projen 0.81.17__py3-none-any.whl → 0.98.25__py3-none-any.whl

projen/javascript/__init__.py

@@ -11,7 +11,22 @@ import jsii
 import publication
 import typing_extensions
 
-from typeguard import check_type
+import typeguard
+from importlib.metadata import version as _metadata_package_version
+TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
+
+def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
+    if TYPEGUARD_MAJOR_VERSION <= 2:
+        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
+    else:
+        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
+           pass
+        else:
+            if TYPEGUARD_MAJOR_VERSION == 3:
+                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
+                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
+            else:
+                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
 
 from .._jsii import *
 
@@ -21,10 +36,12 @@ from .. import (
     DependencyType as _DependencyType_6b786d68,
     GitOptions as _GitOptions_a65916a3,
     GroupRunnerOptions as _GroupRunnerOptions_148c59c1,
+    ICompareString as _ICompareString_f119e19c,
     IgnoreFile as _IgnoreFile_3df2076a,
     IgnoreFileOptions as _IgnoreFileOptions_86c48b91,
     JsonFile as _JsonFile_fa8164db,
     LoggerOptions as _LoggerOptions_eb0f6309,
+    ObjectFile as _ObjectFile_a34b4727,
     Project as _Project_57d89203,
     ProjectType as _ProjectType_fd80c725,
     ProjenrcFile as _ProjenrcFile_50432c7e,
@@ -66,6 +83,7 @@ from ..release import (
     ReleaseProjectOptions as _ReleaseProjectOptions_929803c8,
     ReleaseTrigger as _ReleaseTrigger_e4dc221f,
 )
+from .biome_config import BiomeConfiguration as _BiomeConfiguration_dd1a6c83
 
 
 @jsii.enum(jsii_type="projen.javascript.ArrowParens")
@@ -90,6 +108,92 @@ class ArrowParens(enum.Enum):
     '''
 
 
+@jsii.data_type(
+    jsii_type="projen.javascript.AuditOptions",
+    jsii_struct_bases=[],
+    name_mapping={"level": "level", "prod_only": "prodOnly", "run_on": "runOn"},
+)
+class AuditOptions:
+    def __init__(
+        self,
+        *,
+        level: typing.Optional[builtins.str] = None,
+        prod_only: typing.Optional[builtins.bool] = None,
+        run_on: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Options for security audit configuration.
+
+        :param level: (experimental) Minimum vulnerability level to check for during audit. Default: "high"
+        :param prod_only: (experimental) Only audit production dependencies. When false, both production and development dependencies are audited. This is recommended as build dependencies can also contain security vulnerabilities. Default: false
+        :param run_on: (experimental) When to run the audit task. - "build": Run during every build (default) - "release": Only run during release workflow - "manual": Create the task but don't run it automatically Default: "build"
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__fa4156d4e0a4a5a2efe965ea98ba35b587dcbfe01e1b4d659a959bcf54294ed2)
+            check_type(argname="argument level", value=level, expected_type=type_hints["level"])
+            check_type(argname="argument prod_only", value=prod_only, expected_type=type_hints["prod_only"])
+            check_type(argname="argument run_on", value=run_on, expected_type=type_hints["run_on"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if level is not None:
+            self._values["level"] = level
+        if prod_only is not None:
+            self._values["prod_only"] = prod_only
+        if run_on is not None:
+            self._values["run_on"] = run_on
+
+    @builtins.property
+    def level(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Minimum vulnerability level to check for during audit.
+
+        :default: "high"
+
+        :stability: experimental
+        '''
+        result = self._values.get("level")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    @builtins.property
+    def prod_only(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Only audit production dependencies.
+
+        When false, both production and development dependencies are audited.
+        This is recommended as build dependencies can also contain security vulnerabilities.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("prod_only")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def run_on(self) -> typing.Optional[builtins.str]:
+        '''(experimental) When to run the audit task.
+
+        - "build": Run during every build (default)
+        - "release": Only run during release workflow
+        - "manual": Create the task but don't run it automatically
+
+        :default: "build"
+
+        :stability: experimental
+        '''
+        result = self._values.get("run_on")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "AuditOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.enum(jsii_type="projen.javascript.AutoRelease")
 class AutoRelease(enum.Enum):
     '''(experimental) Automatic bump modes.
@@ -109,10 +213,262 @@ class AutoRelease(enum.Enum):
     '''
 
