+    @jsii.member(jsii_name="addFilePattern")
+    def add_file_pattern(self, pattern: builtins.str) -> None:
+        '''
+        :param pattern: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5609a4432d207b19ee177e477fdf5e275031b8ec1346b00ac4bbfdf93f688757)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "addFilePattern", [pattern]))
+
+    @builtins.property
+    @jsii.member(jsii_name="file")
+    def file(self) -> _JsonFile_fa8164db:
+        '''(experimental) Biome configuration file content.
+
+        :stability: experimental
+        '''
+        return typing.cast(_JsonFile_fa8164db, jsii.get(self, "file"))
+
+    @builtins.property
+    @jsii.member(jsii_name="task")
+    def task(self) -> _Task_9fa875b6:
+        '''(experimental) Biome task.
+
+        :stability: experimental
+        '''
+        return typing.cast(_Task_9fa875b6, jsii.get(self, "task"))
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.BiomeOptions",
+    jsii_struct_bases=[],
+    name_mapping={
+        "assist": "assist",
+        "biome_config": "biomeConfig",
+        "formatter": "formatter",
+        "ignore_generated_files": "ignoreGeneratedFiles",
+        "linter": "linter",
+        "merge_arrays_in_configuration": "mergeArraysInConfiguration",
+        "version": "version",
+    },
+)
+class BiomeOptions:
+    def __init__(
+        self,
+        *,
+        assist: typing.Optional[builtins.bool] = None,
+        biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+        formatter: typing.Optional[builtins.bool] = None,
+        ignore_generated_files: typing.Optional[builtins.bool] = None,
+        linter: typing.Optional[builtins.bool] = None,
+        merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+        version: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param assist: (experimental) Enable code assist with recommended actions. Default: true
+        :param biome_config: (experimental) Full Biome configuration. This configuration dictates the final outcome if value is set. For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+        :param formatter: (experimental) Enable code formatter with recommended settings. Default: true
+        :param ignore_generated_files: (experimental) Automatically ignore all generated files. This prevents Biome from trying to format or lint files that are marked as generated, which would fail since generated files are typically read-only. Default: true
+        :param linter: (experimental) Enable linting with recommended rules. Default: true
+        :param merge_arrays_in_configuration: (experimental) Should arrays be merged or overwritten when creating Biome configuration. By default arrays are merged and duplicate values are removed Default: true
+        :param version: (experimental) Version of Biome to use. Default: "^2"
+
+        :stability: experimental
+        '''
+        if isinstance(biome_config, dict):
+            biome_config = _BiomeConfiguration_dd1a6c83(**biome_config)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b53a2988afa9afc23bda2fe96e2de8ffaff18ab919e00b69a6c8d3d229f3dcc1)
+            check_type(argname="argument assist", value=assist, expected_type=type_hints["assist"])
+            check_type(argname="argument biome_config", value=biome_config, expected_type=type_hints["biome_config"])
+            check_type(argname="argument formatter", value=formatter, expected_type=type_hints["formatter"])
+            check_type(argname="argument ignore_generated_files", value=ignore_generated_files, expected_type=type_hints["ignore_generated_files"])
+            check_type(argname="argument linter", value=linter, expected_type=type_hints["linter"])
+            check_type(argname="argument merge_arrays_in_configuration", value=merge_arrays_in_configuration, expected_type=type_hints["merge_arrays_in_configuration"])
+            check_type(argname="argument version", value=version, expected_type=type_hints["version"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if assist is not None:
+            self._values["assist"] = assist
+        if biome_config is not None:
+            self._values["biome_config"] = biome_config
+        if formatter is not None:
+            self._values["formatter"] = formatter
+        if ignore_generated_files is not None:
+            self._values["ignore_generated_files"] = ignore_generated_files
+        if linter is not None:
+            self._values["linter"] = linter
+        if merge_arrays_in_configuration is not None:
+            self._values["merge_arrays_in_configuration"] = merge_arrays_in_configuration
+        if version is not None:
+            self._values["version"] = version
+
+    @builtins.property
+    def assist(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable code assist with recommended actions.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("assist")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def biome_config(self) -> typing.Optional[_BiomeConfiguration_dd1a6c83]:
+        '''(experimental) Full Biome configuration.
+
+        This configuration dictates the final outcome if value is set.
+        For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome_config")
+        return typing.cast(typing.Optional[_BiomeConfiguration_dd1a6c83], result)
+
+    @builtins.property
+    def formatter(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable code formatter with recommended settings.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("formatter")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def ignore_generated_files(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Automatically ignore all generated files.
+
+        This prevents Biome from trying to format or lint files that are marked as generated,
+        which would fail since generated files are typically read-only.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("ignore_generated_files")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def linter(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable linting with recommended rules.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("linter")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def merge_arrays_in_configuration(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Should arrays be merged or overwritten when creating Biome configuration.
+
+        By default arrays are merged and duplicate values are removed
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("merge_arrays_in_configuration")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Version of Biome to use.
+
+        :default: "^2"
+
+        :stability: experimental
+        '''
+        result = self._values.get("version")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "BiomeOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.BuildWorkflowOptions",
+    jsii_struct_bases=[_BuildWorkflowCommonOptions_7e3d5c39],
+    name_mapping={
+        "env": "env",
+        "name": "name",
+        "permissions": "permissions",
+        "pre_build_steps": "preBuildSteps",
+        "workflow_triggers": "workflowTriggers",
+        "mutable_build": "mutableBuild",
+    },
+)
+class BuildWorkflowOptions(_BuildWorkflowCommonOptions_7e3d5c39):
+    def __init__(
+        self,
+        *,
+        env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        name: typing.Optional[builtins.str] = None,
+        permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
+        pre_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
+        workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
+        mutable_build: typing.Optional[builtins.bool] = None,
+    ) -> None:
+        '''(experimental) Build workflow options for NodeProject.
+
+        :param env: (experimental) Build environment variables. Default: {}
+        :param name: (experimental) Name of the buildfile (e.g. "build" becomes "build.yml"). Default: "build"
+        :param permissions: (experimental) Permissions granted to the build job To limit job permissions for ``contents``, the desired permissions have to be explicitly set, e.g.: ``{ contents: JobPermission.NONE }``. Default: ``{ contents: JobPermission.WRITE }``
+        :param pre_build_steps: (experimental) Steps to execute before the build. Default: []
+        :param workflow_triggers: (experimental) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
+        :param mutable_build: (experimental) Automatically update files modified during builds to pull-request branches. This means that any files synthesized by projen or e.g. test snapshots will always be up-to-date before a PR is merged. Implies that PR builds do not have anti-tamper checks. Default: true
+
+        :stability: experimental
+        '''
+        if isinstance(permissions, dict):
+            permissions = _JobPermissions_3b5b53dc(**permissions)
+        if isinstance(workflow_triggers, dict):
+            workflow_triggers = _Triggers_e9ae7617(**workflow_triggers)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__12c3595783c38c358dfa0cc66282771c2ed2020f0770e8379920bb5731b72372)
+            check_type(argname="argument env", value=env, expected_type=type_hints["env"])
+            check_type(argname="argument name", value=name, expected_type=type_hints["name"])
+            check_type(argname="argument permissions", value=permissions, expected_type=type_hints["permissions"])
+            check_type(argname="argument pre_build_steps", value=pre_build_steps, expected_type=type_hints["pre_build_steps"])
+            check_type(argname="argument workflow_triggers", value=workflow_triggers, expected_type=type_hints["workflow_triggers"])
+            check_type(argname="argument mutable_build", value=mutable_build, expected_type=type_hints["mutable_build"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if env is not None:
+            self._values["env"] = env
+        if name is not None:
+            self._values["name"] = name
+        if permissions is not None:
+            self._values["permissions"] = permissions
+        if pre_build_steps is not None:
+            self._values["pre_build_steps"] = pre_build_steps
+        if workflow_triggers is not None:
+            self._values["workflow_triggers"] = workflow_triggers
+        if mutable_build is not None:
+            self._values["mutable_build"] = mutable_build
+
+    @builtins.property
+    def env(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
+    @builtins.property
+    def name(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Name of the buildfile (e.g. "build" becomes "build.yml").
+
+        :default: "build"
+
+        :stability: experimental
+        '''
+        result = self._values.get("name")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def permissions(self) -> typing.Optional[_JobPermissions_3b5b53dc]:
+        '''(experimental) Permissions granted to the build job To limit job permissions for ``contents``, the desired permissions have to be explicitly set, e.g.: ``{ contents: JobPermission.NONE }``.
+
+        :default: ``{ contents: JobPermission.WRITE }``
+
+        :stability: experimental
+        '''
+        result = self._values.get("permissions")
+        return typing.cast(typing.Optional[_JobPermissions_3b5b53dc], result)
+
+    @builtins.property
+    def pre_build_steps(self) -> typing.Optional[typing.List[_JobStep_c3287c05]]:
+        '''(experimental) Steps to execute before the build.
+
+        :default: []
+
+        :stability: experimental
+        '''
+        result = self._values.get("pre_build_steps")
+        return typing.cast(typing.Optional[typing.List[_JobStep_c3287c05]], result)
+
+    @builtins.property
+    def workflow_triggers(self) -> typing.Optional[_Triggers_e9ae7617]:
+        '''(experimental) Build workflow triggers.
+
+        :default: "{ pullRequest: {}, workflowDispatch: {} }"
 
-    :stability: experimental
-    '''
+        :stability: experimental
+        '''
+        result = self._values.get("workflow_triggers")
+        return typing.cast(typing.Optional[_Triggers_e9ae7617], result)
 
+    @builtins.property
+    def mutable_build(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Automatically update files modified during builds to pull-request branches.
 
-@jsii.enum(jsii_type="projen.javascript.AutoRelease")
-class AutoRelease(enum.Enum):
-    '''(experimental) Automatic bump modes.
+        This means that any files synthesized by projen or e.g. test snapshots will
+        always be up-to-date before a PR is merged.
 
-    :stability: experimental
-    '''
+        Implies that PR builds do not have anti-tamper checks.
 
-    EVERY_COMMIT = "EVERY_COMMIT"
-    '''(experimental) Automatically bump & release a new version for every commit to "main".
+        :default: true
 
-    :stability: experimental
-    '''
-    DAILY = "DAILY"
-    '''(experimental) Automatically bump & release a new version on a daily basis.
+        :stability: experimental
+        '''
+        result = self._values.get("mutable_build")
+        return typing.cast(typing.Optional[builtins.bool], result)
 
-    :stability: experimental
-    '''
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "BuildWorkflowOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
 
 
 @jsii.data_type(
@@ -195,6 +699,45 @@ class Bundle:
         )
 
 
+@jsii.enum(jsii_type="projen.javascript.BundleLogLevel")
+class BundleLogLevel(enum.Enum):
+    '''(experimental) Log levels for esbuild and package managers' install commands.
+
+    :stability: experimental
+    '''
+
+    VERBOSE = "VERBOSE"
+    '''(experimental) Show everything.
+
+    :stability: experimental
+    '''
+    DEBUG = "DEBUG"
+    '''(experimental) Show everything from info and some additional messages for debugging.
+
+    :stability: experimental
+    '''
+    INFO = "INFO"
+    '''(experimental) Show warnings, errors, and an output file summary.
+
+    :stability: experimental
+    '''
+    WARNING = "WARNING"
+    '''(experimental) Show warnings and errors.
+
+    :stability: experimental
+    '''
+    ERROR = "ERROR"
+    '''(experimental) Show errors only.
+
+    :stability: experimental
+    '''
+    SILENT = "SILENT"
+    '''(experimental) Show nothing.
+
+    :stability: experimental
+    '''
+
+
 class Bundler(
     _Component_2b0ad27f,
     metaclass=jsii.JSIIMeta,
@@ -215,14 +758,16 @@ class Bundler(
         assets_dir: typing.Optional[builtins.str] = None,
         esbuild_version: typing.Optional[builtins.str] = None,
         loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        run_bundle_task: typing.Optional["RunBundleTask"] = None,
     ) -> None:
         '''(experimental) Creates a ``Bundler``.
 
         :param project: -
-        :param add_to_pre_compile: (experimental) Install the ``bundle`` command as a pre-compile phase. Default: true
+        :param add_to_pre_compile: (deprecated) Install the ``bundle`` command as a pre-compile phase. Default: true
         :param assets_dir: (experimental) Output directory for all bundles. Default: "assets"
         :param esbuild_version: (experimental) The semantic version requirement for ``esbuild``. Default: - no specific version (implies latest)
         :param loaders: (experimental) Map of file extensions (without dot) and loaders to use for this file type. Loaders are appended to the esbuild command by ``--loader:.extension=loader``
+        :param run_bundle_task: (experimental) Choose which phase (if any) to add the ``bundle`` command to. Note: If using ``addBundle()`` with the ``bundleCompiledResults``, this option must be set to ``RunBundleTask.POST_COMPILE`` or ``RunBundleTask.MANUAL``. Default: RunBundleTask.PRE_COMPILE
 
         :stability: experimental
         '''
@@ -234,6 +779,7 @@ class Bundler(
             assets_dir=assets_dir,
             esbuild_version=esbuild_version,
             loaders=loaders,
+            run_bundle_task=run_bundle_task,
         )
 
         jsii.create(self.__class__, self, [project, options])
@@ -261,10 +807,23 @@ class Bundler(
         *,
         platform: builtins.str,
         target: builtins.str,
+        banner: typing.Optional[builtins.str] = None,
+        charset: typing.Optional["Charset"] = None,
+        define: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        esbuild_args: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]] = None,
         executable: typing.Optional[builtins.bool] = None,
+        footer: typing.Optional[builtins.str] = None,
         format: typing.Optional[builtins.str] = None,
+        inject: typing.Optional[typing.Sequence[builtins.str]] = None,
+        keep_names: typing.Optional[builtins.bool] = None,
         loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        log_level: typing.Optional[BundleLogLevel] = None,
+        main_fields: typing.Optional[typing.Sequence[builtins.str]] = None,
+        metafile: typing.Optional[builtins.bool] = None,
+        minify: typing.Optional[builtins.bool] = None,
         outfile: typing.Optional[builtins.str] = None,
+        source_map_mode: typing.Optional["SourceMapMode"] = None,
+        sources_content: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
         externals: typing.Optional[typing.Sequence[builtins.str]] = None,
         sourcemap: typing.Optional[builtins.bool] = None,
@@ -275,10 +834,23 @@ class Bundler(
         :param entrypoint: The relative path of the artifact within the project.
         :param platform: (experimental) esbuild platform.
         :param target: (experimental) esbuild target.
+        :param banner: (experimental) Use this to insert an arbitrary string at the beginning of generated JavaScript files. This is similar to footer which inserts at the end instead of the beginning. This is commonly used to insert comments: Default: - no comments are passed
+        :param charset: (experimental) The charset to use for esbuild's output. By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped using backslash escape sequences. Using escape sequences makes the generated output slightly bigger, and also makes it harder to read. If you would like for esbuild to print the original characters without using escape sequences, use ``Charset.UTF8``. Default: Charset.ASCII
+        :param define: (experimental) Replace global identifiers with constant expressions. For example, ``{ 'process.env.DEBUG': 'true' }``. Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``. Default: - no replacements are made
+        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node22", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
         :param executable: (experimental) Mark the output file as executable. Default: false
+        :param footer: (experimental) Use this to insert an arbitrary string at the end of generated JavaScript files. This is similar to banner which inserts at the beginning instead of the end. This is commonly used to insert comments Default: - no comments are passed
         :param format: (experimental) Output format for the generated JavaScript files. There are currently three possible values that can be configured: ``"iife"``, ``"cjs"``, and ``"esm"``. If not set (``undefined``), esbuild picks an output format for you based on ``platform``: - ``"cjs"`` if ``platform`` is ``"node"`` - ``"iife"`` if ``platform`` is ``"browser"`` - ``"esm"`` if ``platform`` is ``"neutral"`` Note: If making a bundle to run under node with ESM, set ``format`` to ``"esm"`` instead of setting ``platform`` to ``"neutral"``. Default: undefined
+        :param inject: (experimental) This option allows you to automatically replace a global variable with an import from another file. Default: - no code is injected
+        :param keep_names: (experimental) Whether to preserve the original ``name`` values even in minified code. In JavaScript the ``name`` property on functions and classes defaults to a nearby identifier in the source code. However, minification renames symbols to reduce code size and bundling sometimes need to rename symbols to avoid collisions. That changes value of the ``name`` property for many of these cases. This is usually fine because the ``name`` property is normally only used for debugging. However, some frameworks rely on the ``name`` property for registration and binding purposes. If this is the case, you can enable this option to preserve the original ``name`` values even in minified code. Default: false
         :param loaders: (experimental) Map of file extensions (without dot) and loaders to use for this file type. Loaders are appended to the esbuild command by ``--loader:.extension=loader``
+        :param log_level: (experimental) Log level for esbuild. This is also propagated to the package manager and applies to its specific install command. Default: LogLevel.WARNING
+        :param main_fields: (experimental) How to determine the entry point for modules. Try ['module', 'main'] to default to ES module versions. Default: []
+        :param metafile: (experimental) This option tells esbuild to write out a JSON file relative to output directory with metadata about the build. The metadata in this JSON file follows this schema (specified using TypeScript syntax):: { outputs: { [path: string]: { bytes: number inputs: { [path: string]: { bytesInOutput: number } } imports: { path: string }[] exports: string[] } } } This data can then be analyzed by other tools. For example, bundle buddy can consume esbuild's metadata format and generates a treemap visualization of the modules in your bundle and how much space each one takes up. Default: false
+        :param minify: (experimental) Whether to minify files when bundling. Default: false
         :param outfile: (experimental) Bundler output path relative to the asset's output directory. Default: "index.js"
+        :param source_map_mode: (experimental) Source map mode to be used when bundling. Default: SourceMapMode.DEFAULT
+        :param sources_content: (experimental) Whether to include original source code in source maps when bundling. Default: true
         :param tsconfig_path: (experimental) The path of the tsconfig.json file to use for bundling. Default: "tsconfig.json"
         :param externals: (experimental) You can mark a file or a package as external to exclude it from your build. Instead of being bundled, the import will be preserved (using require for the iife and cjs formats and using import for the esm format) and will be evaluated at run time instead. This has several uses. First of all, it can be used to trim unnecessary code from your bundle for a code path that you know will never be executed. For example, a package may contain code that only runs in node but you will only be using that package in the browser. It can also be used to import code in node at run time from a package that cannot be bundled. For example, the fsevents package contains a native extension, which esbuild doesn't support. Default: []
         :param sourcemap: (experimental) Include a source map in the bundle. Default: false
@@ -292,10 +864,23 @@ class Bundler(
         options = AddBundleOptions(
             platform=platform,
             target=target,
+            banner=banner,
+            charset=charset,
+            define=define,
+            esbuild_args=esbuild_args,
             executable=executable,
+            footer=footer,
             format=format,
+            inject=inject,
+            keep_names=keep_names,
             loaders=loaders,
+            log_level=log_level,
+            main_fields=main_fields,
+            metafile=metafile,
+            minify=minify,
             outfile=outfile,
+            source_map_mode=source_map_mode,
+            sources_content=sources_content,
             tsconfig_path=tsconfig_path,
             externals=externals,
             sourcemap=sourcemap,
@@ -343,6 +928,7 @@ class Bundler(
         "assets_dir": "assetsDir",
         "esbuild_version": "esbuildVersion",
         "loaders": "loaders",
+        "run_bundle_task": "runBundleTask",
     },
 )
 class BundlerOptions:
@@ -353,13 +939,15 @@ class BundlerOptions:
         assets_dir: typing.Optional[builtins.str] = None,
         esbuild_version: typing.Optional[builtins.str] = None,
         loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        run_bundle_task: typing.Optional["RunBundleTask"] = None,
     ) -> None:
         '''(experimental) Options for ``Bundler``.
 
-        :param add_to_pre_compile: (experimental) Install the ``bundle`` command as a pre-compile phase. Default: true
+        :param add_to_pre_compile: (deprecated) Install the ``bundle`` command as a pre-compile phase. Default: true
         :param assets_dir: (experimental) Output directory for all bundles. Default: "assets"
         :param esbuild_version: (experimental) The semantic version requirement for ``esbuild``. Default: - no specific version (implies latest)
         :param loaders: (experimental) Map of file extensions (without dot) and loaders to use for this file type. Loaders are appended to the esbuild command by ``--loader:.extension=loader``
+        :param run_bundle_task: (experimental) Choose which phase (if any) to add the ``bundle`` command to. Note: If using ``addBundle()`` with the ``bundleCompiledResults``, this option must be set to ``RunBundleTask.POST_COMPILE`` or ``RunBundleTask.MANUAL``. Default: RunBundleTask.PRE_COMPILE
 
         :stability: experimental
         '''
@@ -369,6 +957,7 @@ class BundlerOptions:
             check_type(argname="argument assets_dir", value=assets_dir, expected_type=type_hints["assets_dir"])
             check_type(argname="argument esbuild_version", value=esbuild_version, expected_type=type_hints["esbuild_version"])
             check_type(argname="argument loaders", value=loaders, expected_type=type_hints["loaders"])
+            check_type(argname="argument run_bundle_task", value=run_bundle_task, expected_type=type_hints["run_bundle_task"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
         if add_to_pre_compile is not None:
             self._values["add_to_pre_compile"] = add_to_pre_compile
@@ -378,14 +967,18 @@ class BundlerOptions:
             self._values["esbuild_version"] = esbuild_version
         if loaders is not None:
             self._values["loaders"] = loaders
+        if run_bundle_task is not None:
+            self._values["run_bundle_task"] = run_bundle_task
 
     @builtins.property
     def add_to_pre_compile(self) -> typing.Optional[builtins.bool]:
-        '''(experimental) Install the ``bundle`` command as a pre-compile phase.
+        '''(deprecated) Install the ``bundle`` command as a pre-compile phase.
 
         :default: true
 
-        :stability: experimental
+        :deprecated: Use ``runBundleTask`` instead.
+
+        :stability: deprecated
         '''
         result = self._values.get("add_to_pre_compile")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -423,6 +1016,21 @@ class BundlerOptions:
         result = self._values.get("loaders")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
+    @builtins.property
+    def run_bundle_task(self) -> typing.Optional["RunBundleTask"]:
+        '''(experimental) Choose which phase (if any) to add the ``bundle`` command to.
+
+        Note: If using ``addBundle()`` with the ``bundleCompiledResults``, this option
+        must be set to ``RunBundleTask.POST_COMPILE`` or ``RunBundleTask.MANUAL``.
+
+        :default: RunBundleTask.PRE_COMPILE
+
+        :see: AddBundleOptions.bundleCompiledResults *
+        :stability: experimental
+        '''
+        result = self._values.get("run_bundle_task")
+        return typing.cast(typing.Optional["RunBundleTask"], result)
+
     def __eq__(self, rhs: typing.Any) -> builtins.bool:
         return isinstance(rhs, self.__class__) and rhs._values == self._values
 
@@ -533,6 +1141,29 @@ class BundlingOptions:
         )
 
 
+@jsii.enum(jsii_type="projen.javascript.Charset")
+class Charset(enum.Enum):
+    '''(experimental) Charset for esbuild's output.
+
+    :stability: experimental
+    '''
+
+    ASCII = "ASCII"
+    '''(experimental) ASCII.
+
+    Any non-ASCII characters are escaped using backslash escape sequences
+
+    :stability: experimental
+    '''
+    UTF8 = "UTF8"
+    '''(experimental) UTF-8.
+
+    Keep original characters without using escape sequences
+
+    :stability: experimental
+    '''
+
+
 @jsii.enum(jsii_type="projen.javascript.CodeArtifactAuthProvider")
 class CodeArtifactAuthProvider(enum.Enum):
     '''(experimental) Options for authorizing requests to a AWS CodeArtifact npm repository.
@@ -822,12 +1453,14 @@ class Eslint(
         dirs: typing.Sequence[builtins.str],
         alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        command_options: typing.Optional[typing.Union["EslintCommandOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
         file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
         lint_projen_rc: typing.Optional[builtins.bool] = None,
         lint_projen_rc_file: typing.Optional[builtins.str] = None,
         prettier: typing.Optional[builtins.bool] = None,
+        sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
         ts_always_try_types: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
         yaml: typing.Optional[builtins.bool] = None,
@@ -837,12 +1470,14 @@ class Eslint(
         :param dirs: (experimental) Files or glob patterns or directories with source files to lint (e.g. [ "src" ]).
         :param alias_extensions: (experimental) Enable import alias for module paths. Default: undefined
         :param alias_map: (experimental) Enable import alias for module paths. Default: undefined
+        :param command_options: (experimental) Options for eslint command executed by eslint task.
         :param devdirs: (experimental) Files or glob patterns or directories with source files that include tests and build tools. These sources are linted but may also import packages from ``devDependencies``. Default: []
         :param file_extensions: (experimental) File types that should be linted (e.g. [ ".js", ".ts" ]). Default: [".ts"]
         :param ignore_patterns: (experimental) List of file patterns that should not be linted, using the same syntax as .gitignore patterns. Default: [ '*.js', '*.d.ts', 'node_modules/', '*.generated.ts', 'coverage' ]
         :param lint_projen_rc: (deprecated) Should we lint .projenrc.js. Default: true
         :param lint_projen_rc_file: (deprecated) Projenrc file to lint. Use empty string to disable. Default: "projenrc.js"
         :param prettier: (experimental) Enable prettier for code formatting. Default: false
+        :param sort_extends: (experimental) The extends array in eslint is order dependent. This option allows to sort the extends array in any way seen fit. Default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
         :param ts_always_try_types: (experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code. This prevents ``import/no-unresolved`` eslint errors when importing a ``@types/*`` module that would otherwise remain unresolved. Default: true
         :param tsconfig_path: (experimental) Path to ``tsconfig.json`` which should be used by eslint. Default: "./tsconfig.json"
         :param yaml: (experimental) Write eslint configuration as YAML instead of JSON. Default: false
@@ -856,12 +1491,14 @@ class Eslint(
             dirs=dirs,
             alias_extensions=alias_extensions,
             alias_map=alias_map,
+            command_options=command_options,
             devdirs=devdirs,
             file_extensions=file_extensions,
             ignore_patterns=ignore_patterns,
             lint_projen_rc=lint_projen_rc,
             lint_projen_rc_file=lint_projen_rc_file,
             prettier=prettier,
+            sort_extends=sort_extends,
             ts_always_try_types=ts_always_try_types,
             tsconfig_path=tsconfig_path,
             yaml=yaml,
@@ -872,7 +1509,7 @@ class Eslint(
     @jsii.member(jsii_name="of")
     @builtins.classmethod
     def of(cls, project: _Project_57d89203) -> typing.Optional["Eslint"]:
-        '''(experimental) Returns the singletone Eslint component of a project or undefined if there is none.
+        '''(experimental) Returns the singleton Eslint component of a project or undefined if there is none.
 