 
+class Biome(
+    _Component_2b0ad27f,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="projen.javascript.Biome",
+):
+    '''(experimental) Biome component.
+
+    :stability: experimental
+    '''
+
+    def __init__(
+        self,
+        project: "NodeProject",
+        *,
+        assist: typing.Optional[builtins.bool] = None,
+        biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+        formatter: typing.Optional[builtins.bool] = None,
+        ignore_generated_files: typing.Optional[builtins.bool] = None,
+        linter: typing.Optional[builtins.bool] = None,
+        merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+        version: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param project: -
+        :param assist: (experimental) Enable code assist with recommended actions. Default: true
+        :param biome_config: (experimental) Full Biome configuration. This configuration dictates the final outcome if value is set. For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+        :param formatter: (experimental) Enable code formatter with recommended settings. Default: true
+        :param ignore_generated_files: (experimental) Automatically ignore all generated files. This prevents Biome from trying to format or lint files that are marked as generated, which would fail since generated files are typically read-only. Default: true
+        :param linter: (experimental) Enable linting with recommended rules. Default: true
+        :param merge_arrays_in_configuration: (experimental) Should arrays be merged or overwritten when creating Biome configuration. By default arrays are merged and duplicate values are removed Default: true
+        :param version: (experimental) Version of Biome to use. Default: "^2"
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f2264088409136f62af7e2ac4488206c06c3b9a69056be8b9ead20ab895f1bc)
+            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+        options = BiomeOptions(
+            assist=assist,
+            biome_config=biome_config,
+            formatter=formatter,
+            ignore_generated_files=ignore_generated_files,
+            linter=linter,
+            merge_arrays_in_configuration=merge_arrays_in_configuration,
+            version=version,
+        )
+
+        jsii.create(self.__class__, self, [project, options])
+
+    @jsii.member(jsii_name="of")
+    @builtins.classmethod
+    def of(cls, project: _Project_57d89203) -> typing.Optional["Biome"]:
+        '''
+        :param project: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__02197aa3a69f17c43ff359679227be724559aba6ef0881da4e04e9a0bf66d078)
+            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+        return typing.cast(typing.Optional["Biome"], jsii.sinvoke(cls, "of", [project]))
+
+    @jsii.member(jsii_name="addFilePattern")
+    def add_file_pattern(self, pattern: builtins.str) -> None:
+        '''
+        :param pattern: -
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5609a4432d207b19ee177e477fdf5e275031b8ec1346b00ac4bbfdf93f688757)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "addFilePattern", [pattern]))
+
+    @builtins.property
+    @jsii.member(jsii_name="file")
+    def file(self) -> _JsonFile_fa8164db:
+        '''(experimental) Biome configuration file content.
+
+        :stability: experimental
+        '''
+        return typing.cast(_JsonFile_fa8164db, jsii.get(self, "file"))
+
+    @builtins.property
+    @jsii.member(jsii_name="task")
+    def task(self) -> _Task_9fa875b6:
+        '''(experimental) Biome task.
+
+        :stability: experimental
+        '''
+        return typing.cast(_Task_9fa875b6, jsii.get(self, "task"))
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.BiomeOptions",
+    jsii_struct_bases=[],
+    name_mapping={
+        "assist": "assist",
+        "biome_config": "biomeConfig",
+        "formatter": "formatter",
+        "ignore_generated_files": "ignoreGeneratedFiles",
+        "linter": "linter",
+        "merge_arrays_in_configuration": "mergeArraysInConfiguration",
+        "version": "version",
+    },
+)
+class BiomeOptions:
+    def __init__(
+        self,
+        *,
+        assist: typing.Optional[builtins.bool] = None,
+        biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+        formatter: typing.Optional[builtins.bool] = None,
+        ignore_generated_files: typing.Optional[builtins.bool] = None,
+        linter: typing.Optional[builtins.bool] = None,
+        merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+        version: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''
+        :param assist: (experimental) Enable code assist with recommended actions. Default: true
+        :param biome_config: (experimental) Full Biome configuration. This configuration dictates the final outcome if value is set. For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+        :param formatter: (experimental) Enable code formatter with recommended settings. Default: true
+        :param ignore_generated_files: (experimental) Automatically ignore all generated files. This prevents Biome from trying to format or lint files that are marked as generated, which would fail since generated files are typically read-only. Default: true
+        :param linter: (experimental) Enable linting with recommended rules. Default: true
+        :param merge_arrays_in_configuration: (experimental) Should arrays be merged or overwritten when creating Biome configuration. By default arrays are merged and duplicate values are removed Default: true
+        :param version: (experimental) Version of Biome to use. Default: "^2"
+
+        :stability: experimental
+        '''
+        if isinstance(biome_config, dict):
+            biome_config = _BiomeConfiguration_dd1a6c83(**biome_config)
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__b53a2988afa9afc23bda2fe96e2de8ffaff18ab919e00b69a6c8d3d229f3dcc1)
+            check_type(argname="argument assist", value=assist, expected_type=type_hints["assist"])
+            check_type(argname="argument biome_config", value=biome_config, expected_type=type_hints["biome_config"])
+            check_type(argname="argument formatter", value=formatter, expected_type=type_hints["formatter"])
+            check_type(argname="argument ignore_generated_files", value=ignore_generated_files, expected_type=type_hints["ignore_generated_files"])
+            check_type(argname="argument linter", value=linter, expected_type=type_hints["linter"])
+            check_type(argname="argument merge_arrays_in_configuration", value=merge_arrays_in_configuration, expected_type=type_hints["merge_arrays_in_configuration"])
+            check_type(argname="argument version", value=version, expected_type=type_hints["version"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if assist is not None:
+            self._values["assist"] = assist
+        if biome_config is not None:
+            self._values["biome_config"] = biome_config
+        if formatter is not None:
+            self._values["formatter"] = formatter
+        if ignore_generated_files is not None:
+            self._values["ignore_generated_files"] = ignore_generated_files
+        if linter is not None:
+            self._values["linter"] = linter
+        if merge_arrays_in_configuration is not None:
+            self._values["merge_arrays_in_configuration"] = merge_arrays_in_configuration
+        if version is not None:
+            self._values["version"] = version
+
+    @builtins.property
+    def assist(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable code assist with recommended actions.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("assist")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def biome_config(self) -> typing.Optional[_BiomeConfiguration_dd1a6c83]:
+        '''(experimental) Full Biome configuration.
+
+        This configuration dictates the final outcome if value is set.
+        For example, if the linter is disabled at the top-level, it can be enabled with ``biomeConfig.linter.enabled``.
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome_config")
+        return typing.cast(typing.Optional[_BiomeConfiguration_dd1a6c83], result)
+
+    @builtins.property
+    def formatter(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable code formatter with recommended settings.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("formatter")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def ignore_generated_files(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Automatically ignore all generated files.
+
+        This prevents Biome from trying to format or lint files that are marked as generated,
+        which would fail since generated files are typically read-only.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("ignore_generated_files")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def linter(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Enable linting with recommended rules.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("linter")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def merge_arrays_in_configuration(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Should arrays be merged or overwritten when creating Biome configuration.
+
+        By default arrays are merged and duplicate values are removed
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("merge_arrays_in_configuration")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) Version of Biome to use.
+
+        :default: "^2"
+
+        :stability: experimental
+        '''
+        result = self._values.get("version")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "BiomeOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="projen.javascript.BuildWorkflowOptions",
     jsii_struct_bases=[_BuildWorkflowCommonOptions_7e3d5c39],
     name_mapping={
+        "env": "env",
         "name": "name",
         "permissions": "permissions",
         "pre_build_steps": "preBuildSteps",
@@ -124,6 +480,7 @@ class BuildWorkflowOptions(_BuildWorkflowCommonOptions_7e3d5c39):
     def __init__(
         self,
         *,
+        env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         name: typing.Optional[builtins.str] = None,
         permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
         pre_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -132,6 +489,7 @@ class BuildWorkflowOptions(_BuildWorkflowCommonOptions_7e3d5c39):
     ) -> None:
         '''(experimental) Build workflow options for NodeProject.
 