         :param project: -
 
@@ -940,7 +1577,7 @@ class Eslint(
         :param extends: (experimental) Config(s) to extend in this override.
         :param parser: (experimental) The overridden parser.
         :param plugins: (experimental) ``plugins`` override.
-        :param rules: (experimental) The overriden rules.
+        :param rules: (experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1012,6 +1649,15 @@ class Eslint(
         '''
         return typing.cast(_Task_9fa875b6, jsii.get(self, "eslintTask"))
 
+    @builtins.property
+    @jsii.member(jsii_name="file")
+    def file(self) -> _ObjectFile_a34b4727:
+        '''(experimental) The underlying config file.
+
+        :stability: experimental
+        '''
+        return typing.cast(_ObjectFile_a34b4727, jsii.get(self, "file"))
+
     @builtins.property
     @jsii.member(jsii_name="ignorePatterns")
     def ignore_patterns(self) -> typing.List[builtins.str]:
@@ -1041,12 +1687,72 @@ class Eslint(
 
     @builtins.property
     @jsii.member(jsii_name="rules")
-    def rules(self) -> typing.Mapping[builtins.str, typing.List[typing.Any]]:
+    def rules(self) -> typing.Mapping[builtins.str, typing.Any]:
         '''(experimental) eslint rules.
 
         :stability: experimental
         '''
-        return typing.cast(typing.Mapping[builtins.str, typing.List[typing.Any]], jsii.get(self, "rules"))
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "rules"))
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.EslintCommandOptions",
+    jsii_struct_bases=[],
+    name_mapping={"extra_args": "extraArgs", "fix": "fix"},
+)
+class EslintCommandOptions:
+    def __init__(
+        self,
+        *,
+        extra_args: typing.Optional[typing.Sequence[builtins.str]] = None,
+        fix: typing.Optional[builtins.bool] = None,
+    ) -> None:
+        '''
+        :param extra_args: (experimental) Extra flag arguments to pass to eslint command.
+        :param fix: (experimental) Whether to fix eslint issues when running the eslint task. Default: true
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ab5437a5e5c0bee91b2bed562cbb0dc9e80e748c8ca3251df4c2eb91ea3a4160)
+            check_type(argname="argument extra_args", value=extra_args, expected_type=type_hints["extra_args"])
+            check_type(argname="argument fix", value=fix, expected_type=type_hints["fix"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if extra_args is not None:
+            self._values["extra_args"] = extra_args
+        if fix is not None:
+            self._values["fix"] = fix
+
+    @builtins.property
+    def extra_args(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) Extra flag arguments to pass to eslint command.
+
+        :stability: experimental
+        '''
+        result = self._values.get("extra_args")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def fix(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether to fix eslint issues when running the eslint task.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("fix")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "EslintCommandOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
 
 
 @jsii.data_type(
@@ -1056,12 +1762,14 @@ class Eslint(
         "dirs": "dirs",
         "alias_extensions": "aliasExtensions",
         "alias_map": "aliasMap",
+        "command_options": "commandOptions",
         "devdirs": "devdirs",
         "file_extensions": "fileExtensions",
         "ignore_patterns": "ignorePatterns",
         "lint_projen_rc": "lintProjenRc",
         "lint_projen_rc_file": "lintProjenRcFile",
         "prettier": "prettier",
+        "sort_extends": "sortExtends",
         "ts_always_try_types": "tsAlwaysTryTypes",
         "tsconfig_path": "tsconfigPath",
         "yaml": "yaml",
@@ -1074,12 +1782,14 @@ class EslintOptions:
         dirs: typing.Sequence[builtins.str],
         alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
         file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
         lint_projen_rc: typing.Optional[builtins.bool] = None,
         lint_projen_rc_file: typing.Optional[builtins.str] = None,
         prettier: typing.Optional[builtins.bool] = None,
+        sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
         ts_always_try_types: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
         yaml: typing.Optional[builtins.bool] = None,
@@ -1088,29 +1798,35 @@ class EslintOptions:
         :param dirs: (experimental) Files or glob patterns or directories with source files to lint (e.g. [ "src" ]).
         :param alias_extensions: (experimental) Enable import alias for module paths. Default: undefined
         :param alias_map: (experimental) Enable import alias for module paths. Default: undefined
+        :param command_options: (experimental) Options for eslint command executed by eslint task.
         :param devdirs: (experimental) Files or glob patterns or directories with source files that include tests and build tools. These sources are linted but may also import packages from ``devDependencies``. Default: []
         :param file_extensions: (experimental) File types that should be linted (e.g. [ ".js", ".ts" ]). Default: [".ts"]
         :param ignore_patterns: (experimental) List of file patterns that should not be linted, using the same syntax as .gitignore patterns. Default: [ '*.js', '*.d.ts', 'node_modules/', '*.generated.ts', 'coverage' ]
         :param lint_projen_rc: (deprecated) Should we lint .projenrc.js. Default: true
         :param lint_projen_rc_file: (deprecated) Projenrc file to lint. Use empty string to disable. Default: "projenrc.js"
         :param prettier: (experimental) Enable prettier for code formatting. Default: false
+        :param sort_extends: (experimental) The extends array in eslint is order dependent. This option allows to sort the extends array in any way seen fit. Default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
         :param ts_always_try_types: (experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code. This prevents ``import/no-unresolved`` eslint errors when importing a ``@types/*`` module that would otherwise remain unresolved. Default: true
         :param tsconfig_path: (experimental) Path to ``tsconfig.json`` which should be used by eslint. Default: "./tsconfig.json"
         :param yaml: (experimental) Write eslint configuration as YAML instead of JSON. Default: false
 
         :stability: experimental
         '''
+        if isinstance(command_options, dict):
+            command_options = EslintCommandOptions(**command_options)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__26892c968b7bf4d64dd2597bbdabf1f1e9ced92002225a4eedfae6cbe3c22894)
             check_type(argname="argument dirs", value=dirs, expected_type=type_hints["dirs"])
             check_type(argname="argument alias_extensions", value=alias_extensions, expected_type=type_hints["alias_extensions"])
             check_type(argname="argument alias_map", value=alias_map, expected_type=type_hints["alias_map"])
+            check_type(argname="argument command_options", value=command_options, expected_type=type_hints["command_options"])
             check_type(argname="argument devdirs", value=devdirs, expected_type=type_hints["devdirs"])
             check_type(argname="argument file_extensions", value=file_extensions, expected_type=type_hints["file_extensions"])
             check_type(argname="argument ignore_patterns", value=ignore_patterns, expected_type=type_hints["ignore_patterns"])
             check_type(argname="argument lint_projen_rc", value=lint_projen_rc, expected_type=type_hints["lint_projen_rc"])
             check_type(argname="argument lint_projen_rc_file", value=lint_projen_rc_file, expected_type=type_hints["lint_projen_rc_file"])
             check_type(argname="argument prettier", value=prettier, expected_type=type_hints["prettier"])
+            check_type(argname="argument sort_extends", value=sort_extends, expected_type=type_hints["sort_extends"])
             check_type(argname="argument ts_always_try_types", value=ts_always_try_types, expected_type=type_hints["ts_always_try_types"])
             check_type(argname="argument tsconfig_path", value=tsconfig_path, expected_type=type_hints["tsconfig_path"])
             check_type(argname="argument yaml", value=yaml, expected_type=type_hints["yaml"])
@@ -1121,6 +1837,8 @@ class EslintOptions:
             self._values["alias_extensions"] = alias_extensions
         if alias_map is not None:
             self._values["alias_map"] = alias_map
+        if command_options is not None:
+            self._values["command_options"] = command_options
         if devdirs is not None:
             self._values["devdirs"] = devdirs
         if file_extensions is not None:
@@ -1133,6 +1851,8 @@ class EslintOptions:
             self._values["lint_projen_rc_file"] = lint_projen_rc_file
         if prettier is not None:
             self._values["prettier"] = prettier
+        if sort_extends is not None:
+            self._values["sort_extends"] = sort_extends
         if ts_always_try_types is not None:
             self._values["ts_always_try_types"] = ts_always_try_types
         if tsconfig_path is not None:
@@ -1172,6 +1892,15 @@ class EslintOptions:
         result = self._values.get("alias_map")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
+    @builtins.property
+    def command_options(self) -> typing.Optional[EslintCommandOptions]:
+        '''(experimental) Options for eslint command executed by eslint task.
+
+        :stability: experimental
+        '''
+        result = self._values.get("command_options")
+        return typing.cast(typing.Optional[EslintCommandOptions], result)
+
     @builtins.property
     def devdirs(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) Files or glob patterns or directories with source files that include tests and build tools.
@@ -1246,6 +1975,19 @@ class EslintOptions:
         result = self._values.get("prettier")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def sort_extends(self) -> typing.Optional[_ICompareString_f119e19c]:
+        '''(experimental) The extends array in eslint is order dependent.
+
+        This option allows to sort the extends array in any way seen fit.
+
+        :default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
+
+        :stability: experimental
+        '''
+        result = self._values.get("sort_extends")
+        return typing.cast(typing.Optional[_ICompareString_f119e19c], result)
+
     @builtins.property
     def ts_always_try_types(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code.
@@ -1323,7 +2065,7 @@ class EslintOverride:
         :param extends: (experimental) Config(s) to extend in this override.
         :param parser: (experimental) The overridden parser.
         :param plugins: (experimental) ``plugins`` override.
-        :param rules: (experimental) The overriden rules.
+        :param rules: (experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1399,7 +2141,7 @@ class EslintOverride:
 
     @builtins.property
     def rules(self) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
-        '''(experimental) The overriden rules.
+        '''(experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1558,7 +2300,7 @@ class Jest(
 
     def __init__(
         self,
-        project: "NodeProject",
+        scope: _constructs_77d1e7e8.IConstruct,
         *,
         config_file_path: typing.Optional[builtins.str] = None,
         coverage: typing.Optional[builtins.bool] = None,
@@ -1568,19 +2310,21 @@ class Jest(
         jest_config: typing.Optional[typing.Union["JestConfigOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         jest_version: typing.Optional[builtins.str] = None,
         junit_reporting: typing.Optional[builtins.bool] = None,
+        pass_with_no_tests: typing.Optional[builtins.bool] = None,
         preserve_default_reporters: typing.Optional[builtins.bool] = None,
         update_snapshot: typing.Optional["UpdateSnapshot"] = None,
     ) -> None:
         '''
-        :param project: -
+        :param scope: -
         :param config_file_path: (experimental) Path to JSON config file for Jest. Default: - No separate config file, jest settings are stored in package.json
         :param coverage: (deprecated) Collect coverage. Deprecated Default: true
         :param coverage_text: (experimental) Include the ``text`` coverage reporter, which means that coverage summary is printed at the end of the jest execution. Default: true
         :param extra_cli_options: (experimental) Additional options to pass to the Jest CLI invocation. Default: - no extra options
         :param ignore_patterns: (deprecated) Defines ``testPathIgnorePatterns`` and ``coveragePathIgnorePatterns``. Default: ["/node_modules/"]
         :param jest_config: (experimental) Jest configuration. Default: - default jest configuration
-        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. Default: - installs the latest jest version
+        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. With Jest 30 ts-jest version 29 is used (if Typescript in use) Default: - installs the latest jest version
         :param junit_reporting: (experimental) Result processing with jest-junit. Output directory is ``test-reports/``. Default: true
+        :param pass_with_no_tests: (experimental) Pass with no tests. Default: - true
         :param preserve_default_reporters: (experimental) Preserve the default Jest reporter when additional reporters are added. Default: true
         :param update_snapshot: (experimental) Whether to update snapshots in task "test" (which is executed in task "build" and build workflows), or create a separate task "test:update" for updating snapshots. Default: - ALWAYS
 
@@ -1588,7 +2332,7 @@ class Jest(
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc46ab7738)
-            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
         options = JestOptions(
             config_file_path=config_file_path,
             coverage=coverage,
@@ -1598,11 +2342,12 @@ class Jest(
             jest_config=jest_config,
             jest_version=jest_version,
             junit_reporting=junit_reporting,
+            pass_with_no_tests=pass_with_no_tests,
             preserve_default_reporters=preserve_default_reporters,
             update_snapshot=update_snapshot,
         )
 
-        jsii.create(self.__class__, self, [project, options])
+        jsii.create(self.__class__, self, [scope, options])
 
     @jsii.member(jsii_name="of")
     @builtins.classmethod
@@ -1750,6 +2495,29 @@ class Jest(
             check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
         return typing.cast(None, jsii.invoke(self, "addWatchIgnorePattern", [pattern]))
 
+    @jsii.member(jsii_name="discoverTestMatchPatternsForDirs")
+    def discover_test_match_patterns_for_dirs(
+        self,
+        dirs: typing.Sequence[builtins.str],
+        *,
+        file_extension_pattern: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Build standard test match patterns for a directory.
+
+        :param dirs: The directories to add test matches for. Matches any folder if not specified or an empty array.
+        :param file_extension_pattern: (experimental) The file extension pattern to use. Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0681a729d70e1f1999defc63f8a0f12400f6e0b609f4fb8dbf7f858c435cd9b1)
+            check_type(argname="argument dirs", value=dirs, expected_type=type_hints["dirs"])
+        options = JestDiscoverTestMatchPatternsForDirsOptions(
+            file_extension_pattern=file_extension_pattern
+        )
+
+        return typing.cast(None, jsii.invoke(self, "discoverTestMatchPatternsForDirs", [dirs, options]))
+
     @builtins.property
     @jsii.member(jsii_name="config")
     def config(self) -> typing.Any:
@@ -1768,6 +2536,14 @@ class Jest(
         '''
         return typing.cast(builtins.str, jsii.get(self, "jestVersion"))
 
+    @builtins.property
+    @jsii.member(jsii_name="project")
+    def project(self) -> "NodeProject":
+        '''
+        :stability: experimental
+        '''
+        return typing.cast("NodeProject", jsii.get(self, "project"))
+
     @builtins.property
     @jsii.member(jsii_name="file")
     def file(self) -> typing.Optional[_JsonFile_fa8164db]:
@@ -1933,7 +2709,7 @@ class JestConfigOptions:
         :param collect_coverage_from: (experimental) An array of glob patterns indicating a set of files for which coverage information should be collected. Default: - undefined
         :param coverage_directory: (experimental) The directory where Jest should output its coverage files. Default: "coverage"
         :param coverage_path_ignore_patterns: (experimental) An array of regexp pattern strings that are matched against all file paths before executing the test. If the file path matches any of the patterns, coverage information will be skipped Default: "/node_modules/"
-        :param coverage_provider: (experimental) Indicates which provider should be used to instrument code for coverage. Allowed values are babel (default) or v8 Default: - "babel"
+        :param coverage_provider: (experimental) Indicates which provider should be used to instrument code for coverage. Allowed values are v8 (default) or babel Default: - "v8"
         :param coverage_reporters: (experimental) A list of reporter names that Jest uses when writing coverage reports. Any istanbul reporter can be used Default: - ["json", "lcov", "text", "clover", "cobertura"]
         :param coverage_threshold: (experimental) Specify the global coverage thresholds. This will be used to configure minimum threshold enforcement for coverage results. Thresholds can be specified as global, as a glob, and as a directory or file path. If thresholds aren't met, jest will fail. Default: - undefined
         :param dependency_extractor: (experimental) This option allows the use of a custom dependency extractor. It must be a node module that exports an object with an extract function Default: - undefined
@@ -1974,7 +2750,7 @@ class JestConfigOptions:
         :param test_environment: (experimental) The test environment that will be used for testing. The default environment in Jest is a browser-like environment through jsdom. If you are building a node service, you can use the node option to use a node-like environment instead. Default: - "jsdom"
         :param test_environment_options: (experimental) Test environment options that will be passed to the testEnvironment. The relevant options depend on the environment. Default: - {}
         :param test_failure_exit_code: (experimental) The exit code Jest returns on test failure. Default: - 1
-        :param test_match: (experimental) The glob patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: ['**/**tests**/**/*.[jt]s?(x)', '**/?(*.)+(spec|test).[tj]s?(x)']
+        :param test_match: (experimental) The glob patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: ['**/**tests**/**/*.[jt]s?(x)', '**/*(*.)@(spec|test).[tj]s?(x)']
         :param test_path_ignore_patterns: (experimental) An array of regexp pattern strings that are matched against all test paths before executing the test. If the test path matches any of the patterns, it will be skipped. Default: - ["/node_modules/"]
         :param test_regex: (experimental) The pattern or patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: - (/**tests**/.*|(\\.|/)(test|spec))\\.[jt]sx?$
         :param test_results_processor: (experimental) This option allows the use of a custom results processor. Default: - undefined
@@ -2317,9 +3093,9 @@ class JestConfigOptions:
     def coverage_provider(self) -> typing.Optional[builtins.str]:
         '''(experimental) Indicates which provider should be used to instrument code for coverage.
 
-        Allowed values are babel (default) or v8
+        Allowed values are v8 (default) or babel
 
-        :default: - "babel"
+        :default: - "v8"
 
         :stability: experimental
         '''
@@ -2858,7 +3634,7 @@ class JestConfigOptions:
         files inside of **tests** folders, as well as any files with a suffix of .test or .spec
         (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js.
 
-        :default: ['**/**tests**/**/*.[jt]s?(x)', '**/?(*.)+(spec|test).[tj]s?(x)']
+        :default: ['**/**tests**/**/*.[jt]s?(x)', '**/*(*.)@(spec|test).[tj]s?(x)']
 
         :stability: experimental
         '''
@@ -3075,6 +3851,53 @@ class JestConfigOptions:
         )
 
 
+@jsii.data_type(
+    jsii_type="projen.javascript.JestDiscoverTestMatchPatternsForDirsOptions",
+    jsii_struct_bases=[],
+    name_mapping={"file_extension_pattern": "fileExtensionPattern"},
+)
+class JestDiscoverTestMatchPatternsForDirsOptions:
+    def __init__(
+        self,
+        *,
+        file_extension_pattern: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Options for discoverTestMatchPatternsForDirs.
+
+        :param file_extension_pattern: (experimental) The file extension pattern to use. Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__987ab5c64454683ddeb28bad78f44cdd78a2099af6a0e44ff92f50bc40f8e486)
+            check_type(argname="argument file_extension_pattern", value=file_extension_pattern, expected_type=type_hints["file_extension_pattern"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if file_extension_pattern is not None:
+            self._values["file_extension_pattern"] = file_extension_pattern
+
+    @builtins.property
+    def file_extension_pattern(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The file extension pattern to use.
+
+        Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        result = self._values.get("file_extension_pattern")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "JestDiscoverTestMatchPatternsForDirsOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="projen.javascript.JestOptions",
     jsii_struct_bases=[],
@@ -3087,6 +3910,7 @@ class JestConfigOptions:
         "jest_config": "jestConfig",
         "jest_version": "jestVersion",
         "junit_reporting": "junitReporting",
+        "pass_with_no_tests": "passWithNoTests",
         "preserve_default_reporters": "preserveDefaultReporters",
         "update_snapshot": "updateSnapshot",
     },
@@ -3103,6 +3927,7 @@ class JestOptions:
         jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         jest_version: typing.Optional[builtins.str] = None,
         junit_reporting: typing.Optional[builtins.bool] = None,
+        pass_with_no_tests: typing.Optional[builtins.bool] = None,
         preserve_default_reporters: typing.Optional[builtins.bool] = None,
         update_snapshot: typing.Optional["UpdateSnapshot"] = None,
     ) -> None:
@@ -3113,8 +3938,9 @@ class JestOptions:
         :param extra_cli_options: (experimental) Additional options to pass to the Jest CLI invocation. Default: - no extra options
         :param ignore_patterns: (deprecated) Defines ``testPathIgnorePatterns`` and ``coveragePathIgnorePatterns``. Default: ["/node_modules/"]
         :param jest_config: (experimental) Jest configuration. Default: - default jest configuration
-        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. Default: - installs the latest jest version
+        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. With Jest 30 ts-jest version 29 is used (if Typescript in use) Default: - installs the latest jest version
         :param junit_reporting: (experimental) Result processing with jest-junit. Output directory is ``test-reports/``. Default: true
+        :param pass_with_no_tests: (experimental) Pass with no tests. Default: - true
         :param preserve_default_reporters: (experimental) Preserve the default Jest reporter when additional reporters are added. Default: true
         :param update_snapshot: (experimental) Whether to update snapshots in task "test" (which is executed in task "build" and build workflows), or create a separate task "test:update" for updating snapshots. Default: - ALWAYS
 
@@ -3132,6 +3958,7 @@ class JestOptions:
             check_type(argname="argument jest_config", value=jest_config, expected_type=type_hints["jest_config"])
             check_type(argname="argument jest_version", value=jest_version, expected_type=type_hints["jest_version"])
             check_type(argname="argument junit_reporting", value=junit_reporting, expected_type=type_hints["junit_reporting"])
+            check_type(argname="argument pass_with_no_tests", value=pass_with_no_tests, expected_type=type_hints["pass_with_no_tests"])
             check_type(argname="argument preserve_default_reporters", value=preserve_default_reporters, expected_type=type_hints["preserve_default_reporters"])
             check_type(argname="argument update_snapshot", value=update_snapshot, expected_type=type_hints["update_snapshot"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3151,6 +3978,8 @@ class JestOptions:
             self._values["jest_version"] = jest_version
         if junit_reporting is not None:
             self._values["junit_reporting"] = junit_reporting
+        if pass_with_no_tests is not None:
+            self._values["pass_with_no_tests"] = pass_with_no_tests
         if preserve_default_reporters is not None:
             self._values["preserve_default_reporters"] = preserve_default_reporters
         if update_snapshot is not None:
@@ -3234,6 +4063,8 @@ class JestOptions:
 
         Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those.
 