+        :param env: (experimental) Build environment variables. Default: {}
         :param name: (experimental) Name of the buildfile (e.g. "build" becomes "build.yml"). Default: "build"
         :param permissions: (experimental) Permissions granted to the build job To limit job permissions for ``contents``, the desired permissions have to be explicitly set, e.g.: ``{ contents: JobPermission.NONE }``. Default: ``{ contents: JobPermission.WRITE }``
         :param pre_build_steps: (experimental) Steps to execute before the build. Default: []
@@ -146,12 +504,15 @@ class BuildWorkflowOptions(_BuildWorkflowCommonOptions_7e3d5c39):
             workflow_triggers = _Triggers_e9ae7617(**workflow_triggers)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__12c3595783c38c358dfa0cc66282771c2ed2020f0770e8379920bb5731b72372)
+            check_type(argname="argument env", value=env, expected_type=type_hints["env"])
             check_type(argname="argument name", value=name, expected_type=type_hints["name"])
             check_type(argname="argument permissions", value=permissions, expected_type=type_hints["permissions"])
             check_type(argname="argument pre_build_steps", value=pre_build_steps, expected_type=type_hints["pre_build_steps"])
             check_type(argname="argument workflow_triggers", value=workflow_triggers, expected_type=type_hints["workflow_triggers"])
             check_type(argname="argument mutable_build", value=mutable_build, expected_type=type_hints["mutable_build"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if env is not None:
+            self._values["env"] = env
         if name is not None:
             self._values["name"] = name
         if permissions is not None:
@@ -163,6 +524,17 @@ class BuildWorkflowOptions(_BuildWorkflowCommonOptions_7e3d5c39):
         if mutable_build is not None:
             self._values["mutable_build"] = mutable_build
 
+    @builtins.property
+    def env(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def name(self) -> typing.Optional[builtins.str]:
         '''(experimental) Name of the buildfile (e.g. "build" becomes "build.yml").
@@ -465,7 +837,7 @@ class Bundler(
         :param banner: (experimental) Use this to insert an arbitrary string at the beginning of generated JavaScript files. This is similar to footer which inserts at the end instead of the beginning. This is commonly used to insert comments: Default: - no comments are passed
         :param charset: (experimental) The charset to use for esbuild's output. By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped using backslash escape sequences. Using escape sequences makes the generated output slightly bigger, and also makes it harder to read. If you would like for esbuild to print the original characters without using escape sequences, use ``Charset.UTF8``. Default: Charset.ASCII
         :param define: (experimental) Replace global identifiers with constant expressions. For example, ``{ 'process.env.DEBUG': 'true' }``. Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``. Default: - no replacements are made
-        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node18", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
+        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node22", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
         :param executable: (experimental) Mark the output file as executable. Default: false
         :param footer: (experimental) Use this to insert an arbitrary string at the end of generated JavaScript files. This is similar to banner which inserts at the beginning instead of the end. This is commonly used to insert comments Default: - no comments are passed
         :param format: (experimental) Output format for the generated JavaScript files. There are currently three possible values that can be configured: ``"iife"``, ``"cjs"``, and ``"esm"``. If not set (``undefined``), esbuild picks an output format for you based on ``platform``: - ``"cjs"`` if ``platform`` is ``"node"`` - ``"iife"`` if ``platform`` is ``"browser"`` - ``"esm"`` if ``platform`` is ``"neutral"`` Note: If making a bundle to run under node with ESM, set ``format`` to ``"esm"`` instead of setting ``platform`` to ``"neutral"``. Default: undefined
@@ -1081,12 +1453,14 @@ class Eslint(
         dirs: typing.Sequence[builtins.str],
         alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        command_options: typing.Optional[typing.Union["EslintCommandOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
         file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
         lint_projen_rc: typing.Optional[builtins.bool] = None,
         lint_projen_rc_file: typing.Optional[builtins.str] = None,
         prettier: typing.Optional[builtins.bool] = None,
+        sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
         ts_always_try_types: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
         yaml: typing.Optional[builtins.bool] = None,
@@ -1096,12 +1470,14 @@ class Eslint(
         :param dirs: (experimental) Files or glob patterns or directories with source files to lint (e.g. [ "src" ]).
         :param alias_extensions: (experimental) Enable import alias for module paths. Default: undefined
         :param alias_map: (experimental) Enable import alias for module paths. Default: undefined
+        :param command_options: (experimental) Options for eslint command executed by eslint task.
         :param devdirs: (experimental) Files or glob patterns or directories with source files that include tests and build tools. These sources are linted but may also import packages from ``devDependencies``. Default: []
         :param file_extensions: (experimental) File types that should be linted (e.g. [ ".js", ".ts" ]). Default: [".ts"]
         :param ignore_patterns: (experimental) List of file patterns that should not be linted, using the same syntax as .gitignore patterns. Default: [ '*.js', '*.d.ts', 'node_modules/', '*.generated.ts', 'coverage' ]
         :param lint_projen_rc: (deprecated) Should we lint .projenrc.js. Default: true
         :param lint_projen_rc_file: (deprecated) Projenrc file to lint. Use empty string to disable. Default: "projenrc.js"
         :param prettier: (experimental) Enable prettier for code formatting. Default: false
+        :param sort_extends: (experimental) The extends array in eslint is order dependent. This option allows to sort the extends array in any way seen fit. Default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
         :param ts_always_try_types: (experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code. This prevents ``import/no-unresolved`` eslint errors when importing a ``@types/*`` module that would otherwise remain unresolved. Default: true
         :param tsconfig_path: (experimental) Path to ``tsconfig.json`` which should be used by eslint. Default: "./tsconfig.json"
         :param yaml: (experimental) Write eslint configuration as YAML instead of JSON. Default: false
@@ -1115,12 +1491,14 @@ class Eslint(
             dirs=dirs,
             alias_extensions=alias_extensions,
             alias_map=alias_map,
+            command_options=command_options,
             devdirs=devdirs,
             file_extensions=file_extensions,
             ignore_patterns=ignore_patterns,
             lint_projen_rc=lint_projen_rc,
             lint_projen_rc_file=lint_projen_rc_file,
             prettier=prettier,
+            sort_extends=sort_extends,
             ts_always_try_types=ts_always_try_types,
             tsconfig_path=tsconfig_path,
             yaml=yaml,
@@ -1131,7 +1509,7 @@ class Eslint(
     @jsii.member(jsii_name="of")
     @builtins.classmethod
     def of(cls, project: _Project_57d89203) -> typing.Optional["Eslint"]:
-        '''(experimental) Returns the singletone Eslint component of a project or undefined if there is none.
+        '''(experimental) Returns the singleton Eslint component of a project or undefined if there is none.
 