+        With Jest 30 ts-jest version 29 is used (if Typescript in use)
+
         :default: - installs the latest jest version
 
         :stability: experimental
@@ -3254,6 +4085,17 @@ class JestOptions:
         result = self._values.get("junit_reporting")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def pass_with_no_tests(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Pass with no tests.
+
+        :default: - true
+
+        :stability: experimental
+        '''
+        result = self._values.get("pass_with_no_tests")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def preserve_default_reporters(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Preserve the default Jest reporter when additional reporters are added.
@@ -3510,6 +4352,7 @@ class NodePackage(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -3522,9 +4365,11 @@ class NodePackage(
         max_node_version: typing.Optional[builtins.str] = None,
         min_node_version: typing.Optional[builtins.str] = None,
         npm_access: typing.Optional["NpmAccess"] = None,
+        npm_provenance: typing.Optional[builtins.bool] = None,
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional["NodePackageManager"] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3549,6 +4394,7 @@ class NodePackage(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -3558,17 +4404,19 @@ class NodePackage(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
+        :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
@@ -3592,6 +4440,7 @@ class NodePackage(
             bugs_email=bugs_email,
             bugs_url=bugs_url,
             bundled_deps=bundled_deps,
+            bun_version=bun_version,
             code_artifact_options=code_artifact_options,
             deps=deps,
             description=description,
@@ -3604,9 +4453,11 @@ class NodePackage(
             max_node_version=max_node_version,
             min_node_version=min_node_version,
             npm_access=npm_access,
+            npm_provenance=npm_provenance,
             npm_registry=npm_registry,
             npm_registry_url=npm_registry_url,
             npm_token_secret=npm_token_secret,
+            npm_trusted_publishing=npm_trusted_publishing,
             package_manager=package_manager,
             package_name=package_name,
             peer_dependency_options=peer_dependency_options,
@@ -3953,6 +4804,15 @@ class NodePackage(
         '''
         return typing.cast("NpmAccess", jsii.get(self, "npmAccess"))
 
+    @builtins.property
+    @jsii.member(jsii_name="npmProvenance")
+    def npm_provenance(self) -> builtins.bool:
+        '''(experimental) Should provenance statements be generated when package is published.
+
+        :stability: experimental
+        '''
+        return typing.cast(builtins.bool, jsii.get(self, "npmProvenance"))
+
     @builtins.property
     @jsii.member(jsii_name="npmRegistry")
     def npm_registry(self) -> builtins.str:
@@ -3992,12 +4852,23 @@ class NodePackage(
     @builtins.property
     @jsii.member(jsii_name="projenCommand")
     def projen_command(self) -> builtins.str:
-        '''(experimental) The command which executes "projen".
+        '''(deprecated) The command which executes "projen".
 
-        :stability: experimental
+        :deprecated: use ``project.projenCommand`` instead.
+
+        :stability: deprecated
         '''
         return typing.cast(builtins.str, jsii.get(self, "projenCommand"))
 
+    @builtins.property
+    @jsii.member(jsii_name="bunVersion")
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :stability: experimental
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "bunVersion"))
+
     @builtins.property
     @jsii.member(jsii_name="codeArtifactOptions")
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
@@ -4025,9 +4896,9 @@ class NodePackage(
     @builtins.property
     @jsii.member(jsii_name="maxNodeVersion")
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Maximum node version required by this package.
+        '''(experimental) Maximum node version supported by this package.
 
-        :default: - no maximum.
+        The value indicates the package is incompatible with newer versions.
 
         :stability: experimental
         '''
@@ -4036,9 +4907,9 @@ class NodePackage(
     @builtins.property
     @jsii.member(jsii_name="minNodeVersion")
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version required by this package.
+        '''(experimental) The minimum node version required by this package to function.
 
-        :default: - no minimum
+        This value indicates the package is incompatible with older versions.
 
         :stability: experimental
         '''
@@ -4058,8 +4929,6 @@ class NodePackage(
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
-
         :stability: experimental
         '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "pnpmVersion"))
@@ -4140,6 +5009,7 @@ class NodePackageManager(enum.Enum):
         "bugs_email": "bugsEmail",
         "bugs_url": "bugsUrl",
         "bundled_deps": "bundledDeps",
+        "bun_version": "bunVersion",
         "code_artifact_options": "codeArtifactOptions",
         "deps": "deps",
         "description": "description",
@@ -4152,9 +5022,11 @@ class NodePackageManager(enum.Enum):
         "max_node_version": "maxNodeVersion",
         "min_node_version": "minNodeVersion",
         "npm_access": "npmAccess",
+        "npm_provenance": "npmProvenance",
         "npm_registry": "npmRegistry",
         "npm_registry_url": "npmRegistryUrl",
         "npm_token_secret": "npmTokenSecret",
+        "npm_trusted_publishing": "npmTrustedPublishing",
         "package_manager": "packageManager",
         "package_name": "packageName",
         "peer_dependency_options": "peerDependencyOptions",
@@ -4182,6 +5054,7 @@ class NodePackageOptions:
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -4194,9 +5067,11 @@ class NodePackageOptions:
         max_node_version: typing.Optional[builtins.str] = None,
         min_node_version: typing.Optional[builtins.str] = None,
         npm_access: typing.Optional["NpmAccess"] = None,
+        npm_provenance: typing.Optional[builtins.bool] = None,
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4220,6 +5095,7 @@ class NodePackageOptions:
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -4229,17 +5105,19 @@ class NodePackageOptions:
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
+        :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
@@ -4267,6 +5145,7 @@ class NodePackageOptions:
             check_type(argname="argument bugs_email", value=bugs_email, expected_type=type_hints["bugs_email"])
             check_type(argname="argument bugs_url", value=bugs_url, expected_type=type_hints["bugs_url"])
             check_type(argname="argument bundled_deps", value=bundled_deps, expected_type=type_hints["bundled_deps"])
+            check_type(argname="argument bun_version", value=bun_version, expected_type=type_hints["bun_version"])
             check_type(argname="argument code_artifact_options", value=code_artifact_options, expected_type=type_hints["code_artifact_options"])
             check_type(argname="argument deps", value=deps, expected_type=type_hints["deps"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -4279,9 +5158,11 @@ class NodePackageOptions:
             check_type(argname="argument max_node_version", value=max_node_version, expected_type=type_hints["max_node_version"])
             check_type(argname="argument min_node_version", value=min_node_version, expected_type=type_hints["min_node_version"])
             check_type(argname="argument npm_access", value=npm_access, expected_type=type_hints["npm_access"])
+            check_type(argname="argument npm_provenance", value=npm_provenance, expected_type=type_hints["npm_provenance"])
             check_type(argname="argument npm_registry", value=npm_registry, expected_type=type_hints["npm_registry"])
             check_type(argname="argument npm_registry_url", value=npm_registry_url, expected_type=type_hints["npm_registry_url"])
             check_type(argname="argument npm_token_secret", value=npm_token_secret, expected_type=type_hints["npm_token_secret"])
+            check_type(argname="argument npm_trusted_publishing", value=npm_trusted_publishing, expected_type=type_hints["npm_trusted_publishing"])
             check_type(argname="argument package_manager", value=package_manager, expected_type=type_hints["package_manager"])
             check_type(argname="argument package_name", value=package_name, expected_type=type_hints["package_name"])
             check_type(argname="argument peer_dependency_options", value=peer_dependency_options, expected_type=type_hints["peer_dependency_options"])
@@ -4314,6 +5195,8 @@ class NodePackageOptions:
             self._values["bugs_url"] = bugs_url
         if bundled_deps is not None:
             self._values["bundled_deps"] = bundled_deps
+        if bun_version is not None:
+            self._values["bun_version"] = bun_version
         if code_artifact_options is not None:
             self._values["code_artifact_options"] = code_artifact_options
         if deps is not None:
@@ -4338,12 +5221,16 @@ class NodePackageOptions:
             self._values["min_node_version"] = min_node_version
         if npm_access is not None:
             self._values["npm_access"] = npm_access
+        if npm_provenance is not None:
+            self._values["npm_provenance"] = npm_provenance
         if npm_registry is not None:
             self._values["npm_registry"] = npm_registry
         if npm_registry_url is not None:
             self._values["npm_registry_url"] = npm_registry_url
         if npm_token_secret is not None:
             self._values["npm_token_secret"] = npm_token_secret
+        if npm_trusted_publishing is not None:
+            self._values["npm_trusted_publishing"] = npm_trusted_publishing
         if package_manager is not None:
             self._values["package_manager"] = package_manager
         if package_name is not None:
@@ -4479,6 +5366,17 @@ class NodePackageOptions:
         result = self._values.get("bundled_deps")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :default: "latest"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bun_version")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
         '''(experimental) Options for npm packages using AWS CodeArtifact.
@@ -4613,9 +5511,15 @@ class NodePackageOptions:
 
     @builtins.property
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version to require via ``engines`` (inclusive).
+        '''(experimental) The maximum node version supported by this package. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any newer versions of node.
+        This requirement is enforced via the engines field.
+
+        You will normally not need to set this option.
+        Consider this option only if your package is known to not function with newer versions of node.
 
-        :default: - no max
+        :default: - no maximum version is enforced
 
         :stability: experimental
         '''
@@ -4624,9 +5528,19 @@ class NodePackageOptions:
 
     @builtins.property
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive).
+        '''(experimental) The minimum node version required by this package to function. Most projects should not use this option.
 
-        :default: - no "engines" specified
+        The value indicates that the package is incompatible with any older versions of node.
+        This requirement is enforced via the engines field.
+
+        You will normally not need to set this option, even if your package is incompatible with EOL versions of node.
+        Consider this option only if your package depends on a specific feature, that is not available in other LTS versions.
+        Setting this option has very high impact on the consumers of your package,
+        as package managers will actively prevent usage with node versions you have marked as incompatible.
+
+        To change the node version of your CI/CD workflows, use ``workflowNodeVersion``.
+
+        :default: - no minimum version is enforced
 
         :stability: experimental
         '''
@@ -4648,6 +5562,24 @@ class NodePackageOptions:
         result = self._values.get("npm_access")
         return typing.cast(typing.Optional["NpmAccess"], result)
 
+    @builtins.property
+    def npm_provenance(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Should provenance statements be generated when the package is published.
+
+        A supported package manager is required to publish a package with npm provenance statements and
+        you will need to use a supported CI/CD provider.
+
+        Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages,
+        which is using npm internally and supports provenance statements independently of the package manager used.
+
+        :default: - true for public packages, false otherwise
+
+        :see: https://docs.npmjs.com/generating-provenance-statements
+        :stability: experimental
+        '''
+        result = self._values.get("npm_provenance")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def npm_registry(self) -> typing.Optional[builtins.str]:
         '''(deprecated) The host name of the npm registry to publish to.
@@ -4678,12 +5610,23 @@ class NodePackageOptions:
     def npm_token_secret(self) -> typing.Optional[builtins.str]:
         '''(experimental) GitHub secret which contains the NPM token to use when publishing packages.
 
-        :default: "NPM_TOKEN"
+        :default: "NPM_TOKEN"
+
+        :stability: experimental
+        '''
+        result = self._values.get("npm_token_secret")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def npm_trusted_publishing(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work.
+
+        :default: - false
 
         :stability: experimental
         '''
-        result = self._values.get("npm_token_secret")
-        return typing.cast(typing.Optional[builtins.str], result)
+        result = self._values.get("npm_trusted_publishing")
+        return typing.cast(typing.Optional[builtins.bool], result)
 
     @builtins.property
     def package_manager(self) -> typing.Optional[NodePackageManager]:
@@ -4746,7 +5689,7 @@ class NodePackageOptions:
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
+        :default: "9"
 
         :stability: experimental
         '''
@@ -4851,8 +5794,13 @@ class NodeProject(
         *,
         default_release_branch: builtins.str,
         artifacts_directory: typing.Optional[builtins.str] = None,
+        audit_deps: typing.Optional[builtins.bool] = None,
+        audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+        biome: typing.Optional[builtins.bool] = None,
+        biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow: typing.Optional[builtins.bool] = None,
+        build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
         bundler_options: typing.Optional[typing.Union[BundlerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         check_licenses: typing.Optional[typing.Union[LicenseCheckerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4914,6 +5862,7 @@ class NodeProject(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -4926,9 +5875,11 @@ class NodeProject(
         max_node_version: typing.Optional[builtins.str] = None,
         min_node_version: typing.Optional[builtins.str] = None,
         npm_access: typing.Optional["NpmAccess"] = None,
+        npm_provenance: typing.Optional[builtins.bool] = None,
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4940,9 +5891,11 @@ class NodeProject(
         scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         stability: typing.Optional[builtins.str] = None,
         yarn_berry_options: typing.Optional[typing.Union["YarnBerryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        bump_package: typing.Optional[builtins.str] = None,
         jsii_release_version: typing.Optional[builtins.str] = None,
         major_version: typing.Optional[jsii.Number] = None,
         min_major_version: typing.Optional[jsii.Number] = None,
+        next_version_command: typing.Optional[builtins.str] = None,
         npm_dist_tag: typing.Optional[builtins.str] = None,
         post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         prerelease: typing.Optional[builtins.str] = None,
@@ -4950,12 +5903,14 @@ class NodeProject(
         publish_tasks: typing.Optional[builtins.bool] = None,
         releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
         release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+        release_environment: typing.Optional[builtins.str] = None,
         release_every_commit: typing.Optional[builtins.bool] = None,
         release_failure_issue: typing.Optional[builtins.bool] = None,
         release_failure_issue_label: typing.Optional[builtins.str] = None,
         release_schedule: typing.Optional[builtins.str] = None,
         release_tag_prefix: typing.Optional[builtins.str] = None,
         release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+        release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         release_workflow_name: typing.Optional[builtins.str] = None,
         release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -4978,13 +5933,18 @@ class NodeProject(
         '''
         :param default_release_branch: (experimental) The name of the main release branch. Default: "main"
         :param artifacts_directory: (experimental) A directory which will contain build artifacts. Default: "dist"
+        :param audit_deps: (experimental) Run security audit on dependencies. When enabled, creates an "audit" task that checks for known security vulnerabilities in dependencies. By default, runs during every build and checks for "high" severity vulnerabilities or above in all dependencies (including dev dependencies). Default: false
+        :param audit_deps_options: (experimental) Security audit options. Default: - default options
         :param auto_approve_upgrades: (experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued). Throw if set to true but ``autoApproveOptions`` are not defined. Default: - true
+        :param biome: (experimental) Setup Biome. Default: false
+        :param biome_options: (experimental) Biome options. Default: - default options
         :param build_workflow: (experimental) Define a GitHub workflow for building PRs. Default: - true if not a subproject
-        :param build_workflow_triggers: (experimental) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
+        :param build_workflow_options: (experimental) Options for PR build workflow.
+        :param build_workflow_triggers: (deprecated) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
         :param bundler_options: (experimental) Options for ``Bundler``.
         :param check_licenses: (experimental) Configure which licenses should be deemed acceptable for use by dependencies. This setting will cause the build to fail, if any prohibited or not allowed licenses ares encountered. Default: - no license checks are run during the build and all licenses will be accepted
-        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v3 A secret is required for private repos. Configured with ``@codeCovTokenSecret``. Default: false
-        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories. Default: - if this option is not specified, only public repositories are supported
+        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``. Default: false
+        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token. Default: - OIDC auth is used
         :param copyright_owner: (experimental) License copyright owner. Default: - defaults to the value of authorName or "" if ``authorName`` is undefined.
         :param copyright_period: (experimental) The copyright years to put in the LICENSE file. Default: - current year
         :param dependabot: (experimental) Use dependabot to handle dependency upgrades. Cannot be used in conjunction with ``depsUpgrade``. Default: false
@@ -4994,14 +5954,14 @@ class NodeProject(
         :param gitignore: (experimental) Additional entries to .gitignore.
         :param jest: (experimental) Setup jest unit tests. Default: true
         :param jest_options: (experimental) Jest options. Default: - default options
-        :param mutable_build: (experimental) Automatically update files modified during builds to pull-request branches. This means that any files synthesized by projen or e.g. test snapshots will always be up-to-date before a PR is merged. Implies that PR builds do not have anti-tamper checks. Default: true
+        :param mutable_build: (deprecated) Automatically update files modified during builds to pull-request branches. This means that any files synthesized by projen or e.g. test snapshots will always be up-to-date before a PR is merged. Implies that PR builds do not have anti-tamper checks. Default: true
         :param npmignore: (deprecated) Additional entries to .npmignore.
         :param npmignore_enabled: (experimental) Defines an .npmignore file. Normally this is only needed for libraries that are packaged as tarballs. Default: true
         :param npm_ignore_options: (experimental) Configuration options for .npmignore file.
         :param package: (experimental) Defines a ``package`` task that will produce an npm tarball under the artifacts directory (e.g. ``dist``). Default: true
         :param prettier: (experimental) Setup prettier. Default: false
         :param prettier_options: (experimental) Prettier options. Default: - default options
-        :param projen_dev_dependency: (experimental) Indicates of "projen" should be installed as a devDependency. Default: true
+        :param projen_dev_dependency: (experimental) Indicates of "projen" should be installed as a devDependency. Default: - true if not a subproject
         :param projenrc_js: (experimental) Generate (once) .projenrc.js (in JavaScript). Set to ``false`` in order to disable .projenrc.js generation. Default: - true if projenrcJson is false
         :param projenrc_js_options: (experimental) Options for .projenrc.js. Default: - default options
         :param projen_version: (experimental) Version of projen to install. Default: - Defaults to the latest version.
@@ -5011,8 +5971,8 @@ class NodeProject(
         :param release_to_npm: (experimental) Automatically release to npm when new versions are introduced. Default: false
         :param release_workflow: (deprecated) DEPRECATED: renamed to ``release``. Default: - true if not a subproject
         :param workflow_bootstrap_steps: (experimental) Workflow steps to use in order to bootstrap this repo. Default: "yarn install --frozen-lockfile && yarn projen"
-        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - GitHub Actions
-        :param workflow_node_version: (experimental) The node version to use in GitHub workflows. Default: - same as ``minNodeVersion``
+        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - default GitHub Actions user
+        :param workflow_node_version: (experimental) The node version used in GitHub Actions workflows. Always use this option if your GitHub Actions workflows require a specific to run. Default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
         :param workflow_package_cache: (experimental) Enable Node.js package cache in GitHub workflows. Default: false
         :param auto_approve_options: (experimental) Enable and configure the 'auto approve' workflow. Default: - auto approve is disabled
         :param auto_merge: (experimental) Enable automatic merging on GitHub. Has no effect if ``github.mergify`` is set to false. Default: true
@@ -5041,6 +6001,7 @@ class NodeProject(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -5050,26 +6011,30 @@ class NodeProject(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
+        :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
         :param scripts: (deprecated) npm scripts to include. If a script has the same name as a standard script, the standard script will be overwritten. Also adds the script as a task. Default: {}
         :param stability: (experimental) Package's Stability.
         :param yarn_berry_options: (experimental) Options for Yarn Berry. Default: - Yarn Berry v4 with all default options
+        :param bump_package: (experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string. This can be any compatible package version, including the deprecated ``standard-version@9``. Default: - A recent version of "commit-and-tag-version"
         :param jsii_release_version: (experimental) Version requirement of ``publib`` which is used to publish modules to npm. Default: "latest"
         :param major_version: (experimental) Major version to release from the default branch. If this is specified, we bump the latest version of this major version line. If not specified, we bump the global latest version. Default: - Major version is not enforced.
         :param min_major_version: (experimental) Minimal Major version to release. This can be useful to set to 1, as breaking changes before the 1.x major release are not incrementing the major version number. Can not be set together with ``majorVersion``. Default: - No minimum version is being enforced
+        :param next_version_command: (experimental) A shell command to control the next version to release. If present, this shell command will be run before the bump is executed, and it determines what version to release. It will be executed in the following environment: - Working directory: the project directory. - ``$VERSION``: the current version. Looks like ``1.2.3``. - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset. - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``. The command should print one of the following to ``stdout``: - Nothing: the next version number will be determined based on commit history. - ``x.y.z``: the next version number will be ``x.y.z``. - ``major|minor|patch``: the next version number will be the current version number with the indicated component bumped. This setting cannot be specified together with ``minMajorVersion``; the invoked script can be used to achieve the effects of ``minMajorVersion``. Default: - The next version will be determined based on the commit history and project settings.
         :param npm_dist_tag: (experimental) The npmDistTag to use when publishing from the default branch. To set the npm dist-tag for release branches, set the ``npmDistTag`` property for each branch. Default: "latest"
         :param post_build_steps: (experimental) Steps to execute after build as part of the release workflow. Default: []
         :param prerelease: (experimental) Bump versions from the default branch as pre-releases (e.g. "beta", "alpha", "pre"). Default: - normal semantic versions
@@ -5077,15 +6042,17 @@ class NodeProject(
         :param publish_tasks: (experimental) Define publishing tasks that can be executed manually as well as workflows. Normally, publishing only happens within automated workflows. Enable this in order to create a publishing task for each publishing activity. Default: false
         :param releasable_commits: (experimental) Find commits that should be considered releasable Used to decide if a release is required. Default: ReleasableCommits.everyCommit()
         :param release_branches: (experimental) Defines additional release branches. A workflow will be created for each release branch which will publish releases from commits in this branch. Each release branch *must* be assigned a major version number which is used to enforce that versions published from that branch always use that major version. If multiple branches are used, the ``majorVersion`` field must also be provided for the default branch. Default: - no additional branches are used for release. you can use ``addBranch()`` to add additional branches.
+        :param release_environment: (experimental) The GitHub Actions environment used for the release. This can be used to add an explicit approval step to the release or limit who can initiate a release through environment protection rules. When multiple artifacts are released, the environment can be overwritten on a per artifact basis. Default: - no environment used, unless set at the artifact level
         :param release_every_commit: (deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``. Default: true
         :param release_failure_issue: (experimental) Create a github issue on every failed publishing task. Default: false
         :param release_failure_issue_label: (experimental) The label to apply to issues indicating publish failures. Only applies if ``releaseFailureIssue`` is true. Default: "failed-release"
         :param release_schedule: (deprecated) CRON schedule to trigger new releases. Default: - no scheduled releases
         :param release_tag_prefix: (experimental) Automatically add the given prefix to release tags. Useful if you are releasing on multiple branches with overlapping version numbers. Note: this prefix is used to detect the latest tagged version when bumping, so if you change this on a project with an existing version history, you may need to manually tag your latest release with the new prefix. Default: "v"
         :param release_trigger: (experimental) The release trigger to use. Default: - Continuous releases (``ReleaseTrigger.continuous()``)
+        :param release_workflow_env: (experimental) Build environment variables for release workflows. Default: {}
         :param release_workflow_name: (experimental) The name of the default release workflow. Default: "release"
         :param release_workflow_setup_steps: (experimental) A set of workflow steps to execute in order to setup the workflow container.
-        :param versionrc_options: (experimental) Custom configuration used when creating changelog with standard-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
+        :param versionrc_options: (experimental) Custom configuration used when creating changelog with commit-and-tag-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
         :param workflow_container_image: (experimental) Container image to use for GitHub workflows. Default: - default image
         :param workflow_runs_on: (experimental) Github Runner selection labels. Default: ["ubuntu-latest"]
         :param workflow_runs_on_group: (experimental) Github Runner Group selection options.
@@ -5107,8 +6074,13 @@ class NodeProject(
         options = NodeProjectOptions(
             default_release_branch=default_release_branch,
             artifacts_directory=artifacts_directory,
+            audit_deps=audit_deps,
+            audit_deps_options=audit_deps_options,
             auto_approve_upgrades=auto_approve_upgrades,
+            biome=biome,
+            biome_options=biome_options,
             build_workflow=build_workflow,
+            build_workflow_options=build_workflow_options,
             build_workflow_triggers=build_workflow_triggers,
             bundler_options=bundler_options,
             check_licenses=check_licenses,
@@ -5170,6 +6142,7 @@ class NodeProject(
             bugs_email=bugs_email,
             bugs_url=bugs_url,
             bundled_deps=bundled_deps,
+            bun_version=bun_version,
             code_artifact_options=code_artifact_options,
             deps=deps,
             description=description,
@@ -5182,9 +6155,11 @@ class NodeProject(
             max_node_version=max_node_version,
             min_node_version=min_node_version,
             npm_access=npm_access,
+            npm_provenance=npm_provenance,
             npm_registry=npm_registry,
             npm_registry_url=npm_registry_url,
             npm_token_secret=npm_token_secret,
+            npm_trusted_publishing=npm_trusted_publishing,
             package_manager=package_manager,
             package_name=package_name,
             peer_dependency_options=peer_dependency_options,
@@ -5196,9 +6171,11 @@ class NodeProject(
             scripts=scripts,
             stability=stability,
             yarn_berry_options=yarn_berry_options,
+            bump_package=bump_package,
             jsii_release_version=jsii_release_version,
             major_version=major_version,
             min_major_version=min_major_version,
+            next_version_command=next_version_command,
             npm_dist_tag=npm_dist_tag,
             post_build_steps=post_build_steps,
             prerelease=prerelease,
@@ -5206,12 +6183,14 @@ class NodeProject(
             publish_tasks=publish_tasks,
             releasable_commits=releasable_commits,
             release_branches=release_branches,
+            release_environment=release_environment,
             release_every_commit=release_every_commit,
             release_failure_issue=release_failure_issue,
             release_failure_issue_label=release_failure_issue_label,
             release_schedule=release_schedule,
             release_tag_prefix=release_tag_prefix,
             release_trigger=release_trigger,
+            release_workflow_env=release_workflow_env,
             release_workflow_name=release_workflow_name,
             release_workflow_setup_steps=release_workflow_setup_steps,
             versionrc_options=versionrc_options,
@@ -5592,6 +6571,14 @@ class NodeProject(
         '''
         return typing.cast(typing.Optional[_AutoMerge_f73f9be0], jsii.get(self, "autoMerge"))
 
+    @builtins.property
+    @jsii.member(jsii_name="biome")
+    def biome(self) -> typing.Optional[Biome]:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(typing.Optional[Biome], jsii.get(self, "biome"))
+
     @builtins.property
     @jsii.member(jsii_name="buildWorkflow")
     def build_workflow(self) -> typing.Optional[_BuildWorkflow_bdd5e6cc]:
@@ -5624,7 +6611,9 @@ class NodeProject(
     @builtins.property
     @jsii.member(jsii_name="maxNodeVersion")
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Maximum node version required by this package.
+        '''(experimental) Maximum node version supported by this package.
+
+        The value indicates the package is incompatible with newer versions.
 