         :param project: -
 
@@ -1199,7 +1577,7 @@ class Eslint(
         :param extends: (experimental) Config(s) to extend in this override.
         :param parser: (experimental) The overridden parser.
         :param plugins: (experimental) ``plugins`` override.
-        :param rules: (experimental) The overriden rules.
+        :param rules: (experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1271,6 +1649,15 @@ class Eslint(
         '''
         return typing.cast(_Task_9fa875b6, jsii.get(self, "eslintTask"))
 
+    @builtins.property
+    @jsii.member(jsii_name="file")
+    def file(self) -> _ObjectFile_a34b4727:
+        '''(experimental) The underlying config file.
+
+        :stability: experimental
+        '''
+        return typing.cast(_ObjectFile_a34b4727, jsii.get(self, "file"))
+
     @builtins.property
     @jsii.member(jsii_name="ignorePatterns")
     def ignore_patterns(self) -> typing.List[builtins.str]:
@@ -1300,12 +1687,72 @@ class Eslint(
 
     @builtins.property
     @jsii.member(jsii_name="rules")
-    def rules(self) -> typing.Mapping[builtins.str, typing.List[typing.Any]]:
+    def rules(self) -> typing.Mapping[builtins.str, typing.Any]:
         '''(experimental) eslint rules.
 
         :stability: experimental
         '''
-        return typing.cast(typing.Mapping[builtins.str, typing.List[typing.Any]], jsii.get(self, "rules"))
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "rules"))
+
+
+@jsii.data_type(
+    jsii_type="projen.javascript.EslintCommandOptions",
+    jsii_struct_bases=[],
+    name_mapping={"extra_args": "extraArgs", "fix": "fix"},
+)
+class EslintCommandOptions:
+    def __init__(
+        self,
+        *,
+        extra_args: typing.Optional[typing.Sequence[builtins.str]] = None,
+        fix: typing.Optional[builtins.bool] = None,
+    ) -> None:
+        '''
+        :param extra_args: (experimental) Extra flag arguments to pass to eslint command.
+        :param fix: (experimental) Whether to fix eslint issues when running the eslint task. Default: true
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__ab5437a5e5c0bee91b2bed562cbb0dc9e80e748c8ca3251df4c2eb91ea3a4160)
+            check_type(argname="argument extra_args", value=extra_args, expected_type=type_hints["extra_args"])
+            check_type(argname="argument fix", value=fix, expected_type=type_hints["fix"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if extra_args is not None:
+            self._values["extra_args"] = extra_args
+        if fix is not None:
+            self._values["fix"] = fix
+
+    @builtins.property
+    def extra_args(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) Extra flag arguments to pass to eslint command.
+
+        :stability: experimental
+        '''
+        result = self._values.get("extra_args")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def fix(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Whether to fix eslint issues when running the eslint task.
+
+        :default: true
+
+        :stability: experimental
+        '''
+        result = self._values.get("fix")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "EslintCommandOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
 