         :stability: experimental
         '''
@@ -5633,7 +6622,9 @@ class NodeProject(
     @builtins.property
     @jsii.member(jsii_name="minNodeVersion")
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version required by this package.
+        '''(experimental) The minimum node version required by this package to function.
+
+        This value indicates the package is incompatible with older versions.
 
         :stability: experimental
         '''
@@ -5744,6 +6735,7 @@ class NodeProject(
         "bugs_email": "bugsEmail",
         "bugs_url": "bugsUrl",
         "bundled_deps": "bundledDeps",
+        "bun_version": "bunVersion",
         "code_artifact_options": "codeArtifactOptions",
         "deps": "deps",
         "description": "description",
@@ -5756,9 +6748,11 @@ class NodeProject(
         "max_node_version": "maxNodeVersion",
         "min_node_version": "minNodeVersion",
         "npm_access": "npmAccess",
+        "npm_provenance": "npmProvenance",
         "npm_registry": "npmRegistry",
         "npm_registry_url": "npmRegistryUrl",
         "npm_token_secret": "npmTokenSecret",
+        "npm_trusted_publishing": "npmTrustedPublishing",
         "package_manager": "packageManager",
         "package_name": "packageName",
         "peer_dependency_options": "peerDependencyOptions",
@@ -5770,9 +6764,11 @@ class NodeProject(
         "scripts": "scripts",
         "stability": "stability",
         "yarn_berry_options": "yarnBerryOptions",
+        "bump_package": "bumpPackage",
         "jsii_release_version": "jsiiReleaseVersion",
         "major_version": "majorVersion",
         "min_major_version": "minMajorVersion",
+        "next_version_command": "nextVersionCommand",
         "npm_dist_tag": "npmDistTag",
         "post_build_steps": "postBuildSteps",
         "prerelease": "prerelease",
@@ -5780,12 +6776,14 @@ class NodeProject(
         "publish_tasks": "publishTasks",
         "releasable_commits": "releasableCommits",
         "release_branches": "releaseBranches",
+        "release_environment": "releaseEnvironment",
         "release_every_commit": "releaseEveryCommit",
         "release_failure_issue": "releaseFailureIssue",
         "release_failure_issue_label": "releaseFailureIssueLabel",
         "release_schedule": "releaseSchedule",
         "release_tag_prefix": "releaseTagPrefix",
         "release_trigger": "releaseTrigger",
+        "release_workflow_env": "releaseWorkflowEnv",
         "release_workflow_name": "releaseWorkflowName",
         "release_workflow_setup_steps": "releaseWorkflowSetupSteps",
         "versionrc_options": "versionrcOptions",
@@ -5794,8 +6792,13 @@ class NodeProject(
         "workflow_runs_on_group": "workflowRunsOnGroup",
         "default_release_branch": "defaultReleaseBranch",
         "artifacts_directory": "artifactsDirectory",
+        "audit_deps": "auditDeps",
+        "audit_deps_options": "auditDepsOptions",
         "auto_approve_upgrades": "autoApproveUpgrades",
+        "biome": "biome",
+        "biome_options": "biomeOptions",
         "build_workflow": "buildWorkflow",
+        "build_workflow_options": "buildWorkflowOptions",
         "build_workflow_triggers": "buildWorkflowTriggers",
         "bundler_options": "bundlerOptions",
         "check_licenses": "checkLicenses",
@@ -5879,6 +6882,7 @@ class NodeProjectOptions(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -5891,9 +6895,11 @@ class NodeProjectOptions(
         max_node_version: typing.Optional[builtins.str] = None,
         min_node_version: typing.Optional[builtins.str] = None,
         npm_access: typing.Optional["NpmAccess"] = None,
+        npm_provenance: typing.Optional[builtins.bool] = None,
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5905,9 +6911,11 @@ class NodeProjectOptions(
         scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         stability: typing.Optional[builtins.str] = None,
         yarn_berry_options: typing.Optional[typing.Union["YarnBerryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        bump_package: typing.Optional[builtins.str] = None,
         jsii_release_version: typing.Optional[builtins.str] = None,
         major_version: typing.Optional[jsii.Number] = None,
         min_major_version: typing.Optional[jsii.Number] = None,
+        next_version_command: typing.Optional[builtins.str] = None,
         npm_dist_tag: typing.Optional[builtins.str] = None,
         post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         prerelease: typing.Optional[builtins.str] = None,
@@ -5915,12 +6923,14 @@ class NodeProjectOptions(
         publish_tasks: typing.Optional[builtins.bool] = None,
         releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
         release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+        release_environment: typing.Optional[builtins.str] = None,
         release_every_commit: typing.Optional[builtins.bool] = None,
         release_failure_issue: typing.Optional[builtins.bool] = None,
         release_failure_issue_label: typing.Optional[builtins.str] = None,
         release_schedule: typing.Optional[builtins.str] = None,
         release_tag_prefix: typing.Optional[builtins.str] = None,
         release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+        release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         release_workflow_name: typing.Optional[builtins.str] = None,
         release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -5929,8 +6939,13 @@ class NodeProjectOptions(
         workflow_runs_on_group: typing.Optional[typing.Union[_GroupRunnerOptions_148c59c1, typing.Dict[builtins.str, typing.Any]]] = None,
         default_release_branch: builtins.str,
         artifacts_directory: typing.Optional[builtins.str] = None,
+        audit_deps: typing.Optional[builtins.bool] = None,
+        audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+        biome: typing.Optional[builtins.bool] = None,
+        biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow: typing.Optional[builtins.bool] = None,
+        build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
         bundler_options: typing.Optional[typing.Union[BundlerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         check_licenses: typing.Optional[typing.Union[LicenseCheckerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6006,6 +7021,7 @@ class NodeProjectOptions(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -6015,26 +7031,30 @@ class NodeProjectOptions(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
+        :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
         :param scripts: (deprecated) npm scripts to include. If a script has the same name as a standard script, the standard script will be overwritten. Also adds the script as a task. Default: {}
         :param stability: (experimental) Package's Stability.
         :param yarn_berry_options: (experimental) Options for Yarn Berry. Default: - Yarn Berry v4 with all default options
+        :param bump_package: (experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string. This can be any compatible package version, including the deprecated ``standard-version@9``. Default: - A recent version of "commit-and-tag-version"
         :param jsii_release_version: (experimental) Version requirement of ``publib`` which is used to publish modules to npm. Default: "latest"
         :param major_version: (experimental) Major version to release from the default branch. If this is specified, we bump the latest version of this major version line. If not specified, we bump the global latest version. Default: - Major version is not enforced.
         :param min_major_version: (experimental) Minimal Major version to release. This can be useful to set to 1, as breaking changes before the 1.x major release are not incrementing the major version number. Can not be set together with ``majorVersion``. Default: - No minimum version is being enforced
+        :param next_version_command: (experimental) A shell command to control the next version to release. If present, this shell command will be run before the bump is executed, and it determines what version to release. It will be executed in the following environment: - Working directory: the project directory. - ``$VERSION``: the current version. Looks like ``1.2.3``. - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset. - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``. The command should print one of the following to ``stdout``: - Nothing: the next version number will be determined based on commit history. - ``x.y.z``: the next version number will be ``x.y.z``. - ``major|minor|patch``: the next version number will be the current version number with the indicated component bumped. This setting cannot be specified together with ``minMajorVersion``; the invoked script can be used to achieve the effects of ``minMajorVersion``. Default: - The next version will be determined based on the commit history and project settings.
         :param npm_dist_tag: (experimental) The npmDistTag to use when publishing from the default branch. To set the npm dist-tag for release branches, set the ``npmDistTag`` property for each branch. Default: "latest"
         :param post_build_steps: (experimental) Steps to execute after build as part of the release workflow. Default: []
         :param prerelease: (experimental) Bump versions from the default branch as pre-releases (e.g. "beta", "alpha", "pre"). Default: - normal semantic versions
@@ -6042,27 +7062,34 @@ class NodeProjectOptions(
         :param publish_tasks: (experimental) Define publishing tasks that can be executed manually as well as workflows. Normally, publishing only happens within automated workflows. Enable this in order to create a publishing task for each publishing activity. Default: false
         :param releasable_commits: (experimental) Find commits that should be considered releasable Used to decide if a release is required. Default: ReleasableCommits.everyCommit()
         :param release_branches: (experimental) Defines additional release branches. A workflow will be created for each release branch which will publish releases from commits in this branch. Each release branch *must* be assigned a major version number which is used to enforce that versions published from that branch always use that major version. If multiple branches are used, the ``majorVersion`` field must also be provided for the default branch. Default: - no additional branches are used for release. you can use ``addBranch()`` to add additional branches.
+        :param release_environment: (experimental) The GitHub Actions environment used for the release. This can be used to add an explicit approval step to the release or limit who can initiate a release through environment protection rules. When multiple artifacts are released, the environment can be overwritten on a per artifact basis. Default: - no environment used, unless set at the artifact level
         :param release_every_commit: (deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``. Default: true
         :param release_failure_issue: (experimental) Create a github issue on every failed publishing task. Default: false
         :param release_failure_issue_label: (experimental) The label to apply to issues indicating publish failures. Only applies if ``releaseFailureIssue`` is true. Default: "failed-release"
         :param release_schedule: (deprecated) CRON schedule to trigger new releases. Default: - no scheduled releases
         :param release_tag_prefix: (experimental) Automatically add the given prefix to release tags. Useful if you are releasing on multiple branches with overlapping version numbers. Note: this prefix is used to detect the latest tagged version when bumping, so if you change this on a project with an existing version history, you may need to manually tag your latest release with the new prefix. Default: "v"
         :param release_trigger: (experimental) The release trigger to use. Default: - Continuous releases (``ReleaseTrigger.continuous()``)
+        :param release_workflow_env: (experimental) Build environment variables for release workflows. Default: {}
         :param release_workflow_name: (experimental) The name of the default release workflow. Default: "release"
         :param release_workflow_setup_steps: (experimental) A set of workflow steps to execute in order to setup the workflow container.
-        :param versionrc_options: (experimental) Custom configuration used when creating changelog with standard-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
+        :param versionrc_options: (experimental) Custom configuration used when creating changelog with commit-and-tag-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
         :param workflow_container_image: (experimental) Container image to use for GitHub workflows. Default: - default image
         :param workflow_runs_on: (experimental) Github Runner selection labels. Default: ["ubuntu-latest"]
         :param workflow_runs_on_group: (experimental) Github Runner Group selection options.
         :param default_release_branch: (experimental) The name of the main release branch. Default: "main"
         :param artifacts_directory: (experimental) A directory which will contain build artifacts. Default: "dist"
+        :param audit_deps: (experimental) Run security audit on dependencies. When enabled, creates an "audit" task that checks for known security vulnerabilities in dependencies. By default, runs during every build and checks for "high" severity vulnerabilities or above in all dependencies (including dev dependencies). Default: false
+        :param audit_deps_options: (experimental) Security audit options. Default: - default options
         :param auto_approve_upgrades: (experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued). Throw if set to true but ``autoApproveOptions`` are not defined. Default: - true
+        :param biome: (experimental) Setup Biome. Default: false
+        :param biome_options: (experimental) Biome options. Default: - default options
         :param build_workflow: (experimental) Define a GitHub workflow for building PRs. Default: - true if not a subproject
-        :param build_workflow_triggers: (experimental) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
+        :param build_workflow_options: (experimental) Options for PR build workflow.
+        :param build_workflow_triggers: (deprecated) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
         :param bundler_options: (experimental) Options for ``Bundler``.
         :param check_licenses: (experimental) Configure which licenses should be deemed acceptable for use by dependencies. This setting will cause the build to fail, if any prohibited or not allowed licenses ares encountered. Default: - no license checks are run during the build and all licenses will be accepted
-        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v3 A secret is required for private repos. Configured with ``@codeCovTokenSecret``. Default: false
-        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories. Default: - if this option is not specified, only public repositories are supported
+        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``. Default: false
+        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token. Default: - OIDC auth is used
         :param copyright_owner: (experimental) License copyright owner. Default: - defaults to the value of authorName or "" if ``authorName`` is undefined.
         :param copyright_period: (experimental) The copyright years to put in the LICENSE file. Default: - current year
         :param dependabot: (experimental) Use dependabot to handle dependency upgrades. Cannot be used in conjunction with ``depsUpgrade``. Default: false
@@ -6072,14 +7099,14 @@ class NodeProjectOptions(
         :param gitignore: (experimental) Additional entries to .gitignore.
         :param jest: (experimental) Setup jest unit tests. Default: true
         :param jest_options: (experimental) Jest options. Default: - default options
-        :param mutable_build: (experimental) Automatically update files modified during builds to pull-request branches. This means that any files synthesized by projen or e.g. test snapshots will always be up-to-date before a PR is merged. Implies that PR builds do not have anti-tamper checks. Default: true
+        :param mutable_build: (deprecated) Automatically update files modified during builds to pull-request branches. This means that any files synthesized by projen or e.g. test snapshots will always be up-to-date before a PR is merged. Implies that PR builds do not have anti-tamper checks. Default: true
         :param npmignore: (deprecated) Additional entries to .npmignore.
         :param npmignore_enabled: (experimental) Defines an .npmignore file. Normally this is only needed for libraries that are packaged as tarballs. Default: true
         :param npm_ignore_options: (experimental) Configuration options for .npmignore file.
         :param package: (experimental) Defines a ``package`` task that will produce an npm tarball under the artifacts directory (e.g. ``dist``). Default: true
         :param prettier: (experimental) Setup prettier. Default: false
         :param prettier_options: (experimental) Prettier options. Default: - default options
-        :param projen_dev_dependency: (experimental) Indicates of "projen" should be installed as a devDependency. Default: true
+        :param projen_dev_dependency: (experimental) Indicates of "projen" should be installed as a devDependency. Default: - true if not a subproject
         :param projenrc_js: (experimental) Generate (once) .projenrc.js (in JavaScript). Set to ``false`` in order to disable .projenrc.js generation. Default: - true if projenrcJson is false
         :param projenrc_js_options: (experimental) Options for .projenrc.js. Default: - default options
         :param projen_version: (experimental) Version of projen to install. Default: - Defaults to the latest version.
@@ -6089,8 +7116,8 @@ class NodeProjectOptions(
         :param release_to_npm: (experimental) Automatically release to npm when new versions are introduced. Default: false
         :param release_workflow: (deprecated) DEPRECATED: renamed to ``release``. Default: - true if not a subproject
         :param workflow_bootstrap_steps: (experimental) Workflow steps to use in order to bootstrap this repo. Default: "yarn install --frozen-lockfile && yarn projen"
-        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - GitHub Actions
-        :param workflow_node_version: (experimental) The node version to use in GitHub workflows. Default: - same as ``minNodeVersion``
+        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - default GitHub Actions user
+        :param workflow_node_version: (experimental) The node version used in GitHub Actions workflows. Always use this option if your GitHub Actions workflows require a specific to run. Default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
         :param workflow_package_cache: (experimental) Enable Node.js package cache in GitHub workflows. Default: false
 
         :stability: experimental
@@ -6125,6 +7152,12 @@ class NodeProjectOptions(
             yarn_berry_options = YarnBerryOptions(**yarn_berry_options)
         if isinstance(workflow_runs_on_group, dict):
             workflow_runs_on_group = _GroupRunnerOptions_148c59c1(**workflow_runs_on_group)
+        if isinstance(audit_deps_options, dict):
+            audit_deps_options = AuditOptions(**audit_deps_options)
+        if isinstance(biome_options, dict):
+            biome_options = BiomeOptions(**biome_options)
+        if isinstance(build_workflow_options, dict):
+            build_workflow_options = BuildWorkflowOptions(**build_workflow_options)
         if isinstance(build_workflow_triggers, dict):
             build_workflow_triggers = _Triggers_e9ae7617(**build_workflow_triggers)
         if isinstance(bundler_options, dict):
@@ -6186,6 +7219,7 @@ class NodeProjectOptions(
             check_type(argname="argument bugs_email", value=bugs_email, expected_type=type_hints["bugs_email"])
             check_type(argname="argument bugs_url", value=bugs_url, expected_type=type_hints["bugs_url"])
             check_type(argname="argument bundled_deps", value=bundled_deps, expected_type=type_hints["bundled_deps"])
+            check_type(argname="argument bun_version", value=bun_version, expected_type=type_hints["bun_version"])
             check_type(argname="argument code_artifact_options", value=code_artifact_options, expected_type=type_hints["code_artifact_options"])
             check_type(argname="argument deps", value=deps, expected_type=type_hints["deps"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -6198,9 +7232,11 @@ class NodeProjectOptions(
             check_type(argname="argument max_node_version", value=max_node_version, expected_type=type_hints["max_node_version"])
             check_type(argname="argument min_node_version", value=min_node_version, expected_type=type_hints["min_node_version"])
             check_type(argname="argument npm_access", value=npm_access, expected_type=type_hints["npm_access"])
+            check_type(argname="argument npm_provenance", value=npm_provenance, expected_type=type_hints["npm_provenance"])
             check_type(argname="argument npm_registry", value=npm_registry, expected_type=type_hints["npm_registry"])
             check_type(argname="argument npm_registry_url", value=npm_registry_url, expected_type=type_hints["npm_registry_url"])
             check_type(argname="argument npm_token_secret", value=npm_token_secret, expected_type=type_hints["npm_token_secret"])
+            check_type(argname="argument npm_trusted_publishing", value=npm_trusted_publishing, expected_type=type_hints["npm_trusted_publishing"])
             check_type(argname="argument package_manager", value=package_manager, expected_type=type_hints["package_manager"])
             check_type(argname="argument package_name", value=package_name, expected_type=type_hints["package_name"])
             check_type(argname="argument peer_dependency_options", value=peer_dependency_options, expected_type=type_hints["peer_dependency_options"])
@@ -6212,9 +7248,11 @@ class NodeProjectOptions(
             check_type(argname="argument scripts", value=scripts, expected_type=type_hints["scripts"])
             check_type(argname="argument stability", value=stability, expected_type=type_hints["stability"])
             check_type(argname="argument yarn_berry_options", value=yarn_berry_options, expected_type=type_hints["yarn_berry_options"])
+            check_type(argname="argument bump_package", value=bump_package, expected_type=type_hints["bump_package"])
             check_type(argname="argument jsii_release_version", value=jsii_release_version, expected_type=type_hints["jsii_release_version"])
             check_type(argname="argument major_version", value=major_version, expected_type=type_hints["major_version"])
             check_type(argname="argument min_major_version", value=min_major_version, expected_type=type_hints["min_major_version"])
+            check_type(argname="argument next_version_command", value=next_version_command, expected_type=type_hints["next_version_command"])
             check_type(argname="argument npm_dist_tag", value=npm_dist_tag, expected_type=type_hints["npm_dist_tag"])
             check_type(argname="argument post_build_steps", value=post_build_steps, expected_type=type_hints["post_build_steps"])
             check_type(argname="argument prerelease", value=prerelease, expected_type=type_hints["prerelease"])
@@ -6222,12 +7260,14 @@ class NodeProjectOptions(
             check_type(argname="argument publish_tasks", value=publish_tasks, expected_type=type_hints["publish_tasks"])
             check_type(argname="argument releasable_commits", value=releasable_commits, expected_type=type_hints["releasable_commits"])
             check_type(argname="argument release_branches", value=release_branches, expected_type=type_hints["release_branches"])
+            check_type(argname="argument release_environment", value=release_environment, expected_type=type_hints["release_environment"])
             check_type(argname="argument release_every_commit", value=release_every_commit, expected_type=type_hints["release_every_commit"])
             check_type(argname="argument release_failure_issue", value=release_failure_issue, expected_type=type_hints["release_failure_issue"])
             check_type(argname="argument release_failure_issue_label", value=release_failure_issue_label, expected_type=type_hints["release_failure_issue_label"])
             check_type(argname="argument release_schedule", value=release_schedule, expected_type=type_hints["release_schedule"])
             check_type(argname="argument release_tag_prefix", value=release_tag_prefix, expected_type=type_hints["release_tag_prefix"])
             check_type(argname="argument release_trigger", value=release_trigger, expected_type=type_hints["release_trigger"])
+            check_type(argname="argument release_workflow_env", value=release_workflow_env, expected_type=type_hints["release_workflow_env"])
             check_type(argname="argument release_workflow_name", value=release_workflow_name, expected_type=type_hints["release_workflow_name"])
             check_type(argname="argument release_workflow_setup_steps", value=release_workflow_setup_steps, expected_type=type_hints["release_workflow_setup_steps"])
             check_type(argname="argument versionrc_options", value=versionrc_options, expected_type=type_hints["versionrc_options"])
@@ -6236,8 +7276,13 @@ class NodeProjectOptions(
             check_type(argname="argument workflow_runs_on_group", value=workflow_runs_on_group, expected_type=type_hints["workflow_runs_on_group"])
             check_type(argname="argument default_release_branch", value=default_release_branch, expected_type=type_hints["default_release_branch"])
             check_type(argname="argument artifacts_directory", value=artifacts_directory, expected_type=type_hints["artifacts_directory"])
+            check_type(argname="argument audit_deps", value=audit_deps, expected_type=type_hints["audit_deps"])
+            check_type(argname="argument audit_deps_options", value=audit_deps_options, expected_type=type_hints["audit_deps_options"])
             check_type(argname="argument auto_approve_upgrades", value=auto_approve_upgrades, expected_type=type_hints["auto_approve_upgrades"])
+            check_type(argname="argument biome", value=biome, expected_type=type_hints["biome"])
+            check_type(argname="argument biome_options", value=biome_options, expected_type=type_hints["biome_options"])
             check_type(argname="argument build_workflow", value=build_workflow, expected_type=type_hints["build_workflow"])
+            check_type(argname="argument build_workflow_options", value=build_workflow_options, expected_type=type_hints["build_workflow_options"])
             check_type(argname="argument build_workflow_triggers", value=build_workflow_triggers, expected_type=type_hints["build_workflow_triggers"])
             check_type(argname="argument bundler_options", value=bundler_options, expected_type=type_hints["bundler_options"])
             check_type(argname="argument check_licenses", value=check_licenses, expected_type=type_hints["check_licenses"])
@@ -6352,6 +7397,8 @@ class NodeProjectOptions(
             self._values["bugs_url"] = bugs_url
         if bundled_deps is not None:
             self._values["bundled_deps"] = bundled_deps
+        if bun_version is not None:
+            self._values["bun_version"] = bun_version
         if code_artifact_options is not None:
             self._values["code_artifact_options"] = code_artifact_options
         if deps is not None:
@@ -6376,12 +7423,16 @@ class NodeProjectOptions(
             self._values["min_node_version"] = min_node_version
         if npm_access is not None:
             self._values["npm_access"] = npm_access
+        if npm_provenance is not None:
+            self._values["npm_provenance"] = npm_provenance
         if npm_registry is not None:
             self._values["npm_registry"] = npm_registry
         if npm_registry_url is not None:
             self._values["npm_registry_url"] = npm_registry_url
         if npm_token_secret is not None:
             self._values["npm_token_secret"] = npm_token_secret
+        if npm_trusted_publishing is not None:
+            self._values["npm_trusted_publishing"] = npm_trusted_publishing
         if package_manager is not None:
             self._values["package_manager"] = package_manager
         if package_name is not None:
@@ -6404,12 +7455,16 @@ class NodeProjectOptions(
             self._values["stability"] = stability
         if yarn_berry_options is not None:
             self._values["yarn_berry_options"] = yarn_berry_options
+        if bump_package is not None:
+            self._values["bump_package"] = bump_package
         if jsii_release_version is not None:
             self._values["jsii_release_version"] = jsii_release_version
         if major_version is not None:
             self._values["major_version"] = major_version
         if min_major_version is not None:
             self._values["min_major_version"] = min_major_version
+        if next_version_command is not None:
+            self._values["next_version_command"] = next_version_command
         if npm_dist_tag is not None:
             self._values["npm_dist_tag"] = npm_dist_tag
         if post_build_steps is not None:
@@ -6424,6 +7479,8 @@ class NodeProjectOptions(
             self._values["releasable_commits"] = releasable_commits
         if release_branches is not None:
             self._values["release_branches"] = release_branches
+        if release_environment is not None:
+            self._values["release_environment"] = release_environment
         if release_every_commit is not None:
             self._values["release_every_commit"] = release_every_commit
         if release_failure_issue is not None:
@@ -6436,6 +7493,8 @@ class NodeProjectOptions(
             self._values["release_tag_prefix"] = release_tag_prefix
         if release_trigger is not None:
             self._values["release_trigger"] = release_trigger
+        if release_workflow_env is not None:
+            self._values["release_workflow_env"] = release_workflow_env
         if release_workflow_name is not None:
             self._values["release_workflow_name"] = release_workflow_name
         if release_workflow_setup_steps is not None:
@@ -6450,10 +7509,20 @@ class NodeProjectOptions(
             self._values["workflow_runs_on_group"] = workflow_runs_on_group
         if artifacts_directory is not None:
             self._values["artifacts_directory"] = artifacts_directory
+        if audit_deps is not None:
+            self._values["audit_deps"] = audit_deps
+        if audit_deps_options is not None:
+            self._values["audit_deps_options"] = audit_deps_options
         if auto_approve_upgrades is not None:
             self._values["auto_approve_upgrades"] = auto_approve_upgrades
+        if biome is not None:
+            self._values["biome"] = biome
+        if biome_options is not None:
+            self._values["biome_options"] = biome_options
         if build_workflow is not None:
             self._values["build_workflow"] = build_workflow
+        if build_workflow_options is not None:
+            self._values["build_workflow_options"] = build_workflow_options
         if build_workflow_triggers is not None:
             self._values["build_workflow_triggers"] = build_workflow_triggers
         if bundler_options is not None:
@@ -6987,6 +8056,17 @@ class NodeProjectOptions(
         result = self._values.get("bundled_deps")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :default: "latest"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bun_version")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
         '''(experimental) Options for npm packages using AWS CodeArtifact.
@@ -7121,9 +8201,15 @@ class NodeProjectOptions(
 
     @builtins.property
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version to require via ``engines`` (inclusive).
+        '''(experimental) The maximum node version supported by this package. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any newer versions of node.
+        This requirement is enforced via the engines field.
 
-        :default: - no max
+        You will normally not need to set this option.
+        Consider this option only if your package is known to not function with newer versions of node.
+
+        :default: - no maximum version is enforced
 
         :stability: experimental
         '''
@@ -7132,9 +8218,19 @@ class NodeProjectOptions(
 
     @builtins.property
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive).
+        '''(experimental) The minimum node version required by this package to function. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any older versions of node.
+        This requirement is enforced via the engines field.
+
+        You will normally not need to set this option, even if your package is incompatible with EOL versions of node.
+        Consider this option only if your package depends on a specific feature, that is not available in other LTS versions.
+        Setting this option has very high impact on the consumers of your package,
+        as package managers will actively prevent usage with node versions you have marked as incompatible.
+
+        To change the node version of your CI/CD workflows, use ``workflowNodeVersion``.
 
-        :default: - no "engines" specified
+        :default: - no minimum version is enforced
 
         :stability: experimental
         '''
@@ -7156,6 +8252,24 @@ class NodeProjectOptions(
         result = self._values.get("npm_access")
         return typing.cast(typing.Optional["NpmAccess"], result)
 
+    @builtins.property
+    def npm_provenance(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Should provenance statements be generated when the package is published.
+
+        A supported package manager is required to publish a package with npm provenance statements and
+        you will need to use a supported CI/CD provider.
+
+        Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages,
+        which is using npm internally and supports provenance statements independently of the package manager used.
+
+        :default: - true for public packages, false otherwise
+
+        :see: https://docs.npmjs.com/generating-provenance-statements
+        :stability: experimental
+        '''
+        result = self._values.get("npm_provenance")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def npm_registry(self) -> typing.Optional[builtins.str]:
         '''(deprecated) The host name of the npm registry to publish to.
@@ -7193,6 +8307,17 @@ class NodeProjectOptions(
         result = self._values.get("npm_token_secret")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def npm_trusted_publishing(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work.
+
+        :default: - false
+
+        :stability: experimental
+        '''
+        result = self._values.get("npm_trusted_publishing")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def package_manager(self) -> typing.Optional[NodePackageManager]:
         '''(experimental) The Node Package Manager used to execute scripts.
@@ -7254,7 +8379,7 @@ class NodeProjectOptions(
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
+        :default: "9"
 
         :stability: experimental
         '''
@@ -7331,6 +8456,19 @@ class NodeProjectOptions(
         result = self._values.get("yarn_berry_options")
         return typing.cast(typing.Optional["YarnBerryOptions"], result)
 
+    @builtins.property
+    def bump_package(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string.
+
+        This can be any compatible package version, including the deprecated ``standard-version@9``.
+
+        :default: - A recent version of "commit-and-tag-version"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bump_package")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def jsii_release_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) Version requirement of ``publib`` which is used to publish modules to npm.
@@ -7372,6 +8510,36 @@ class NodeProjectOptions(
         result = self._values.get("min_major_version")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def next_version_command(self) -> typing.Optional[builtins.str]:
+        '''(experimental) A shell command to control the next version to release.
+
+        If present, this shell command will be run before the bump is executed, and
+        it determines what version to release. It will be executed in the following
+        environment:
+
+        - Working directory: the project directory.
+        - ``$VERSION``: the current version. Looks like ``1.2.3``.
+        - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset.
+        - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``.
+
+        The command should print one of the following to ``stdout``:
+
+        - Nothing: the next version number will be determined based on commit history.
+        - ``x.y.z``: the next version number will be ``x.y.z``.
+        - ``major|minor|patch``: the next version number will be the current version number
+          with the indicated component bumped.
+
+        This setting cannot be specified together with ``minMajorVersion``; the invoked
+        script can be used to achieve the effects of ``minMajorVersion``.
+
+        :default: - The next version will be determined based on the commit history and project settings.
+
+        :stability: experimental
+        '''
+        result = self._values.get("next_version_command")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def npm_dist_tag(self) -> typing.Optional[builtins.str]:
         '''(experimental) The npmDistTag to use when publishing from the default branch.
@@ -7467,6 +8635,23 @@ class NodeProjectOptions(
         result = self._values.get("release_branches")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, _BranchOptions_13663d08]], result)
 
+    @builtins.property
+    def release_environment(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The GitHub Actions environment used for the release.
+
+        This can be used to add an explicit approval step to the release
+        or limit who can initiate a release through environment protection rules.
+
+        When multiple artifacts are released, the environment can be overwritten
+        on a per artifact basis.
+
+        :default: - no environment used, unless set at the artifact level
+
+        :stability: experimental
+        '''
+        result = self._values.get("release_environment")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def release_every_commit(self) -> typing.Optional[builtins.bool]:
         '''(deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``.
@@ -7544,6 +8729,19 @@ class NodeProjectOptions(
         result = self._values.get("release_trigger")
         return typing.cast(typing.Optional[_ReleaseTrigger_e4dc221f], result)
 
+    @builtins.property
+    def release_workflow_env(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables for release workflows.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("release_workflow_env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def release_workflow_name(self) -> typing.Optional[builtins.str]:
         '''(experimental) The name of the default release workflow.
@@ -7570,7 +8768,7 @@ class NodeProjectOptions(
     def versionrc_options(
         self,
     ) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
-        '''(experimental) Custom configuration used when creating changelog with standard-version package.
+        '''(experimental) Custom configuration used when creating changelog with commit-and-tag-version package.
 
         Given values either append to default configuration or overwrite values in it.
 
@@ -7639,6 +8837,32 @@ class NodeProjectOptions(
         result = self._values.get("artifacts_directory")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def audit_deps(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Run security audit on dependencies.
+
+        When enabled, creates an "audit" task that checks for known security vulnerabilities
+        in dependencies. By default, runs during every build and checks for "high" severity
+        vulnerabilities or above in all dependencies (including dev dependencies).
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("audit_deps")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def audit_deps_options(self) -> typing.Optional[AuditOptions]:
+        '''(experimental) Security audit options.
+
+        :default: - default options
+
+        :stability: experimental
+        '''
+        result = self._values.get("audit_deps_options")
+        return typing.cast(typing.Optional[AuditOptions], result)
+
     @builtins.property
     def auto_approve_upgrades(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued).
@@ -7652,6 +8876,28 @@ class NodeProjectOptions(
         result = self._values.get("auto_approve_upgrades")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def biome(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Setup Biome.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def biome_options(self) -> typing.Optional[BiomeOptions]:
+        '''(experimental) Biome options.
+
+        :default: - default options
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome_options")
+        return typing.cast(typing.Optional[BiomeOptions], result)
+
     @builtins.property
     def build_workflow(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Define a GitHub workflow for building PRs.
@@ -7663,13 +8909,24 @@ class NodeProjectOptions(
         result = self._values.get("build_workflow")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def build_workflow_options(self) -> typing.Optional[BuildWorkflowOptions]:
+        '''(experimental) Options for PR build workflow.
+
+        :stability: experimental
+        '''
+        result = self._values.get("build_workflow_options")
+        return typing.cast(typing.Optional[BuildWorkflowOptions], result)
+
     @builtins.property
     def build_workflow_triggers(self) -> typing.Optional[_Triggers_e9ae7617]:
-        '''(experimental) Build workflow triggers.
+        '''(deprecated) Build workflow triggers.
 
         :default: "{ pullRequest: {}, workflowDispatch: {} }"
 
-        :stability: experimental
+        :deprecated: - Use ``buildWorkflowOptions.workflowTriggers``
+
+        :stability: deprecated
         '''
         result = self._values.get("build_workflow_triggers")
         return typing.cast(typing.Optional[_Triggers_e9ae7617], result)
@@ -7698,7 +8955,7 @@ class NodeProjectOptions(
 
     @builtins.property
     def code_cov(self) -> typing.Optional[builtins.bool]:
-        '''(experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v3 A secret is required for private repos. Configured with ``@codeCovTokenSecret``.
+        '''(experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``.
 
         :default: false
 
@@ -7709,9 +8966,9 @@ class NodeProjectOptions(
 
     @builtins.property
     def code_cov_token_secret(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories.
+        '''(experimental) Define the secret name for a specified https://codecov.io/ token.
 
-        :default: - if this option is not specified, only public repositories are supported
+        :default: - OIDC auth is used
 
         :stability: experimental
         '''
@@ -7821,7 +9078,7 @@ class NodeProjectOptions(
 
     @builtins.property
     def mutable_build(self) -> typing.Optional[builtins.bool]:
-        '''(experimental) Automatically update files modified during builds to pull-request branches.
+        '''(deprecated) Automatically update files modified during builds to pull-request branches.
 
         This means
         that any files synthesized by projen or e.g. test snapshots will always be up-to-date
@@ -7831,7 +9088,9 @@ class NodeProjectOptions(
 
         :default: true
 
-        :stability: experimental
+        :deprecated: - Use ``buildWorkflowOptions.mutableBuild``
+
+        :stability: deprecated
         '''
         result = self._values.get("mutable_build")
         return typing.cast(typing.Optional[builtins.bool], result)
@@ -7904,7 +9163,7 @@ class NodeProjectOptions(
     def projen_dev_dependency(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Indicates of "projen" should be installed as a devDependency.
 
-        :default: true
+        :default: - true if not a subproject
 
         :stability: experimental
         '''
@@ -8020,7 +9279,7 @@ class NodeProjectOptions(
     def workflow_git_identity(self) -> typing.Optional[_GitIdentity_6effc3de]:
         '''(experimental) The git identity to use in workflows.
 
-        :default: - GitHub Actions
+        :default: - default GitHub Actions user
 
         :stability: experimental
         '''
@@ -8029,9 +9288,11 @@ class NodeProjectOptions(
 
     @builtins.property
     def workflow_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) The node version to use in GitHub workflows.
+        '''(experimental) The node version used in GitHub Actions workflows.
 
-        :default: - same as ``minNodeVersion``
+        Always use this option if your GitHub Actions workflows require a specific to run.
+
+        :default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
 
         :stability: experimental
         '''
@@ -9069,7 +10330,10 @@ class Projenrc(
     metaclass=jsii.JSIIMeta,
     jsii_type="projen.javascript.Projenrc",
 ):
-    '''(experimental) Sets up a javascript project to use TypeScript for projenrc.
+    '''(experimental) A projenrc file written in JavaScript.
+
+    This component can be instantiated in any type of project
+    and has no expectations around the project's main language.
 
     :stability: experimental
     '''
@@ -9273,6 +10537,61 @@ class RenderWorkflowSetupOptions:
         )
 
 
+@jsii.enum(jsii_type="projen.javascript.RunBundleTask")
+class RunBundleTask(enum.Enum):
+    '''(experimental) Options for BundlerOptions.runBundleTask.
+
+    :stability: experimental
+    '''
+
+    MANUAL = "MANUAL"
+    '''(experimental) Don't bundle automatically as part of the build.
+
+    :stability: experimental
+    '''
+    PRE_COMPILE = "PRE_COMPILE"
+    '''(experimental) Bundle automatically before compilation.
+
+    :stability: experimental
+    '''
+    POST_COMPILE = "POST_COMPILE"
+    '''(experimental) Bundle automatically after compilation. This is useful if you want to bundle the compiled results.
+
+    Thus will run compilation tasks (using tsc, etc.) before running file
+    through bundling step.
+
+    This is only required unless you are using new experimental features that
+    are not supported by ``esbuild`` but are supported by typescript's ``tsc``
+    compiler. One example of such feature is ``emitDecoratorMetadata``::
+
+       // In a TypeScript project with output configured
+       // to go to the "lib" directory:
+       const project = new TypeScriptProject({
+         name: "test",
+         defaultReleaseBranch: "main",
+         tsconfig: {
+           compilerOptions: {
+             outDir: "lib",
+           },
+         },
+         bundlerOptions: {
+           // ensure we compile with `tsc` before bundling
+           runBundleTask: RunBundleTask.POST_COMPILE,
+         },
+       });
+
+       // Tell the bundler to bundle the compiled results (from the "lib" directory)
+       project.bundler.addBundle("./lib/index.js", {
+         platform: "node",
+         target: "node22",
+         sourcemap: false,
+         format: "esm",
+       });
+
+    :stability: experimental
+    '''
+
+
 @jsii.data_type(
     jsii_type="projen.javascript.ScopedPackagesOptions",
     jsii_struct_bases=[],
@@ -9332,6 +10651,36 @@ class ScopedPackagesOptions:
         )
 