 
 @jsii.data_type(
@@ -1315,12 +1762,14 @@ class Eslint(
         "dirs": "dirs",
         "alias_extensions": "aliasExtensions",
         "alias_map": "aliasMap",
+        "command_options": "commandOptions",
         "devdirs": "devdirs",
         "file_extensions": "fileExtensions",
         "ignore_patterns": "ignorePatterns",
         "lint_projen_rc": "lintProjenRc",
         "lint_projen_rc_file": "lintProjenRcFile",
         "prettier": "prettier",
+        "sort_extends": "sortExtends",
         "ts_always_try_types": "tsAlwaysTryTypes",
         "tsconfig_path": "tsconfigPath",
         "yaml": "yaml",
@@ -1333,12 +1782,14 @@ class EslintOptions:
         dirs: typing.Sequence[builtins.str],
         alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+        command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
         file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
         ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
         lint_projen_rc: typing.Optional[builtins.bool] = None,
         lint_projen_rc_file: typing.Optional[builtins.str] = None,
         prettier: typing.Optional[builtins.bool] = None,
+        sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
         ts_always_try_types: typing.Optional[builtins.bool] = None,
         tsconfig_path: typing.Optional[builtins.str] = None,
         yaml: typing.Optional[builtins.bool] = None,
@@ -1347,29 +1798,35 @@ class EslintOptions:
         :param dirs: (experimental) Files or glob patterns or directories with source files to lint (e.g. [ "src" ]).
         :param alias_extensions: (experimental) Enable import alias for module paths. Default: undefined
         :param alias_map: (experimental) Enable import alias for module paths. Default: undefined
+        :param command_options: (experimental) Options for eslint command executed by eslint task.
         :param devdirs: (experimental) Files or glob patterns or directories with source files that include tests and build tools. These sources are linted but may also import packages from ``devDependencies``. Default: []
         :param file_extensions: (experimental) File types that should be linted (e.g. [ ".js", ".ts" ]). Default: [".ts"]
         :param ignore_patterns: (experimental) List of file patterns that should not be linted, using the same syntax as .gitignore patterns. Default: [ '*.js', '*.d.ts', 'node_modules/', '*.generated.ts', 'coverage' ]
         :param lint_projen_rc: (deprecated) Should we lint .projenrc.js. Default: true
         :param lint_projen_rc_file: (deprecated) Projenrc file to lint. Use empty string to disable. Default: "projenrc.js"
         :param prettier: (experimental) Enable prettier for code formatting. Default: false
+        :param sort_extends: (experimental) The extends array in eslint is order dependent. This option allows to sort the extends array in any way seen fit. Default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
         :param ts_always_try_types: (experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code. This prevents ``import/no-unresolved`` eslint errors when importing a ``@types/*`` module that would otherwise remain unresolved. Default: true
         :param tsconfig_path: (experimental) Path to ``tsconfig.json`` which should be used by eslint. Default: "./tsconfig.json"
         :param yaml: (experimental) Write eslint configuration as YAML instead of JSON. Default: false
 
         :stability: experimental
         '''
+        if isinstance(command_options, dict):
+            command_options = EslintCommandOptions(**command_options)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__26892c968b7bf4d64dd2597bbdabf1f1e9ced92002225a4eedfae6cbe3c22894)
             check_type(argname="argument dirs", value=dirs, expected_type=type_hints["dirs"])
             check_type(argname="argument alias_extensions", value=alias_extensions, expected_type=type_hints["alias_extensions"])
             check_type(argname="argument alias_map", value=alias_map, expected_type=type_hints["alias_map"])
+            check_type(argname="argument command_options", value=command_options, expected_type=type_hints["command_options"])
             check_type(argname="argument devdirs", value=devdirs, expected_type=type_hints["devdirs"])
             check_type(argname="argument file_extensions", value=file_extensions, expected_type=type_hints["file_extensions"])
             check_type(argname="argument ignore_patterns", value=ignore_patterns, expected_type=type_hints["ignore_patterns"])
             check_type(argname="argument lint_projen_rc", value=lint_projen_rc, expected_type=type_hints["lint_projen_rc"])
             check_type(argname="argument lint_projen_rc_file", value=lint_projen_rc_file, expected_type=type_hints["lint_projen_rc_file"])
             check_type(argname="argument prettier", value=prettier, expected_type=type_hints["prettier"])
+            check_type(argname="argument sort_extends", value=sort_extends, expected_type=type_hints["sort_extends"])
             check_type(argname="argument ts_always_try_types", value=ts_always_try_types, expected_type=type_hints["ts_always_try_types"])
             check_type(argname="argument tsconfig_path", value=tsconfig_path, expected_type=type_hints["tsconfig_path"])
             check_type(argname="argument yaml", value=yaml, expected_type=type_hints["yaml"])
@@ -1380,6 +1837,8 @@ class EslintOptions:
             self._values["alias_extensions"] = alias_extensions
         if alias_map is not None:
             self._values["alias_map"] = alias_map
+        if command_options is not None:
+            self._values["command_options"] = command_options
         if devdirs is not None:
             self._values["devdirs"] = devdirs
         if file_extensions is not None:
@@ -1392,6 +1851,8 @@ class EslintOptions:
             self._values["lint_projen_rc_file"] = lint_projen_rc_file
         if prettier is not None:
             self._values["prettier"] = prettier
+        if sort_extends is not None:
+            self._values["sort_extends"] = sort_extends
         if ts_always_try_types is not None:
             self._values["ts_always_try_types"] = ts_always_try_types
         if tsconfig_path is not None:
@@ -1431,6 +1892,15 @@ class EslintOptions:
         result = self._values.get("alias_map")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
 
+    @builtins.property
+    def command_options(self) -> typing.Optional[EslintCommandOptions]:
+        '''(experimental) Options for eslint command executed by eslint task.
+
+        :stability: experimental
+        '''
+        result = self._values.get("command_options")
+        return typing.cast(typing.Optional[EslintCommandOptions], result)
+
     @builtins.property
     def devdirs(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) Files or glob patterns or directories with source files that include tests and build tools.
@@ -1505,6 +1975,19 @@ class EslintOptions:
         result = self._values.get("prettier")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def sort_extends(self) -> typing.Optional[_ICompareString_f119e19c]:
+        '''(experimental) The extends array in eslint is order dependent.
+
+        This option allows to sort the extends array in any way seen fit.
+
+        :default: - Use known ESLint best practices to place "prettier" plugins at the end of the array
+
+        :stability: experimental
+        '''
+        result = self._values.get("sort_extends")
+        return typing.cast(typing.Optional[_ICompareString_f119e19c], result)
+
     @builtins.property
     def ts_always_try_types(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Always try to resolve types under ``<root>@types`` directory even it doesn't contain any source code.
@@ -1582,7 +2065,7 @@ class EslintOverride:
         :param extends: (experimental) Config(s) to extend in this override.
         :param parser: (experimental) The overridden parser.
         :param plugins: (experimental) ``plugins`` override.
-        :param rules: (experimental) The overriden rules.
+        :param rules: (experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1658,7 +2141,7 @@ class EslintOverride:
 
     @builtins.property
     def rules(self) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
-        '''(experimental) The overriden rules.
+        '''(experimental) The overridden rules.
 
         :stability: experimental
         '''
@@ -1817,7 +2300,7 @@ class Jest(
 
     def __init__(
         self,
-        project: "NodeProject",
+        scope: _constructs_77d1e7e8.IConstruct,
         *,
         config_file_path: typing.Optional[builtins.str] = None,
         coverage: typing.Optional[builtins.bool] = None,
@@ -1827,19 +2310,21 @@ class Jest(
         jest_config: typing.Optional[typing.Union["JestConfigOptions", typing.Dict[builtins.str, typing.Any]]] = None,
         jest_version: typing.Optional[builtins.str] = None,
         junit_reporting: typing.Optional[builtins.bool] = None,
+        pass_with_no_tests: typing.Optional[builtins.bool] = None,
         preserve_default_reporters: typing.Optional[builtins.bool] = None,
         update_snapshot: typing.Optional["UpdateSnapshot"] = None,
     ) -> None:
         '''
-        :param project: -
+        :param scope: -
         :param config_file_path: (experimental) Path to JSON config file for Jest. Default: - No separate config file, jest settings are stored in package.json
         :param coverage: (deprecated) Collect coverage. Deprecated Default: true
         :param coverage_text: (experimental) Include the ``text`` coverage reporter, which means that coverage summary is printed at the end of the jest execution. Default: true
         :param extra_cli_options: (experimental) Additional options to pass to the Jest CLI invocation. Default: - no extra options
         :param ignore_patterns: (deprecated) Defines ``testPathIgnorePatterns`` and ``coveragePathIgnorePatterns``. Default: ["/node_modules/"]
         :param jest_config: (experimental) Jest configuration. Default: - default jest configuration
-        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. Default: - installs the latest jest version
+        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. With Jest 30 ts-jest version 29 is used (if Typescript in use) Default: - installs the latest jest version
         :param junit_reporting: (experimental) Result processing with jest-junit. Output directory is ``test-reports/``. Default: true
+        :param pass_with_no_tests: (experimental) Pass with no tests. Default: - true
         :param preserve_default_reporters: (experimental) Preserve the default Jest reporter when additional reporters are added. Default: true
         :param update_snapshot: (experimental) Whether to update snapshots in task "test" (which is executed in task "build" and build workflows), or create a separate task "test:update" for updating snapshots. Default: - ALWAYS
 