 
+@jsii.enum(jsii_type="projen.javascript.SourceMapMode")
+class SourceMapMode(enum.Enum):
+    '''(experimental) SourceMap mode for esbuild.
+
+    :see: https://esbuild.github.io/api/#sourcemap
+    :stability: experimental
+    '''
+
+    DEFAULT = "DEFAULT"
+    '''(experimental) Default sourceMap mode - will generate a .js.map file alongside any generated .js file and add a special //# sourceMappingURL= comment to the bottom of the .js file pointing to the .js.map file.
+
+    :stability: experimental
+    '''
+    EXTERNAL = "EXTERNAL"
+    '''(experimental) External sourceMap mode - If you want to omit the special //# sourceMappingURL= comment from the generated .js file but you still want to generate the .js.map files.
+
+    :stability: experimental
+    '''
+    INLINE = "INLINE"
+    '''(experimental) Inline sourceMap mode - If you want to insert the entire source map into the .js file instead of generating a separate .js.map file.
+
+    :stability: experimental
+    '''
+    BOTH = "BOTH"
+    '''(experimental) Both sourceMap mode - If you want to have the effect of both inline and external simultaneously.
+
+    :stability: experimental
+    '''
+
+
 @jsii.enum(jsii_type="projen.javascript.TrailingComma")
 class TrailingComma(enum.Enum):
     '''
@@ -9382,12 +10731,16 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "allow_importing_ts_extensions": "allowImportingTsExtensions",
         "allow_js": "allowJs",
         "allow_synthetic_default_imports": "allowSyntheticDefaultImports",
+        "allow_unreachable_code": "allowUnreachableCode",
+        "allow_unused_labels": "allowUnusedLabels",
         "always_strict": "alwaysStrict",
         "base_url": "baseUrl",
+        "check_js": "checkJs",
         "custom_conditions": "customConditions",
         "declaration": "declaration",
         "declaration_dir": "declarationDir",
         "declaration_map": "declarationMap",
+        "downlevel_iteration": "downlevelIteration",
         "emit_declaration_only": "emitDeclarationOnly",
         "emit_decorator_metadata": "emitDecoratorMetadata",
         "es_module_interop": "esModuleInterop",
@@ -9395,6 +10748,7 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "experimental_decorators": "experimentalDecorators",
         "force_consistent_casing_in_file_names": "forceConsistentCasingInFileNames",
         "imports_not_used_as_values": "importsNotUsedAsValues",
+        "incremental": "incremental",
         "inline_source_map": "inlineSourceMap",
         "inline_sources": "inlineSources",
         "isolated_modules": "isolatedModules",
@@ -9402,6 +10756,7 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "jsx_import_source": "jsxImportSource",
         "lib": "lib",
         "module": "module",
+        "module_detection": "moduleDetection",
         "module_resolution": "moduleResolution",
         "no_emit": "noEmit",
         "no_emit_on_error": "noEmitOnError",
@@ -9428,6 +10783,8 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "strict_property_initialization": "strictPropertyInitialization",
         "strip_internal": "stripInternal",
         "target": "target",
+        "ts_build_info_file": "tsBuildInfoFile",
+        "type_roots": "typeRoots",
         "types": "types",
         "use_unknown_in_catch_variables": "useUnknownInCatchVariables",
         "verbatim_module_syntax": "verbatimModuleSyntax",
@@ -9441,12 +10798,16 @@ class TypeScriptCompilerOptions:
         allow_importing_ts_extensions: typing.Optional[builtins.bool] = None,
         allow_js: typing.Optional[builtins.bool] = None,
         allow_synthetic_default_imports: typing.Optional[builtins.bool] = None,
+        allow_unreachable_code: typing.Optional[builtins.bool] = None,
+        allow_unused_labels: typing.Optional[builtins.bool] = None,
         always_strict: typing.Optional[builtins.bool] = None,
         base_url: typing.Optional[builtins.str] = None,
+        check_js: typing.Optional[builtins.bool] = None,
         custom_conditions: typing.Optional[typing.Sequence[builtins.str]] = None,
         declaration: typing.Optional[builtins.bool] = None,
         declaration_dir: typing.Optional[builtins.str] = None,
         declaration_map: typing.Optional[builtins.bool] = None,
+        downlevel_iteration: typing.Optional[builtins.bool] = None,
         emit_declaration_only: typing.Optional[builtins.bool] = None,
         emit_decorator_metadata: typing.Optional[builtins.bool] = None,
         es_module_interop: typing.Optional[builtins.bool] = None,
@@ -9454,6 +10815,7 @@ class TypeScriptCompilerOptions:
         experimental_decorators: typing.Optional[builtins.bool] = None,
         force_consistent_casing_in_file_names: typing.Optional[builtins.bool] = None,
         imports_not_used_as_values: typing.Optional["TypeScriptImportsNotUsedAsValues"] = None,
+        incremental: typing.Optional[builtins.bool] = None,
         inline_source_map: typing.Optional[builtins.bool] = None,
         inline_sources: typing.Optional[builtins.bool] = None,
         isolated_modules: typing.Optional[builtins.bool] = None,
@@ -9461,6 +10823,7 @@ class TypeScriptCompilerOptions:
         jsx_import_source: typing.Optional[builtins.str] = None,
         lib: typing.Optional[typing.Sequence[builtins.str]] = None,
         module: typing.Optional[builtins.str] = None,
+        module_detection: typing.Optional["TypeScriptModuleDetection"] = None,
         module_resolution: typing.Optional["TypeScriptModuleResolution"] = None,
         no_emit: typing.Optional[builtins.bool] = None,
         no_emit_on_error: typing.Optional[builtins.bool] = None,
@@ -9487,6 +10850,8 @@ class TypeScriptCompilerOptions:
         strict_property_initialization: typing.Optional[builtins.bool] = None,
         strip_internal: typing.Optional[builtins.bool] = None,
         target: typing.Optional[builtins.str] = None,
+        ts_build_info_file: typing.Optional[builtins.str] = None,
+        type_roots: typing.Optional[typing.Sequence[builtins.str]] = None,
         types: typing.Optional[typing.Sequence[builtins.str]] = None,
         use_unknown_in_catch_variables: typing.Optional[builtins.bool] = None,
         verbatim_module_syntax: typing.Optional[builtins.bool] = None,
@@ -9496,12 +10861,16 @@ class TypeScriptCompilerOptions:
         :param allow_importing_ts_extensions: (experimental) Allows TypeScript files to import each other with TypeScript-specific extensions (``.ts``, ``.mts``, ``.tsx``). Requires ``noEmit`` or ``emitDeclarationOnly``. Default: undefined
         :param allow_js: (experimental) Allow JavaScript files to be compiled. Default: false
         :param allow_synthetic_default_imports: (experimental) Allow default imports from modules with no default export. This does not affect code emit, just typechecking.
+        :param allow_unreachable_code: (experimental) Allow Unreachable Code. When: - ``undefined`` (default) provide suggestions as warnings to editors - ``true`` unreachable code is ignored - ``false`` raises compiler errors about unreachable code These warnings are only about code which is provably unreachable due to the use of JavaScript syntax.
+        :param allow_unused_labels: (experimental) Allow Unused Labels. When: - ``undefined`` (default) provide suggestions as warnings to editors - ``true`` unused labels are ignored - ``false`` raises compiler errors about unused labels Labels are very rare in JavaScript and typically indicate an attempt to write an object literal:: function verifyAge(age: number) { // Forgot 'return' statement if (age > 18) { verified: true; // ^^^^^^^^ Unused label. } }
         :param always_strict: (experimental) Ensures that your files are parsed in the ECMAScript strict mode, and emit “use strict” for each source file. Default: true
         :param base_url: (experimental) Lets you set a base directory to resolve non-absolute module names. You can define a root folder where you can do absolute file resolution.
+        :param check_js: (experimental) Check JS. Works in tandem with `allowJs <https://www.typescriptlang.org/tsconfig#allowJs>`_. When checkJs is enabled then errors are reported in JavaScript files. This is the equivalent of including //
         :param custom_conditions: (experimental) List of additional conditions that should succeed when TypeScript resolves from an ``exports`` or ``imports`` field of a ``package.json``. Default: undefined
         :param declaration: (experimental) To be specified along with the above.
         :param declaration_dir: (experimental) Offers a way to configure the root directory for where declaration files are emitted.
         :param declaration_map: (experimental) Generates a source map for .d.ts files which map back to the original .ts source file. This will allow editors such as VS Code to go to the original .ts file when using features like Go to Definition.
+        :param downlevel_iteration: (experimental) Downleveling is TypeScript’s term for transpiling to an older version of JavaScript. This flag is to enable support for a more accurate implementation of how modern JavaScript iterates through new concepts in older JavaScript runtimes. ECMAScript 6 added several new iteration primitives: the for / of loop (for (el of arr)), Array spread ([a, ...b]), argument spread (fn(...args)), and Symbol.iterator. downlevelIteration allows for these iteration primitives to be used more accurately in ES5 environments if a Symbol.iterator implementation is present.
         :param emit_declaration_only: (experimental) Only emit .d.ts files; do not emit .js files. Default: false
         :param emit_decorator_metadata: (experimental) Enables experimental support for decorators, which is in stage 2 of the TC39 standardization process. Decorators are a language feature which hasn’t yet been fully ratified into the JavaScript specification. This means that the implementation version in TypeScript may differ from the implementation in JavaScript when it it decided by TC39. You can find out more about decorator support in TypeScript in the handbook. Default: undefined
         :param es_module_interop: (experimental) Emit __importStar and __importDefault helpers for runtime babel ecosystem compatibility and enable --allowSyntheticDefaultImports for typesystem compatibility. Default: false
@@ -9509,6 +10878,7 @@ class TypeScriptCompilerOptions:
         :param experimental_decorators: (experimental) Enables experimental support for decorators, which is in stage 2 of the TC39 standardization process. Default: true
         :param force_consistent_casing_in_file_names: (experimental) Disallow inconsistently-cased references to the same file. Default: false
         :param imports_not_used_as_values: (experimental) This flag works because you can use ``import type`` to explicitly create an ``import`` statement which should never be emitted into JavaScript. Default: "remove"
+        :param incremental: (experimental) Tells TypeScript to save information about the project graph from the last compilation to files stored on disk. This creates a series of .tsbuildinfo files in the same folder as your compilation output. They are not used by your JavaScript at runtime and can be safely deleted. You can read more about the flag in the 3.4 release notes.
         :param inline_source_map: (experimental) When set, instead of writing out a .js.map file to provide source maps, TypeScript will embed the source map content in the .js files. Default: true
         :param inline_sources: (experimental) When set, TypeScript will include the original content of the .ts file as an embedded string in the source map. This is often useful in the same cases as inlineSourceMap. Default: true
         :param isolated_modules: (experimental) Perform additional checks to ensure that separate compilation (such as with transpileModule or. Default: false
@@ -9516,6 +10886,7 @@ class TypeScriptCompilerOptions:
         :param jsx_import_source: (experimental) Declares the module specifier to be used for importing the jsx and jsxs factory functions when using jsx. Default: undefined
         :param lib: (experimental) Reference for type definitions / libraries to use (eg. ES2016, ES5, ES2018). Default: [ "es2018" ]
         :param module: (experimental) Sets the module system for the program. See https://www.typescriptlang.org/docs/handbook/modules.html#ambient-modules. Default: "CommonJS"
+        :param module_detection: (experimental) This setting controls how TypeScript determines whether a file is a `script or a module <https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript>`_. Default: "auto"
         :param module_resolution: (experimental) Determine how modules get resolved. Either "Node" for Node.js/io.js style resolution, or "Classic". Default: "node"
         :param no_emit: (experimental) Do not emit outputs. Default: false
         :param no_emit_on_error: (experimental) Do not emit compiler output files like JavaScript source code, source-maps or declarations if any errors were reported. Default: true
@@ -9542,6 +10913,8 @@ class TypeScriptCompilerOptions:
         :param strict_property_initialization: (experimental) When set to true, TypeScript will raise an error when a class property was declared but not set in the constructor. Default: true
         :param strip_internal: (experimental) Do not emit declarations for code that has an ``@internal`` annotation in it’s JSDoc comment. Default: true
         :param target: (experimental) Modern browsers support all ES6 features, so ES6 is a good choice. You might choose to set a lower target if your code is deployed to older environments, or a higher target if your code is guaranteed to run in newer environments. Default: "ES2018"
+        :param ts_build_info_file: (experimental) This setting lets you specify a file for storing incremental compilation information as a part of composite projects which enables faster building of larger TypeScript codebases. You can read more about composite projects in the handbook.
+        :param type_roots: (experimental) If typeRoots is specified, only packages under typeRoots will be included.
         :param types: (experimental) If types is specified, only packages listed will be included in the global scope.
         :param use_unknown_in_catch_variables: (experimental) Change the type of the variable in a catch clause from any to unknown Available with TypeScript 4.4 and newer. Default: true
         :param verbatim_module_syntax: (experimental) Simplifies TypeScript's handling of import/export ``type`` modifiers. Default: undefined
@@ -9554,12 +10927,16 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument allow_importing_ts_extensions", value=allow_importing_ts_extensions, expected_type=type_hints["allow_importing_ts_extensions"])
             check_type(argname="argument allow_js", value=allow_js, expected_type=type_hints["allow_js"])
             check_type(argname="argument allow_synthetic_default_imports", value=allow_synthetic_default_imports, expected_type=type_hints["allow_synthetic_default_imports"])
+            check_type(argname="argument allow_unreachable_code", value=allow_unreachable_code, expected_type=type_hints["allow_unreachable_code"])
+            check_type(argname="argument allow_unused_labels", value=allow_unused_labels, expected_type=type_hints["allow_unused_labels"])
             check_type(argname="argument always_strict", value=always_strict, expected_type=type_hints["always_strict"])
             check_type(argname="argument base_url", value=base_url, expected_type=type_hints["base_url"])
+            check_type(argname="argument check_js", value=check_js, expected_type=type_hints["check_js"])
             check_type(argname="argument custom_conditions", value=custom_conditions, expected_type=type_hints["custom_conditions"])
             check_type(argname="argument declaration", value=declaration, expected_type=type_hints["declaration"])
             check_type(argname="argument declaration_dir", value=declaration_dir, expected_type=type_hints["declaration_dir"])
             check_type(argname="argument declaration_map", value=declaration_map, expected_type=type_hints["declaration_map"])
+            check_type(argname="argument downlevel_iteration", value=downlevel_iteration, expected_type=type_hints["downlevel_iteration"])
             check_type(argname="argument emit_declaration_only", value=emit_declaration_only, expected_type=type_hints["emit_declaration_only"])
             check_type(argname="argument emit_decorator_metadata", value=emit_decorator_metadata, expected_type=type_hints["emit_decorator_metadata"])
             check_type(argname="argument es_module_interop", value=es_module_interop, expected_type=type_hints["es_module_interop"])
@@ -9567,6 +10944,7 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument experimental_decorators", value=experimental_decorators, expected_type=type_hints["experimental_decorators"])
             check_type(argname="argument force_consistent_casing_in_file_names", value=force_consistent_casing_in_file_names, expected_type=type_hints["force_consistent_casing_in_file_names"])
             check_type(argname="argument imports_not_used_as_values", value=imports_not_used_as_values, expected_type=type_hints["imports_not_used_as_values"])
+            check_type(argname="argument incremental", value=incremental, expected_type=type_hints["incremental"])
             check_type(argname="argument inline_source_map", value=inline_source_map, expected_type=type_hints["inline_source_map"])
             check_type(argname="argument inline_sources", value=inline_sources, expected_type=type_hints["inline_sources"])
             check_type(argname="argument isolated_modules", value=isolated_modules, expected_type=type_hints["isolated_modules"])
@@ -9574,6 +10952,7 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument jsx_import_source", value=jsx_import_source, expected_type=type_hints["jsx_import_source"])
             check_type(argname="argument lib", value=lib, expected_type=type_hints["lib"])
             check_type(argname="argument module", value=module, expected_type=type_hints["module"])
+            check_type(argname="argument module_detection", value=module_detection, expected_type=type_hints["module_detection"])
             check_type(argname="argument module_resolution", value=module_resolution, expected_type=type_hints["module_resolution"])
             check_type(argname="argument no_emit", value=no_emit, expected_type=type_hints["no_emit"])
             check_type(argname="argument no_emit_on_error", value=no_emit_on_error, expected_type=type_hints["no_emit_on_error"])
@@ -9600,6 +10979,8 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument strict_property_initialization", value=strict_property_initialization, expected_type=type_hints["strict_property_initialization"])
             check_type(argname="argument strip_internal", value=strip_internal, expected_type=type_hints["strip_internal"])
             check_type(argname="argument target", value=target, expected_type=type_hints["target"])
+            check_type(argname="argument ts_build_info_file", value=ts_build_info_file, expected_type=type_hints["ts_build_info_file"])
+            check_type(argname="argument type_roots", value=type_roots, expected_type=type_hints["type_roots"])
             check_type(argname="argument types", value=types, expected_type=type_hints["types"])
             check_type(argname="argument use_unknown_in_catch_variables", value=use_unknown_in_catch_variables, expected_type=type_hints["use_unknown_in_catch_variables"])
             check_type(argname="argument verbatim_module_syntax", value=verbatim_module_syntax, expected_type=type_hints["verbatim_module_syntax"])
@@ -9612,10 +10993,16 @@ class TypeScriptCompilerOptions:
             self._values["allow_js"] = allow_js
         if allow_synthetic_default_imports is not None:
             self._values["allow_synthetic_default_imports"] = allow_synthetic_default_imports
+        if allow_unreachable_code is not None:
+            self._values["allow_unreachable_code"] = allow_unreachable_code
+        if allow_unused_labels is not None:
+            self._values["allow_unused_labels"] = allow_unused_labels
         if always_strict is not None:
             self._values["always_strict"] = always_strict
         if base_url is not None:
             self._values["base_url"] = base_url
+        if check_js is not None:
+            self._values["check_js"] = check_js
         if custom_conditions is not None:
             self._values["custom_conditions"] = custom_conditions
         if declaration is not None:
@@ -9624,6 +11011,8 @@ class TypeScriptCompilerOptions:
             self._values["declaration_dir"] = declaration_dir
         if declaration_map is not None:
             self._values["declaration_map"] = declaration_map
+        if downlevel_iteration is not None:
+            self._values["downlevel_iteration"] = downlevel_iteration
         if emit_declaration_only is not None:
             self._values["emit_declaration_only"] = emit_declaration_only
         if emit_decorator_metadata is not None:
@@ -9638,6 +11027,8 @@ class TypeScriptCompilerOptions:
             self._values["force_consistent_casing_in_file_names"] = force_consistent_casing_in_file_names
         if imports_not_used_as_values is not None:
             self._values["imports_not_used_as_values"] = imports_not_used_as_values
+        if incremental is not None:
+            self._values["incremental"] = incremental
         if inline_source_map is not None:
             self._values["inline_source_map"] = inline_source_map
         if inline_sources is not None:
@@ -9652,6 +11043,8 @@ class TypeScriptCompilerOptions:
             self._values["lib"] = lib
         if module is not None:
             self._values["module"] = module
+        if module_detection is not None:
+            self._values["module_detection"] = module_detection
         if module_resolution is not None:
             self._values["module_resolution"] = module_resolution
         if no_emit is not None:
@@ -9704,6 +11097,10 @@ class TypeScriptCompilerOptions:
             self._values["strip_internal"] = strip_internal
         if target is not None:
             self._values["target"] = target
+        if ts_build_info_file is not None:
+            self._values["ts_build_info_file"] = ts_build_info_file
+        if type_roots is not None:
+            self._values["type_roots"] = type_roots
         if types is not None:
             self._values["types"] = types
         if use_unknown_in_catch_variables is not None:
@@ -9756,6 +11153,50 @@ class TypeScriptCompilerOptions:
         result = self._values.get("allow_synthetic_default_imports")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def allow_unreachable_code(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Allow Unreachable Code.
+
+        When:
+
+        - ``undefined`` (default) provide suggestions as warnings to editors
+        - ``true`` unreachable code is ignored
+        - ``false`` raises compiler errors about unreachable code
+
+        These warnings are only about code which is provably unreachable due to the use of JavaScript syntax.
+
+        :see: https://www.typescriptlang.org/tsconfig#allowUnreachableCode
+        :stability: experimental
+        '''
+        result = self._values.get("allow_unreachable_code")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def allow_unused_labels(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Allow Unused Labels.
+
+        When:
+
+        - ``undefined`` (default) provide suggestions as warnings to editors
+        - ``true`` unused labels are ignored
+        - ``false`` raises compiler errors about unused labels
+
+        Labels are very rare in JavaScript and typically indicate an attempt to write an object literal::
+
+           function verifyAge(age: number) {
+             // Forgot 'return' statement
+             if (age > 18) {
+               verified: true;
+           //  ^^^^^^^^ Unused label.
+             }
+           }
+
+        :see: https://www.typescriptlang.org/tsconfig#allowUnusedLabels
+        :stability: experimental
+        '''
+        result = self._values.get("allow_unused_labels")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def always_strict(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Ensures that your files are parsed in the ECMAScript strict mode, and emit “use strict” for each source file.
@@ -9778,6 +11219,23 @@ class TypeScriptCompilerOptions:
         result = self._values.get("base_url")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def check_js(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Check JS.
+
+        Works in tandem with `allowJs <https://www.typescriptlang.org/tsconfig#allowJs>`_. When checkJs is enabled then
+        errors are reported in JavaScript files. This is the equivalent of including //
+
+        :see: https://www.typescriptlang.org/tsconfig#checkJs
+        :stability: experimental
+        :ts-check:
+
+        at the top of all
+        JavaScript files which are included in your project.
+        '''
+        result = self._values.get("check_js")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def custom_conditions(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) List of additional conditions that should succeed when TypeScript resolves from an ``exports`` or ``imports`` field of a ``package.json``.
@@ -9818,6 +11276,20 @@ class TypeScriptCompilerOptions:
         result = self._values.get("declaration_map")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def downlevel_iteration(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Downleveling is TypeScript’s term for transpiling to an older version of JavaScript.
+
+        This flag is to enable support for a more accurate implementation of how modern JavaScript iterates through new concepts in older JavaScript runtimes.
+
+        ECMAScript 6 added several new iteration primitives: the for / of loop (for (el of arr)), Array spread ([a, ...b]), argument spread (fn(...args)), and Symbol.iterator.
+        downlevelIteration allows for these iteration primitives to be used more accurately in ES5 environments if a Symbol.iterator implementation is present.
+
+        :stability: experimental
+        '''
+        result = self._values.get("downlevel_iteration")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def emit_declaration_only(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Only emit .d.ts files; do not emit .js files.
@@ -9907,6 +11379,24 @@ class TypeScriptCompilerOptions:
         result = self._values.get("imports_not_used_as_values")
         return typing.cast(typing.Optional["TypeScriptImportsNotUsedAsValues"], result)
 
+    @builtins.property
+    def incremental(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Tells TypeScript to save information about the project graph from the last compilation to files stored on disk.
+
+        This creates a series of .tsbuildinfo files in the same folder as your compilation output.
+        They are not used by your JavaScript at runtime and can be safely deleted.
+        You can read more about the flag in the 3.4 release notes.
+
+        :see:
+
+        https://www.typescriptlang.org/docs/handbook/release-notes/typescript-3-4.html#faster-subsequent-builds-with-the---incremental-flag
+
+        To control which folders you want to the files to be built to, use the config option tsBuildInfoFile.
+        :stability: experimental
+        '''
+        result = self._values.get("incremental")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def inline_source_map(self) -> typing.Optional[builtins.bool]:
         '''(experimental) When set, instead of writing out a .js.map file to provide source maps, TypeScript will embed the source map content in the .js files.
@@ -9989,6 +11479,17 @@ class TypeScriptCompilerOptions:
         result = self._values.get("module")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def module_detection(self) -> typing.Optional["TypeScriptModuleDetection"]:
+        '''(experimental) This setting controls how TypeScript determines whether a file is a `script or a module <https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript>`_.
+
+        :default: "auto"
+
+        :stability: experimental
+        '''
+        result = self._values.get("module_detection")
+        return typing.cast(typing.Optional["TypeScriptModuleDetection"], result)
+
     @builtins.property
     def module_resolution(self) -> typing.Optional["TypeScriptModuleResolution"]:
         '''(experimental) Determine how modules get resolved.
@@ -10297,11 +11798,32 @@ class TypeScriptCompilerOptions:
         result = self._values.get("target")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def ts_build_info_file(self) -> typing.Optional[builtins.str]:
+        '''(experimental) This setting lets you specify a file for storing incremental compilation information as a part of composite projects which enables faster building of larger TypeScript codebases.
+
+        You can read more about composite projects in the handbook.
+
+        :stability: experimental
+        '''
+        result = self._values.get("ts_build_info_file")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def type_roots(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) If typeRoots is specified, only packages under typeRoots will be included.
+
+        :see: https://www.typescriptlang.org/tsconfig/#typeRoots
+        :stability: experimental
+        '''
+        result = self._values.get("type_roots")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def types(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) If types is specified, only packages listed will be included in the global scope.
 
-        :see: {@link https://www.typescriptlang.org/tsconfig#types}
+        :see: https://www.typescriptlang.org/tsconfig#types
         :stability: experimental
         '''
         result = self._values.get("types")
@@ -10379,30 +11901,58 @@ class TypeScriptJsxMode(enum.Enum):
     :stability: experimental
     '''
 
-    PRESERVE = "PRESERVE"
-    '''(experimental) Keeps the JSX as part of the output to be further consumed by another transform step (e.g. Babel).
+    PRESERVE = "PRESERVE"
+    '''(experimental) Keeps the JSX as part of the output to be further consumed by another transform step (e.g. Babel).
+
+    :stability: experimental
+    '''
+    REACT = "REACT"
+    '''(experimental) Converts JSX syntax into React.createElement, does not need to go through a JSX transformation before use, and the output will have a .js file extension.
+
+    :stability: experimental
+    '''
+    REACT_NATIVE = "REACT_NATIVE"
+    '''(experimental) Keeps all JSX like 'preserve' mode, but output will have a .js extension.
+
+    :stability: experimental
+    '''
+    REACT_JSX = "REACT_JSX"
+    '''(experimental) Passes ``key`` separately from props and always passes ``children`` as props (since React 17).
+
+    :see: https://www.typescriptlang.org/docs/handbook/release-notes/typescript-4-1.html#react-17-jsx-factories
+    :stability: experimental
+    '''
+    REACT_JSXDEV = "REACT_JSXDEV"
+    '''(experimental) Same as ``REACT_JSX`` with additional debug data.
+
+    :stability: experimental
+    '''
+
 
-    :stability: experimental
-    '''
-    REACT = "REACT"
-    '''(experimental) Converts JSX syntax into React.createElement, does not need to go through a JSX transformation before use, and the output will have a .js file extension.
+@jsii.enum(jsii_type="projen.javascript.TypeScriptModuleDetection")
+class TypeScriptModuleDetection(enum.Enum):
+    '''(experimental) This setting controls how TypeScript determines whether a file is a script or a module.
 
+    :see: https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript
     :stability: experimental
     '''
-    REACT_NATIVE = "REACT_NATIVE"
-    '''(experimental) Keeps all JSX like 'preserve' mode, but output will have a .js extension.
 
+    AUTO = "AUTO"
+    '''(experimental) TypeScript will not only look for import and export statements, but it will also check whether the "type" field in a package.json is set to "module" when running with module: nodenext or node16, and check whether the current file is a JSX file when running under jsx: react-jsx.
+
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
     :stability: experimental
     '''
-    REACT_JSX = "REACT_JSX"
-    '''(experimental) Passes ``key`` separately from props and always passes ``children`` as props (since React 17).
+    LEGACY = "LEGACY"
+    '''(experimental) The same behavior as 4.6 and prior, usings import and export statements to determine whether a file is a module.
 
-    :see: https://www.typescriptlang.org/docs/handbook/release-notes/typescript-4-1.html#react-17-jsx-factories
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
     :stability: experimental
     '''
-    REACT_JSXDEV = "REACT_JSXDEV"
-    '''(experimental) Same as ``REACT_JSX`` with additional debug data.
+    FORCE = "FORCE"
+    '''(experimental) Ensures that every non-declaration file is treated as a module.
 
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
     :stability: experimental
     '''
 
@@ -10427,6 +11977,12 @@ class TypeScriptModuleResolution(enum.Enum):
     :see: https://www.typescriptlang.org/docs/handbook/module-resolution.html#node
     :stability: experimental
     '''
+    NODE10 = "NODE10"
+    '''(experimental) ``--moduleResolution node`` was renamed to ``node10`` (keeping ``node`` as an alias for backward compatibility) in TypeScript 5.0. It reflects the CommonJS module resolution algorithm as it existed in Node.js versions earlier than v12. It should no longer be used.
+
+    :see: https://www.typescriptlang.org/docs/handbook/modules/reference.html#node10-formerly-known-as-node
+    :stability: experimental
+    '''
     NODE16 = "NODE16"
     '''(experimental) Node.js’ ECMAScript Module Support from TypeScript 4.7 onwards.
 
@@ -10462,7 +12018,7 @@ class TypescriptConfig(
         self,
         project: _Project_57d89203,
         *,
-        compiler_options: typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]],
+        compiler_options: typing.Optional[typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         extends: typing.Optional["TypescriptConfigExtends"] = None,
         file_name: typing.Optional[builtins.str] = None,
@@ -10493,9 +12049,11 @@ class TypescriptConfig(
 
     @jsii.member(jsii_name="addExclude")
     def add_exclude(self, pattern: builtins.str) -> None:
-        '''
-        :param pattern: -
+        '''(experimental) Add an exclude pattern to the ``exclude`` array of the TSConfig.
 
+        :param pattern: The pattern to add.
+
+        :see: https://www.typescriptlang.org/tsconfig#exclude
         :stability: experimental
         '''
         if __debug__:
@@ -10519,9 +12077,11 @@ class TypescriptConfig(
 
     @jsii.member(jsii_name="addInclude")
     def add_include(self, pattern: builtins.str) -> None:
-        '''
-        :param pattern: -
+        '''(experimental) Add an include pattern to the ``include`` array of the TSConfig.
+
+        :param pattern: The pattern to add.
 
+        :see: https://www.typescriptlang.org/tsconfig#include
         :stability: experimental
         '''
         if __debug__:
@@ -10537,6 +12097,34 @@ class TypescriptConfig(
         '''
         return typing.cast(None, jsii.invoke(self, "preSynthesize", []))
 
+    @jsii.member(jsii_name="removeExclude")
+    def remove_exclude(self, pattern: builtins.str) -> None:
+        '''(experimental) Remove an exclude pattern from the ``exclude`` array of the TSConfig.
+
+        :param pattern: The pattern to remove.
+
+        :see: https://www.typescriptlang.org/tsconfig#exclude
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f78586828830a46219bc19d7af8c53b4b5a1cc2bc1a03491930c9271790f10a)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "removeExclude", [pattern]))
+
+    @jsii.member(jsii_name="removeInclude")
+    def remove_include(self, pattern: builtins.str) -> None:
+        '''(experimental) Remove an include pattern from the ``include`` array of the TSConfig.
+
+        :param pattern: The pattern to remove.
+
+        :see: https://www.typescriptlang.org/tsconfig#include
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__85556ff93e412b3ea5e894bc7d7669275e51dfae8c077378748d8053a46e4946)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "removeInclude", [pattern]))
+
     @jsii.member(jsii_name="resolveExtendsPath")
     def resolve_extends_path(self, config_path: builtins.str) -> builtins.str:
         '''(experimental) Resolve valid TypeScript extends paths relative to this config.
@@ -10555,14 +12143,6 @@ class TypescriptConfig(
             check_type(argname="argument config_path", value=config_path, expected_type=type_hints["config_path"])
         return typing.cast(builtins.str, jsii.invoke(self, "resolveExtendsPath", [config_path]))
 
-    @builtins.property
-    @jsii.member(jsii_name="compilerOptions")
-    def compiler_options(self) -> TypeScriptCompilerOptions:
-        '''
-        :stability: experimental
-        '''
-        return typing.cast(TypeScriptCompilerOptions, jsii.get(self, "compilerOptions"))
-
     @builtins.property
     @jsii.member(jsii_name="exclude")
     def exclude(self) -> typing.List[builtins.str]:
@@ -10604,6 +12184,14 @@ class TypescriptConfig(
         '''
         return typing.cast(typing.List[builtins.str], jsii.get(self, "include"))
 
+    @builtins.property
+    @jsii.member(jsii_name="compilerOptions")
+    def compiler_options(self) -> typing.Optional[TypeScriptCompilerOptions]:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(typing.Optional[TypeScriptCompilerOptions], jsii.get(self, "compilerOptions"))
+
 
 class TypescriptConfigExtends(
     metaclass=jsii.JSIIMeta,
@@ -10673,7 +12261,7 @@ class TypescriptConfigOptions:
     def __init__(
         self,
         *,
-        compiler_options: typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]],
+        compiler_options: typing.Optional[typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         extends: typing.Optional[TypescriptConfigExtends] = None,
         file_name: typing.Optional[builtins.str] = None,
@@ -10697,9 +12285,9 @@ class TypescriptConfigOptions:
             check_type(argname="argument extends", value=extends, expected_type=type_hints["extends"])
             check_type(argname="argument file_name", value=file_name, expected_type=type_hints["file_name"])
             check_type(argname="argument include", value=include, expected_type=type_hints["include"])
-        self._values: typing.Dict[builtins.str, typing.Any] = {
-            "compiler_options": compiler_options,
-        }
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if compiler_options is not None:
+            self._values["compiler_options"] = compiler_options
         if exclude is not None:
             self._values["exclude"] = exclude
         if extends is not None:
@@ -10710,14 +12298,14 @@ class TypescriptConfigOptions:
             self._values["include"] = include
 
     @builtins.property
-    def compiler_options(self) -> TypeScriptCompilerOptions:
+    def compiler_options(self) -> typing.Optional[TypeScriptCompilerOptions]:
         '''(experimental) Compiler options to use.
 
         :stability: experimental
+        :remarks: Must provide either ``extends`` or ``compilerOptions`` (or both).
         '''
         result = self._values.get("compiler_options")
-        assert result is not None, "Required property 'compiler_options' is missing"
-        return typing.cast(TypeScriptCompilerOptions, result)
+        return typing.cast(typing.Optional[TypeScriptCompilerOptions], result)
 
     @builtins.property
     def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
@@ -10735,6 +12323,7 @@ class TypescriptConfigOptions:
         '''(experimental) Base ``tsconfig.json`` configuration(s) to inherit from.
 
         :stability: experimental
+        :remarks: Must provide either ``extends`` or ``compilerOptions`` (or both).
         '''
         result = self._values.get("extends")
         return typing.cast(typing.Optional[TypescriptConfigExtends], result)
@@ -10804,8 +12393,10 @@ class UpgradeDependencies(
         self,
         project: NodeProject,
         *,
+        cooldown: typing.Optional[jsii.Number] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        include_deprecated_versions: typing.Optional[builtins.bool] = None,
         pull_request_title: typing.Optional[builtins.str] = None,
         satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
         semantic_commit: typing.Optional[builtins.str] = None,
@@ -10818,8 +12409,10 @@ class UpgradeDependencies(
     ) -> None:
         '''
         :param project: -
+        :param cooldown: (experimental) Exclude package versions published within the specified number of days. This may provide some protection against supply chain attacks, simply by avoiding newly published packages that may be malicious. It gives the ecosystem more time to detect malicious packages. However it comes at the cost of updating other packages slower, which might also contain vulnerabilities or bugs in need of a fix. The cooldown period applies to both npm-check-updates discovery and the package manager update command. Default: - No cooldown period.
         :param exclude: (experimental) List of package names to exclude during the upgrade. Default: - Nothing is excluded.
         :param include: (experimental) List of package names to include during the upgrade. Default: - Everything is included.
+        :param include_deprecated_versions: (experimental) Include deprecated packages. By default, deprecated versions will be excluded from upgrades. Default: false
         :param pull_request_title: (experimental) Title of the pull request to use (should be all lower-case). Default: "upgrade dependencies"
         :param satisfy_peer_dependencies: (experimental) Check peer dependencies of installed packages and filter updates to compatible versions. By default, the upgrade workflow will adhere to version constraints from peer dependencies. Sometimes this is not desirable and can be disabled. Default: true
         :param semantic_commit: (experimental) The semantic commit type. Default: 'chore'
@@ -10836,8 +12429,10 @@ class UpgradeDependencies(
             type_hints = typing.get_type_hints(_typecheckingstub__497e18a2c8dc3200cff8b21dfad7c418d29517aa6d67e2a2555ee78fa63ff385)
             check_type(argname="argument project", value=project, expected_type=type_hints["project"])
         options = UpgradeDependenciesOptions(
+            cooldown=cooldown,
             exclude=exclude,
             include=include,
+            include_deprecated_versions=include_deprecated_versions,
             pull_request_title=pull_request_title,
             satisfy_peer_dependencies=satisfy_peer_dependencies,
             semantic_commit=semantic_commit,
@@ -10873,6 +12468,14 @@ class UpgradeDependencies(
         '''
         return typing.cast(_Task_9fa875b6, jsii.get(self, "postUpgradeTask"))
 
+    @builtins.property
+    @jsii.member(jsii_name="project")
+    def project(self) -> NodeProject:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(NodeProject, jsii.get(self, "project"))
+
     @builtins.property
     @jsii.member(jsii_name="upgradeTask")
     def upgrade_task(self) -> _Task_9fa875b6:
@@ -10910,15 +12513,17 @@ class UpgradeDependencies(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__66ba20de6f144f37e582e192e3ed592a6be0e8bc3d10e3b730af62082afa0010)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "containerOptions", value)
+        jsii.set(self, "containerOptions", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
     jsii_type="projen.javascript.UpgradeDependenciesOptions",
     jsii_struct_bases=[],
     name_mapping={
+        "cooldown": "cooldown",
         "exclude": "exclude",
         "include": "include",
+        "include_deprecated_versions": "includeDeprecatedVersions",
         "pull_request_title": "pullRequestTitle",
         "satisfy_peer_dependencies": "satisfyPeerDependencies",
         "semantic_commit": "semanticCommit",
@@ -10934,8 +12539,10 @@ class UpgradeDependenciesOptions:
     def __init__(
         self,
         *,
+        cooldown: typing.Optional[jsii.Number] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        include_deprecated_versions: typing.Optional[builtins.bool] = None,
         pull_request_title: typing.Optional[builtins.str] = None,
         satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
         semantic_commit: typing.Optional[builtins.str] = None,
@@ -10948,8 +12555,10 @@ class UpgradeDependenciesOptions:
     ) -> None:
         '''(experimental) Options for ``UpgradeDependencies``.
 
+        :param cooldown: (experimental) Exclude package versions published within the specified number of days. This may provide some protection against supply chain attacks, simply by avoiding newly published packages that may be malicious. It gives the ecosystem more time to detect malicious packages. However it comes at the cost of updating other packages slower, which might also contain vulnerabilities or bugs in need of a fix. The cooldown period applies to both npm-check-updates discovery and the package manager update command. Default: - No cooldown period.
         :param exclude: (experimental) List of package names to exclude during the upgrade. Default: - Nothing is excluded.
         :param include: (experimental) List of package names to include during the upgrade. Default: - Everything is included.
+        :param include_deprecated_versions: (experimental) Include deprecated packages. By default, deprecated versions will be excluded from upgrades. Default: false
         :param pull_request_title: (experimental) Title of the pull request to use (should be all lower-case). Default: "upgrade dependencies"
         :param satisfy_peer_dependencies: (experimental) Check peer dependencies of installed packages and filter updates to compatible versions. By default, the upgrade workflow will adhere to version constraints from peer dependencies. Sometimes this is not desirable and can be disabled. Default: true
         :param semantic_commit: (experimental) The semantic commit type. Default: 'chore'
@@ -10966,8 +12575,10 @@ class UpgradeDependenciesOptions:
             workflow_options = UpgradeDependenciesWorkflowOptions(**workflow_options)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0f7b896c11469470869bc4bfc86c9bb13fd308223e316ba71124c00b5709af1e)
+            check_type(argname="argument cooldown", value=cooldown, expected_type=type_hints["cooldown"])
             check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
             check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            check_type(argname="argument include_deprecated_versions", value=include_deprecated_versions, expected_type=type_hints["include_deprecated_versions"])
             check_type(argname="argument pull_request_title", value=pull_request_title, expected_type=type_hints["pull_request_title"])
             check_type(argname="argument satisfy_peer_dependencies", value=satisfy_peer_dependencies, expected_type=type_hints["satisfy_peer_dependencies"])
             check_type(argname="argument semantic_commit", value=semantic_commit, expected_type=type_hints["semantic_commit"])
@@ -10978,10 +12589,14 @@ class UpgradeDependenciesOptions:
             check_type(argname="argument workflow", value=workflow, expected_type=type_hints["workflow"])
             check_type(argname="argument workflow_options", value=workflow_options, expected_type=type_hints["workflow_options"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if cooldown is not None:
+            self._values["cooldown"] = cooldown
         if exclude is not None:
             self._values["exclude"] = exclude
         if include is not None:
             self._values["include"] = include
+        if include_deprecated_versions is not None:
+            self._values["include_deprecated_versions"] = include_deprecated_versions
         if pull_request_title is not None:
             self._values["pull_request_title"] = pull_request_title
         if satisfy_peer_dependencies is not None:
@@ -11001,6 +12616,26 @@ class UpgradeDependenciesOptions:
         if workflow_options is not None:
             self._values["workflow_options"] = workflow_options
 
+    @builtins.property
+    def cooldown(self) -> typing.Optional[jsii.Number]:
+        '''(experimental) Exclude package versions published within the specified number of days.
+
+        This may provide some protection against supply chain attacks, simply by avoiding
+        newly published packages that may be malicious. It gives the ecosystem more time
+        to detect malicious packages. However it comes at the cost of updating other
+        packages slower, which might also contain vulnerabilities or bugs in need of a fix.
+
+        The cooldown period applies to both npm-check-updates discovery
+        and the package manager update command.
+
+        :default: - No cooldown period.
+
+        :see: https://yarnpkg.com/configuration/yarnrc#npmMinimalAgeGate
+        :stability: experimental
+        '''
+        result = self._values.get("cooldown")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) List of package names to exclude during the upgrade.
@@ -11023,6 +12658,20 @@ class UpgradeDependenciesOptions:
         result = self._values.get("include")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def include_deprecated_versions(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Include deprecated packages.
+
+        By default, deprecated versions will be excluded from upgrades.
+
+        :default: false
+
+        :see: https://github.com/raineorshine/npm-check-updates?tab=readme-ov-file#options
+        :stability: experimental
+        '''
+        result = self._values.get("include_deprecated_versions")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def pull_request_title(self) -> typing.Optional[builtins.str]:
         '''(experimental) Title of the pull request to use (should be all lower-case).
@@ -11233,6 +12882,7 @@ class UpgradeDependenciesSchedule(
         "assignees": "assignees",
         "branches": "branches",
         "container": "container",
+        "env": "env",
         "git_identity": "gitIdentity",
         "labels": "labels",
         "permissions": "permissions",
@@ -11249,6 +12899,7 @@ class UpgradeDependenciesWorkflowOptions:
         assignees: typing.Optional[typing.Sequence[builtins.str]] = None,
         branches: typing.Optional[typing.Sequence[builtins.str]] = None,
         container: typing.Optional[typing.Union[_ContainerOptions_f50907af, typing.Dict[builtins.str, typing.Any]]] = None,
+        env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         git_identity: typing.Optional[typing.Union[_GitIdentity_6effc3de, typing.Dict[builtins.str, typing.Any]]] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
         permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -11262,7 +12913,8 @@ class UpgradeDependenciesWorkflowOptions:
         :param assignees: (experimental) Assignees to add on the PR. Default: - no assignees
         :param branches: (experimental) List of branches to create PR's for. Default: - All release branches configured for the project.
         :param container: (experimental) Job container options. Default: - defaults
-        :param git_identity: (experimental) The git identity to use for commits. Default: "github-actions@github.com"
+        :param env: (experimental) Build environment variables for the upgrade job. Default: {}
+        :param git_identity: (experimental) The git identity to use for commits. Default: - default GitHub Actions user
         :param labels: (experimental) Labels to apply on the PR. Default: - no labels.
         :param permissions: (experimental) Permissions granted to the upgrade job To limit job permissions for ``contents``, the desired permissions have to be explicitly set, e.g.: ``{ contents: JobPermission.NONE }``. Default: ``{ contents: JobPermission.READ }``
         :param projen_credentials: (experimental) Choose a method for authenticating with GitHub for creating the PR. When using the default github token, PR's created by this workflow will not trigger any subsequent workflows (i.e the build workflow), so projen requires API access to be provided through e.g. a personal access token or other method. Default: - personal access token named PROJEN_GITHUB_TOKEN
@@ -11285,6 +12937,7 @@ class UpgradeDependenciesWorkflowOptions:
             check_type(argname="argument assignees", value=assignees, expected_type=type_hints["assignees"])
             check_type(argname="argument branches", value=branches, expected_type=type_hints["branches"])
             check_type(argname="argument container", value=container, expected_type=type_hints["container"])
+            check_type(argname="argument env", value=env, expected_type=type_hints["env"])
             check_type(argname="argument git_identity", value=git_identity, expected_type=type_hints["git_identity"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
             check_type(argname="argument permissions", value=permissions, expected_type=type_hints["permissions"])
@@ -11299,6 +12952,8 @@ class UpgradeDependenciesWorkflowOptions:
             self._values["branches"] = branches
         if container is not None:
             self._values["container"] = container
+        if env is not None:
+            self._values["env"] = env
         if git_identity is not None:
             self._values["git_identity"] = git_identity
         if labels is not None:
@@ -11347,11 +13002,22 @@ class UpgradeDependenciesWorkflowOptions:
         result = self._values.get("container")
         return typing.cast(typing.Optional[_ContainerOptions_f50907af], result)
 
+    @builtins.property
+    def env(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables for the upgrade job.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def git_identity(self) -> typing.Optional[_GitIdentity_6effc3de]:
         '''(experimental) The git identity to use for commits.
 
-        :default: "github-actions@github.com"
+        :default: - default GitHub Actions user
 
         :stability: experimental
         '''
@@ -14156,10 +15822,23 @@ class YarnrcOptions:
         "watch_task": "watchTask",
         "platform": "platform",
         "target": "target",
+        "banner": "banner",
+        "charset": "charset",
+        "define": "define",
+        "esbuild_args": "esbuildArgs",
         "executable": "executable",
+        "footer": "footer",
         "format": "format",
+        "inject": "inject",
+        "keep_names": "keepNames",
         "loaders": "loaders",
+        "log_level": "logLevel",
+        "main_fields": "mainFields",
+        "metafile": "metafile",
+        "minify": "minify",
         "outfile": "outfile",
+        "source_map_mode": "sourceMapMode",
+        "sources_content": "sourcesContent",
         "tsconfig_path": "tsconfigPath",
     },
 )
@@ -14172,10 +15851,23 @@ class AddBundleOptions(BundlingOptions):
         watch_task: typing.Optional[builtins.bool] = None,
         platform: builtins.str,
         target: builtins.str,
+        banner: typing.Optional[builtins.str] = None,
+        charset: typing.Optional[Charset] = None,
+        define: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        esbuild_args: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]] = None,
         executable: typing.Optional[builtins.bool] = None,
+        footer: typing.Optional[builtins.str] = None,
         format: typing.Optional[builtins.str] = None,
+        inject: typing.Optional[typing.Sequence[builtins.str]] = None,
+        keep_names: typing.Optional[builtins.bool] = None,
         loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        log_level: typing.Optional[BundleLogLevel] = None,
+        main_fields: typing.Optional[typing.Sequence[builtins.str]] = None,
+        metafile: typing.Optional[builtins.bool] = None,
+        minify: typing.Optional[builtins.bool] = None,
         outfile: typing.Optional[builtins.str] = None,
+        source_map_mode: typing.Optional[SourceMapMode] = None,
+        sources_content: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
     ) -> None:
         '''(experimental) Options for ``addBundle()``.
@@ -14185,10 +15877,23 @@ class AddBundleOptions(BundlingOptions):
         :param watch_task: (experimental) In addition to the ``bundle:xyz`` task, creates ``bundle:xyz:watch`` task which will invoke the same esbuild command with the ``--watch`` flag. This can be used to continusouly watch for changes. Default: true
         :param platform: (experimental) esbuild platform.
         :param target: (experimental) esbuild target.
+        :param banner: (experimental) Use this to insert an arbitrary string at the beginning of generated JavaScript files. This is similar to footer which inserts at the end instead of the beginning. This is commonly used to insert comments: Default: - no comments are passed
+        :param charset: (experimental) The charset to use for esbuild's output. By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped using backslash escape sequences. Using escape sequences makes the generated output slightly bigger, and also makes it harder to read. If you would like for esbuild to print the original characters without using escape sequences, use ``Charset.UTF8``. Default: Charset.ASCII
+        :param define: (experimental) Replace global identifiers with constant expressions. For example, ``{ 'process.env.DEBUG': 'true' }``. Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``. Default: - no replacements are made
+        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node22", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
         :param executable: (experimental) Mark the output file as executable. Default: false
+        :param footer: (experimental) Use this to insert an arbitrary string at the end of generated JavaScript files. This is similar to banner which inserts at the beginning instead of the end. This is commonly used to insert comments Default: - no comments are passed
         :param format: (experimental) Output format for the generated JavaScript files. There are currently three possible values that can be configured: ``"iife"``, ``"cjs"``, and ``"esm"``. If not set (``undefined``), esbuild picks an output format for you based on ``platform``: - ``"cjs"`` if ``platform`` is ``"node"`` - ``"iife"`` if ``platform`` is ``"browser"`` - ``"esm"`` if ``platform`` is ``"neutral"`` Note: If making a bundle to run under node with ESM, set ``format`` to ``"esm"`` instead of setting ``platform`` to ``"neutral"``. Default: undefined
+        :param inject: (experimental) This option allows you to automatically replace a global variable with an import from another file. Default: - no code is injected
+        :param keep_names: (experimental) Whether to preserve the original ``name`` values even in minified code. In JavaScript the ``name`` property on functions and classes defaults to a nearby identifier in the source code. However, minification renames symbols to reduce code size and bundling sometimes need to rename symbols to avoid collisions. That changes value of the ``name`` property for many of these cases. This is usually fine because the ``name`` property is normally only used for debugging. However, some frameworks rely on the ``name`` property for registration and binding purposes. If this is the case, you can enable this option to preserve the original ``name`` values even in minified code. Default: false
         :param loaders: (experimental) Map of file extensions (without dot) and loaders to use for this file type. Loaders are appended to the esbuild command by ``--loader:.extension=loader``
+        :param log_level: (experimental) Log level for esbuild. This is also propagated to the package manager and applies to its specific install command. Default: LogLevel.WARNING
+        :param main_fields: (experimental) How to determine the entry point for modules. Try ['module', 'main'] to default to ES module versions. Default: []
+        :param metafile: (experimental) This option tells esbuild to write out a JSON file relative to output directory with metadata about the build. The metadata in this JSON file follows this schema (specified using TypeScript syntax):: { outputs: { [path: string]: { bytes: number inputs: { [path: string]: { bytesInOutput: number } } imports: { path: string }[] exports: string[] } } } This data can then be analyzed by other tools. For example, bundle buddy can consume esbuild's metadata format and generates a treemap visualization of the modules in your bundle and how much space each one takes up. Default: false
+        :param minify: (experimental) Whether to minify files when bundling. Default: false
         :param outfile: (experimental) Bundler output path relative to the asset's output directory. Default: "index.js"
+        :param source_map_mode: (experimental) Source map mode to be used when bundling. Default: SourceMapMode.DEFAULT
+        :param sources_content: (experimental) Whether to include original source code in source maps when bundling. Default: true
         :param tsconfig_path: (experimental) The path of the tsconfig.json file to use for bundling. Default: "tsconfig.json"
 
         :stability: experimental
@@ -14200,10 +15905,23 @@ class AddBundleOptions(BundlingOptions):
             check_type(argname="argument watch_task", value=watch_task, expected_type=type_hints["watch_task"])
             check_type(argname="argument platform", value=platform, expected_type=type_hints["platform"])
             check_type(argname="argument target", value=target, expected_type=type_hints["target"])
+            check_type(argname="argument banner", value=banner, expected_type=type_hints["banner"])
+            check_type(argname="argument charset", value=charset, expected_type=type_hints["charset"])
+            check_type(argname="argument define", value=define, expected_type=type_hints["define"])
+            check_type(argname="argument esbuild_args", value=esbuild_args, expected_type=type_hints["esbuild_args"])
             check_type(argname="argument executable", value=executable, expected_type=type_hints["executable"])
+            check_type(argname="argument footer", value=footer, expected_type=type_hints["footer"])
             check_type(argname="argument format", value=format, expected_type=type_hints["format"])
+            check_type(argname="argument inject", value=inject, expected_type=type_hints["inject"])
+            check_type(argname="argument keep_names", value=keep_names, expected_type=type_hints["keep_names"])
             check_type(argname="argument loaders", value=loaders, expected_type=type_hints["loaders"])
+            check_type(argname="argument log_level", value=log_level, expected_type=type_hints["log_level"])
+            check_type(argname="argument main_fields", value=main_fields, expected_type=type_hints["main_fields"])
+            check_type(argname="argument metafile", value=metafile, expected_type=type_hints["metafile"])
+            check_type(argname="argument minify", value=minify, expected_type=type_hints["minify"])
             check_type(argname="argument outfile", value=outfile, expected_type=type_hints["outfile"])
+            check_type(argname="argument source_map_mode", value=source_map_mode, expected_type=type_hints["source_map_mode"])
+            check_type(argname="argument sources_content", value=sources_content, expected_type=type_hints["sources_content"])
             check_type(argname="argument tsconfig_path", value=tsconfig_path, expected_type=type_hints["tsconfig_path"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
             "platform": platform,
@@ -14215,14 +15933,40 @@ class AddBundleOptions(BundlingOptions):
             self._values["sourcemap"] = sourcemap
         if watch_task is not None:
             self._values["watch_task"] = watch_task
+        if banner is not None:
+            self._values["banner"] = banner
+        if charset is not None:
+            self._values["charset"] = charset
+        if define is not None:
+            self._values["define"] = define
+        if esbuild_args is not None:
+            self._values["esbuild_args"] = esbuild_args
         if executable is not None:
             self._values["executable"] = executable
+        if footer is not None:
+            self._values["footer"] = footer
         if format is not None:
             self._values["format"] = format
+        if inject is not None:
+            self._values["inject"] = inject
+        if keep_names is not None:
+            self._values["keep_names"] = keep_names
         if loaders is not None:
             self._values["loaders"] = loaders
+        if log_level is not None:
+            self._values["log_level"] = log_level
+        if main_fields is not None:
+            self._values["main_fields"] = main_fields
+        if metafile is not None:
+            self._values["metafile"] = metafile
+        if minify is not None:
+            self._values["minify"] = minify
         if outfile is not None:
             self._values["outfile"] = outfile
+        if source_map_mode is not None:
+            self._values["source_map_mode"] = source_map_mode
+        if sources_content is not None:
+            self._values["sources_content"] = sources_content
         if tsconfig_path is not None:
             self._values["tsconfig_path"] = tsconfig_path
 
@@ -14302,6 +16046,78 @@ class AddBundleOptions(BundlingOptions):
         assert result is not None, "Required property 'target' is missing"
         return typing.cast(builtins.str, result)
 
+    @builtins.property
+    def banner(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Use this to insert an arbitrary string at the beginning of generated JavaScript files.
+
+        This is similar to footer which inserts at the end instead of the beginning.
+
+        This is commonly used to insert comments:
+
+        :default: - no comments are passed
+
+        :stability: experimental
+        '''
+        result = self._values.get("banner")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def charset(self) -> typing.Optional[Charset]:
+        '''(experimental) The charset to use for esbuild's output.
+
+        By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped
+        using backslash escape sequences. Using escape sequences makes the generated output
+        slightly bigger, and also makes it harder to read. If you would like for esbuild to print
+        the original characters without using escape sequences, use ``Charset.UTF8``.
+
+        :default: Charset.ASCII
+
+        :see: https://esbuild.github.io/api/#charset
+        :stability: experimental
+        '''
+        result = self._values.get("charset")
+        return typing.cast(typing.Optional[Charset], result)
+
+    @builtins.property
+    def define(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Replace global identifiers with constant expressions.
+
+        For example, ``{ 'process.env.DEBUG': 'true' }``.
+
+        Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``.
+
+        :default: - no replacements are made
+
+        :stability: experimental
+        '''
+        result = self._values.get("define")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
+    @builtins.property
+    def esbuild_args(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]]:
+        '''(experimental) Build arguments to pass into esbuild.
+
+        For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag::
+
+           project.bundler.addBundle("./src/hello.ts", {
+             platform: "node",
+             target: "node22",
+             sourcemap: true,
+             format: "esm",
+             esbuildArgs: {
+               "--log-limit": "0",
+             },
+           });
+
+        :default: - no additional esbuild arguments are passed
+
+        :stability: experimental
+        '''
+        result = self._values.get("esbuild_args")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]], result)
+
     @builtins.property
     def executable(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Mark the output file as executable.
@@ -14313,6 +16129,21 @@ class AddBundleOptions(BundlingOptions):
         result = self._values.get("executable")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def footer(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Use this to insert an arbitrary string at the end of generated JavaScript files.
+
+        This is similar to banner which inserts at the beginning instead of the end.
+
+        This is commonly used to insert comments
+
+        :default: - no comments are passed
+
+        :stability: experimental
+        '''
+        result = self._values.get("footer")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def format(self) -> typing.Optional[builtins.str]:
         '''(experimental) Output format for the generated JavaScript files.
@@ -14335,6 +16166,40 @@ class AddBundleOptions(BundlingOptions):
         result = self._values.get("format")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def inject(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) This option allows you to automatically replace a global variable with an import from another file.
+
+        :default: - no code is injected
+
+        :see: https://esbuild.github.io/api/#inject
+        :stability: experimental
+        '''
+        result = self._values.get("inject")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def keep_names(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether to preserve the original ``name`` values even in minified code.
+
+        In JavaScript the ``name`` property on functions and classes defaults to a
+        nearby identifier in the source code.
+
+        However, minification renames symbols to reduce code size and bundling
+        sometimes need to rename symbols to avoid collisions. That changes value of
+        the ``name`` property for many of these cases. This is usually fine because
+        the ``name`` property is normally only used for debugging. However, some
+        frameworks rely on the ``name`` property for registration and binding purposes.
+        If this is the case, you can enable this option to preserve the original
+        ``name`` values even in minified code.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("keep_names")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def loaders(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
         '''(experimental) Map of file extensions (without dot) and loaders to use for this file type.
@@ -14346,6 +16211,75 @@ class AddBundleOptions(BundlingOptions):
         result = self._values.get("loaders")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
+    @builtins.property
+    def log_level(self) -> typing.Optional[BundleLogLevel]:
+        '''(experimental) Log level for esbuild.
+
+        This is also propagated to the package manager and
+        applies to its specific install command.
+
+        :default: LogLevel.WARNING
+
+        :stability: experimental
+        '''
+        result = self._values.get("log_level")
+        return typing.cast(typing.Optional[BundleLogLevel], result)
+
+    @builtins.property
+    def main_fields(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) How to determine the entry point for modules.
+
+        Try ['module', 'main'] to default to ES module versions.
+
+        :default: []
+
+        :stability: experimental
+        '''
+        result = self._values.get("main_fields")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def metafile(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) This option tells esbuild to write out a JSON file relative to output directory with metadata about the build.
+
+        The metadata in this JSON file follows this schema (specified using TypeScript syntax)::
+
+           {
+             outputs: {
+               [path: string]: {
+                 bytes: number
+                 inputs: {
+                   [path: string]: { bytesInOutput: number }
+                 }
+                 imports: { path: string }[]
+                 exports: string[]
+               }
+             }
+           }
+
+        This data can then be analyzed by other tools. For example,
+        bundle buddy can consume esbuild's metadata format and generates a treemap visualization
+        of the modules in your bundle and how much space each one takes up.
+
+        :default: false
+
+        :see: https://esbuild.github.io/api/#metafile
+        :stability: experimental
+        '''
+        result = self._values.get("metafile")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def minify(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether to minify files when bundling.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("minify")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def outfile(self) -> typing.Optional[builtins.str]:
         '''(experimental) Bundler output path relative to the asset's output directory.
@@ -14357,6 +16291,30 @@ class AddBundleOptions(BundlingOptions):
         result = self._values.get("outfile")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def source_map_mode(self) -> typing.Optional[SourceMapMode]:
+        '''(experimental) Source map mode to be used when bundling.
+
+        :default: SourceMapMode.DEFAULT
+
+        :see: https://esbuild.github.io/api/#sourcemap
+        :stability: experimental
+        '''
+        result = self._values.get("source_map_mode")
+        return typing.cast(typing.Optional[SourceMapMode], result)
+
+    @builtins.property
+    def sources_content(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether to include original source code in source maps when bundling.
+
+        :default: true
+
+        :see: https://esbuild.github.io/api/#sources-content
+        :stability: experimental
+        '''
+        result = self._values.get("sources_content")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def tsconfig_path(self) -> typing.Optional[builtins.str]:
         '''(experimental) The path of the tsconfig.json file to use for bundling.
@@ -14383,23 +16341,31 @@ class AddBundleOptions(BundlingOptions):
 __all__ = [
     "AddBundleOptions",
     "ArrowParens",
+    "AuditOptions",
     "AutoRelease",
+    "Biome",
+    "BiomeOptions",
+    "BuildWorkflowOptions",
     "Bundle",
+    "BundleLogLevel",
     "Bundler",
     "BundlerOptions",
     "BundlingOptions",
+    "Charset",
     "CodeArtifactAuthProvider",
     "CodeArtifactOptions",
     "CoverageThreshold",
     "EmbeddedLanguageFormatting",
     "EndOfLine",
     "Eslint",
+    "EslintCommandOptions",
     "EslintOptions",
     "EslintOverride",
     "HTMLWhitespaceSensitivity",
     "HasteConfig",
     "Jest",
     "JestConfigOptions",
+    "JestDiscoverTestMatchPatternsForDirsOptions",
     "JestOptions",
     "JestReporter",
     "LicenseChecker",
@@ -14422,12 +16388,15 @@ __all__ = [
     "ProseWrap",
     "QuoteProps",
     "RenderWorkflowSetupOptions",
+    "RunBundleTask",
     "ScopedPackagesOptions",
+    "SourceMapMode",
     "TrailingComma",
     "Transform",
     "TypeScriptCompilerOptions",
     "TypeScriptImportsNotUsedAsValues",
     "TypeScriptJsxMode",
+    "TypeScriptModuleDetection",
     "TypeScriptModuleResolution",
     "TypescriptConfig",
     "TypescriptConfigExtends",
@@ -14461,10 +16430,74 @@ __all__ = [
     "YarnWorkerPoolMode",
     "Yarnrc",
     "YarnrcOptions",
+    "biome_config",
 ]
 
 publication.publish()
 
+# Loading modules to ensure their types are registered with the jsii runtime library
+from . import biome_config
+
+def _typecheckingstub__fa4156d4e0a4a5a2efe965ea98ba35b587dcbfe01e1b4d659a959bcf54294ed2(
+    *,
+    level: typing.Optional[builtins.str] = None,
+    prod_only: typing.Optional[builtins.bool] = None,
+    run_on: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9f2264088409136f62af7e2ac4488206c06c3b9a69056be8b9ead20ab895f1bc(
+    project: NodeProject,
+    *,
+    assist: typing.Optional[builtins.bool] = None,
+    biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+    formatter: typing.Optional[builtins.bool] = None,
+    ignore_generated_files: typing.Optional[builtins.bool] = None,
+    linter: typing.Optional[builtins.bool] = None,
+    merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+    version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02197aa3a69f17c43ff359679227be724559aba6ef0881da4e04e9a0bf66d078(
+    project: _Project_57d89203,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5609a4432d207b19ee177e477fdf5e275031b8ec1346b00ac4bbfdf93f688757(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b53a2988afa9afc23bda2fe96e2de8ffaff18ab919e00b69a6c8d3d229f3dcc1(
+    *,
+    assist: typing.Optional[builtins.bool] = None,
+    biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+    formatter: typing.Optional[builtins.bool] = None,
+    ignore_generated_files: typing.Optional[builtins.bool] = None,
+    linter: typing.Optional[builtins.bool] = None,
+    merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+    version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__12c3595783c38c358dfa0cc66282771c2ed2020f0770e8379920bb5731b72372(
+    *,
+    env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    name: typing.Optional[builtins.str] = None,
+    permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
+    pre_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
+    workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
+    mutable_build: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__61e51544f8a1488a41b14a0ee08df5b86eb83b8852c5ea8c95747007b7c012de(
     *,
     bundle_task: _Task_9fa875b6,
@@ -14482,6 +16515,7 @@ def _typecheckingstub__b39a2a4441a612906ad5a7b87f1a6c53ed88fb86f4e31bd1a7283a06a
     assets_dir: typing.Optional[builtins.str] = None,
     esbuild_version: typing.Optional[builtins.str] = None,
     loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    run_bundle_task: typing.Optional[RunBundleTask] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -14497,10 +16531,23 @@ def _typecheckingstub__5b3fe067eb8c7b6b184c855eea4d40743f016f5de6e522e14523a7e76
     *,
     platform: builtins.str,
     target: builtins.str,
+    banner: typing.Optional[builtins.str] = None,
+    charset: typing.Optional[Charset] = None,
+    define: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    esbuild_args: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]] = None,
     executable: typing.Optional[builtins.bool] = None,
+    footer: typing.Optional[builtins.str] = None,
     format: typing.Optional[builtins.str] = None,
+    inject: typing.Optional[typing.Sequence[builtins.str]] = None,
+    keep_names: typing.Optional[builtins.bool] = None,
     loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    log_level: typing.Optional[BundleLogLevel] = None,
+    main_fields: typing.Optional[typing.Sequence[builtins.str]] = None,
+    metafile: typing.Optional[builtins.bool] = None,
+    minify: typing.Optional[builtins.bool] = None,
     outfile: typing.Optional[builtins.str] = None,
+    source_map_mode: typing.Optional[SourceMapMode] = None,
+    sources_content: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
     externals: typing.Optional[typing.Sequence[builtins.str]] = None,
     sourcemap: typing.Optional[builtins.bool] = None,
@@ -14515,6 +16562,7 @@ def _typecheckingstub__10a14ca8f2b867bbbf0d45b5661abe92e6975540f78ea16f7ed21f5f2
     assets_dir: typing.Optional[builtins.str] = None,
     esbuild_version: typing.Optional[builtins.str] = None,
     loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    run_bundle_task: typing.Optional[RunBundleTask] = None,
 ) -> None:
     """Type checking stubs"""
     pass
@@ -14554,12 +16602,14 @@ def _typecheckingstub__41d20792db723180b2558eb351d1b15e6cc51985fdc95dd8481c5fae7
     dirs: typing.Sequence[builtins.str],
     alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
     file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
     lint_projen_rc: typing.Optional[builtins.bool] = None,
     lint_projen_rc_file: typing.Optional[builtins.str] = None,
     prettier: typing.Optional[builtins.bool] = None,
+    sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
     ts_always_try_types: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
     yaml: typing.Optional[builtins.bool] = None,
@@ -14609,17 +16659,27 @@ def _typecheckingstub__45c512f160dd2d4145e1c0d43de9571ffe4d89e10b34c7d9a7b9fbba3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ab5437a5e5c0bee91b2bed562cbb0dc9e80e748c8ca3251df4c2eb91ea3a4160(
+    *,
+    extra_args: typing.Optional[typing.Sequence[builtins.str]] = None,
+    fix: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__26892c968b7bf4d64dd2597bbdabf1f1e9ced92002225a4eedfae6cbe3c22894(
     *,
     dirs: typing.Sequence[builtins.str],
     alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
     file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
     lint_projen_rc: typing.Optional[builtins.bool] = None,
     lint_projen_rc_file: typing.Optional[builtins.str] = None,
     prettier: typing.Optional[builtins.bool] = None,
+    sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
     ts_always_try_types: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
     yaml: typing.Optional[builtins.bool] = None,
@@ -14651,7 +16711,7 @@ def _typecheckingstub__1d0f97663aee053bcca0e3b33c8be45ef5c6271b8e0c683a67d717aa9
     pass
 
 def _typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc46ab7738(
-    project: NodeProject,
+    scope: _constructs_77d1e7e8.IConstruct,
     *,
     config_file_path: typing.Optional[builtins.str] = None,
     coverage: typing.Optional[builtins.bool] = None,
@@ -14661,6 +16721,7 @@ def _typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc4
     jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     jest_version: typing.Optional[builtins.str] = None,
     junit_reporting: typing.Optional[builtins.bool] = None,
+    pass_with_no_tests: typing.Optional[builtins.bool] = None,
     preserve_default_reporters: typing.Optional[builtins.bool] = None,
     update_snapshot: typing.Optional[UpdateSnapshot] = None,
 ) -> None:
@@ -14733,6 +16794,14 @@ def _typecheckingstub__340f8ef9eed036d2e1af02ee13866e070b25e032c7262d1181adf28bb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0681a729d70e1f1999defc63f8a0f12400f6e0b609f4fb8dbf7f858c435cd9b1(
+    dirs: typing.Sequence[builtins.str],
+    *,
+    file_extension_pattern: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__38439e86b40e7bc302e4faa48880e15ba8a10e5a2769a5b73cbf33a01a318752(
     *,
     additional_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -14805,6 +16874,13 @@ def _typecheckingstub__38439e86b40e7bc302e4faa48880e15ba8a10e5a2769a5b73cbf33a01
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__987ab5c64454683ddeb28bad78f44cdd78a2099af6a0e44ff92f50bc40f8e486(
+    *,
+    file_extension_pattern: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6fea73c8bcc51e881c3829384cb90956e3310a1a08296d32da54fc51bd1b0872(
     *,
     config_file_path: typing.Optional[builtins.str] = None,
@@ -14815,6 +16891,7 @@ def _typecheckingstub__6fea73c8bcc51e881c3829384cb90956e3310a1a08296d32da54fc51b
     jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     jest_version: typing.Optional[builtins.str] = None,
     junit_reporting: typing.Optional[builtins.bool] = None,
+    pass_with_no_tests: typing.Optional[builtins.bool] = None,
     preserve_default_reporters: typing.Optional[builtins.bool] = None,
     update_snapshot: typing.Optional[UpdateSnapshot] = None,
 ) -> None:
@@ -14864,6 +16941,7 @@ def _typecheckingstub__d10cd20471c8ed8e2de153476379f00bfa1b587c92e8982006812a0e3
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -14876,9 +16954,11 @@ def _typecheckingstub__d10cd20471c8ed8e2de153476379f00bfa1b587c92e8982006812a0e3
     max_node_version: typing.Optional[builtins.str] = None,
     min_node_version: typing.Optional[builtins.str] = None,
     npm_access: typing.Optional[NpmAccess] = None,
+    npm_provenance: typing.Optional[builtins.bool] = None,
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -14999,6 +17079,7 @@ def _typecheckingstub__32555a77b63910142de45100c4a6d74880ddece00a3cbae9c27803467
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -15011,9 +17092,11 @@ def _typecheckingstub__32555a77b63910142de45100c4a6d74880ddece00a3cbae9c27803467
     max_node_version: typing.Optional[builtins.str] = None,
     min_node_version: typing.Optional[builtins.str] = None,
     npm_access: typing.Optional[NpmAccess] = None,
+    npm_provenance: typing.Optional[builtins.bool] = None,
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15161,6 +17244,7 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -15173,9 +17257,11 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     max_node_version: typing.Optional[builtins.str] = None,
     min_node_version: typing.Optional[builtins.str] = None,
     npm_access: typing.Optional[NpmAccess] = None,
+    npm_provenance: typing.Optional[builtins.bool] = None,
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15187,9 +17273,11 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     stability: typing.Optional[builtins.str] = None,
     yarn_berry_options: typing.Optional[typing.Union[YarnBerryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
+    bump_package: typing.Optional[builtins.str] = None,
     jsii_release_version: typing.Optional[builtins.str] = None,
     major_version: typing.Optional[jsii.Number] = None,
     min_major_version: typing.Optional[jsii.Number] = None,
+    next_version_command: typing.Optional[builtins.str] = None,
     npm_dist_tag: typing.Optional[builtins.str] = None,
     post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
     prerelease: typing.Optional[builtins.str] = None,
@@ -15197,12 +17285,14 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     publish_tasks: typing.Optional[builtins.bool] = None,
     releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
     release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+    release_environment: typing.Optional[builtins.str] = None,
     release_every_commit: typing.Optional[builtins.bool] = None,
     release_failure_issue: typing.Optional[builtins.bool] = None,
     release_failure_issue_label: typing.Optional[builtins.str] = None,
     release_schedule: typing.Optional[builtins.str] = None,
     release_tag_prefix: typing.Optional[builtins.str] = None,
     release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+    release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     release_workflow_name: typing.Optional[builtins.str] = None,
     release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
     versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -15211,8 +17301,13 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     workflow_runs_on_group: typing.Optional[typing.Union[_GroupRunnerOptions_148c59c1, typing.Dict[builtins.str, typing.Any]]] = None,
     default_release_branch: builtins.str,
     artifacts_directory: typing.Optional[builtins.str] = None,
+    audit_deps: typing.Optional[builtins.bool] = None,
+    audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+    biome: typing.Optional[builtins.bool] = None,
+    biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     build_workflow: typing.Optional[builtins.bool] = None,
+    build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
     bundler_options: typing.Optional[typing.Union[BundlerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     check_licenses: typing.Optional[typing.Union[LicenseCheckerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15408,12 +17503,16 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     allow_importing_ts_extensions: typing.Optional[builtins.bool] = None,
     allow_js: typing.Optional[builtins.bool] = None,
     allow_synthetic_default_imports: typing.Optional[builtins.bool] = None,
+    allow_unreachable_code: typing.Optional[builtins.bool] = None,
+    allow_unused_labels: typing.Optional[builtins.bool] = None,
     always_strict: typing.Optional[builtins.bool] = None,
     base_url: typing.Optional[builtins.str] = None,
+    check_js: typing.Optional[builtins.bool] = None,
     custom_conditions: typing.Optional[typing.Sequence[builtins.str]] = None,
     declaration: typing.Optional[builtins.bool] = None,
     declaration_dir: typing.Optional[builtins.str] = None,
     declaration_map: typing.Optional[builtins.bool] = None,
+    downlevel_iteration: typing.Optional[builtins.bool] = None,
     emit_declaration_only: typing.Optional[builtins.bool] = None,
     emit_decorator_metadata: typing.Optional[builtins.bool] = None,
     es_module_interop: typing.Optional[builtins.bool] = None,
@@ -15421,6 +17520,7 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     experimental_decorators: typing.Optional[builtins.bool] = None,
     force_consistent_casing_in_file_names: typing.Optional[builtins.bool] = None,
     imports_not_used_as_values: typing.Optional[TypeScriptImportsNotUsedAsValues] = None,
+    incremental: typing.Optional[builtins.bool] = None,
     inline_source_map: typing.Optional[builtins.bool] = None,
     inline_sources: typing.Optional[builtins.bool] = None,
     isolated_modules: typing.Optional[builtins.bool] = None,
@@ -15428,6 +17528,7 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     jsx_import_source: typing.Optional[builtins.str] = None,
     lib: typing.Optional[typing.Sequence[builtins.str]] = None,
     module: typing.Optional[builtins.str] = None,
+    module_detection: typing.Optional[TypeScriptModuleDetection] = None,
     module_resolution: typing.Optional[TypeScriptModuleResolution] = None,
     no_emit: typing.Optional[builtins.bool] = None,
     no_emit_on_error: typing.Optional[builtins.bool] = None,
@@ -15454,6 +17555,8 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     strict_property_initialization: typing.Optional[builtins.bool] = None,
     strip_internal: typing.Optional[builtins.bool] = None,
     target: typing.Optional[builtins.str] = None,
+    ts_build_info_file: typing.Optional[builtins.str] = None,
+    type_roots: typing.Optional[typing.Sequence[builtins.str]] = None,
     types: typing.Optional[typing.Sequence[builtins.str]] = None,
     use_unknown_in_catch_variables: typing.Optional[builtins.bool] = None,
     verbatim_module_syntax: typing.Optional[builtins.bool] = None,
@@ -15464,7 +17567,7 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
 def _typecheckingstub__bdd8e9cd126102b8184e52538d49523cef64724ec6ad410a5e2d5169e1ef0fe0(
     project: _Project_57d89203,
     *,
-    compiler_options: typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]],
+    compiler_options: typing.Optional[typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     extends: typing.Optional[TypescriptConfigExtends] = None,
     file_name: typing.Optional[builtins.str] = None,
@@ -15491,6 +17594,18 @@ def _typecheckingstub__ecc6431d5d9f322d469f99e5739da10bb780beb09da03305a82dac281
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9f78586828830a46219bc19d7af8c53b4b5a1cc2bc1a03491930c9271790f10a(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__85556ff93e412b3ea5e894bc7d7669275e51dfae8c077378748d8053a46e4946(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c4b076d47872be6e9462b52280fba0e6d5509d09e6f0c405542d8edb8b704f3d(
     config_path: builtins.str,
 ) -> None:
@@ -15511,7 +17626,7 @@ def _typecheckingstub__4bb44c1fe8356fe5ed46d657b7a5c3f2198926eaf1f5780cf30a365a3
 
 def _typecheckingstub__f928658806d66c2cd4f3977b17ae3d10092cf4b9afb10e736c01729b7451dbb9(
     *,
-    compiler_options: typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]],
+    compiler_options: typing.Optional[typing.Union[TypeScriptCompilerOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     extends: typing.Optional[TypescriptConfigExtends] = None,
     file_name: typing.Optional[builtins.str] = None,
@@ -15523,8 +17638,10 @@ def _typecheckingstub__f928658806d66c2cd4f3977b17ae3d10092cf4b9afb10e736c01729b7
 def _typecheckingstub__497e18a2c8dc3200cff8b21dfad7c418d29517aa6d67e2a2555ee78fa63ff385(
     project: NodeProject,
     *,
+    cooldown: typing.Optional[jsii.Number] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     include: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include_deprecated_versions: typing.Optional[builtins.bool] = None,
     pull_request_title: typing.Optional[builtins.str] = None,
     satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
     semantic_commit: typing.Optional[builtins.str] = None,
@@ -15552,8 +17669,10 @@ def _typecheckingstub__66ba20de6f144f37e582e192e3ed592a6be0e8bc3d10e3b730af62082
 
 def _typecheckingstub__0f7b896c11469470869bc4bfc86c9bb13fd308223e316ba71124c00b5709af1e(
     *,
+    cooldown: typing.Optional[jsii.Number] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     include: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include_deprecated_versions: typing.Optional[builtins.bool] = None,
     pull_request_title: typing.Optional[builtins.str] = None,
     satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
     semantic_commit: typing.Optional[builtins.str] = None,
@@ -15578,6 +17697,7 @@ def _typecheckingstub__59fa39c2475322c21b2f7d03f2f2ada171b7e546b1d88beb8a75baa82
     assignees: typing.Optional[typing.Sequence[builtins.str]] = None,
     branches: typing.Optional[typing.Sequence[builtins.str]] = None,
     container: typing.Optional[typing.Union[_ContainerOptions_f50907af, typing.Dict[builtins.str, typing.Any]]] = None,
+    env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     git_identity: typing.Optional[typing.Union[_GitIdentity_6effc3de, typing.Dict[builtins.str, typing.Any]]] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
     permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15878,10 +17998,23 @@ def _typecheckingstub__fda879bb1fe52a68839c7634ab5ab9f2cedf7154361c8a0487248d72b
     watch_task: typing.Optional[builtins.bool] = None,
     platform: builtins.str,
     target: builtins.str,
+    banner: typing.Optional[builtins.str] = None,
+    charset: typing.Optional[Charset] = None,
+    define: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    esbuild_args: typing.Optional[typing.Mapping[builtins.str, typing.Union[builtins.str, builtins.bool]]] = None,
     executable: typing.Optional[builtins.bool] = None,
+    footer: typing.Optional[builtins.str] = None,
     format: typing.Optional[builtins.str] = None,
+    inject: typing.Optional[typing.Sequence[builtins.str]] = None,
+    keep_names: typing.Optional[builtins.bool] = None,
     loaders: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    log_level: typing.Optional[BundleLogLevel] = None,
+    main_fields: typing.Optional[typing.Sequence[builtins.str]] = None,
+    metafile: typing.Optional[builtins.bool] = None,
+    minify: typing.Optional[builtins.bool] = None,
     outfile: typing.Optional[builtins.str] = None,
+    source_map_mode: typing.Optional[SourceMapMode] = None,
+    sources_content: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
 ) -> None:
     """Type checking stubs"""