@@ -1847,7 +2332,7 @@ class Jest(
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc46ab7738)
-            check_type(argname="argument project", value=project, expected_type=type_hints["project"])
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
         options = JestOptions(
             config_file_path=config_file_path,
             coverage=coverage,
@@ -1857,11 +2342,12 @@ class Jest(
             jest_config=jest_config,
             jest_version=jest_version,
             junit_reporting=junit_reporting,
+            pass_with_no_tests=pass_with_no_tests,
             preserve_default_reporters=preserve_default_reporters,
             update_snapshot=update_snapshot,
         )
 
-        jsii.create(self.__class__, self, [project, options])
+        jsii.create(self.__class__, self, [scope, options])
 
     @jsii.member(jsii_name="of")
     @builtins.classmethod
@@ -2009,6 +2495,29 @@ class Jest(
             check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
         return typing.cast(None, jsii.invoke(self, "addWatchIgnorePattern", [pattern]))
 
+    @jsii.member(jsii_name="discoverTestMatchPatternsForDirs")
+    def discover_test_match_patterns_for_dirs(
+        self,
+        dirs: typing.Sequence[builtins.str],
+        *,
+        file_extension_pattern: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Build standard test match patterns for a directory.
+
+        :param dirs: The directories to add test matches for. Matches any folder if not specified or an empty array.
+        :param file_extension_pattern: (experimental) The file extension pattern to use. Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__0681a729d70e1f1999defc63f8a0f12400f6e0b609f4fb8dbf7f858c435cd9b1)
+            check_type(argname="argument dirs", value=dirs, expected_type=type_hints["dirs"])
+        options = JestDiscoverTestMatchPatternsForDirsOptions(
+            file_extension_pattern=file_extension_pattern
+        )
+
+        return typing.cast(None, jsii.invoke(self, "discoverTestMatchPatternsForDirs", [dirs, options]))
+
     @builtins.property
     @jsii.member(jsii_name="config")
     def config(self) -> typing.Any:
@@ -2027,6 +2536,14 @@ class Jest(
         '''
         return typing.cast(builtins.str, jsii.get(self, "jestVersion"))
 
+    @builtins.property
+    @jsii.member(jsii_name="project")
+    def project(self) -> "NodeProject":
+        '''
+        :stability: experimental
+        '''
+        return typing.cast("NodeProject", jsii.get(self, "project"))
+
     @builtins.property
     @jsii.member(jsii_name="file")
     def file(self) -> typing.Optional[_JsonFile_fa8164db]:
@@ -2192,7 +2709,7 @@ class JestConfigOptions:
         :param collect_coverage_from: (experimental) An array of glob patterns indicating a set of files for which coverage information should be collected. Default: - undefined
         :param coverage_directory: (experimental) The directory where Jest should output its coverage files. Default: "coverage"
         :param coverage_path_ignore_patterns: (experimental) An array of regexp pattern strings that are matched against all file paths before executing the test. If the file path matches any of the patterns, coverage information will be skipped Default: "/node_modules/"
-        :param coverage_provider: (experimental) Indicates which provider should be used to instrument code for coverage. Allowed values are babel (default) or v8 Default: - "babel"
+        :param coverage_provider: (experimental) Indicates which provider should be used to instrument code for coverage. Allowed values are v8 (default) or babel Default: - "v8"
         :param coverage_reporters: (experimental) A list of reporter names that Jest uses when writing coverage reports. Any istanbul reporter can be used Default: - ["json", "lcov", "text", "clover", "cobertura"]
         :param coverage_threshold: (experimental) Specify the global coverage thresholds. This will be used to configure minimum threshold enforcement for coverage results. Thresholds can be specified as global, as a glob, and as a directory or file path. If thresholds aren't met, jest will fail. Default: - undefined
         :param dependency_extractor: (experimental) This option allows the use of a custom dependency extractor. It must be a node module that exports an object with an extract function Default: - undefined
@@ -2233,7 +2750,7 @@ class JestConfigOptions:
         :param test_environment: (experimental) The test environment that will be used for testing. The default environment in Jest is a browser-like environment through jsdom. If you are building a node service, you can use the node option to use a node-like environment instead. Default: - "jsdom"
         :param test_environment_options: (experimental) Test environment options that will be passed to the testEnvironment. The relevant options depend on the environment. Default: - {}
         :param test_failure_exit_code: (experimental) The exit code Jest returns on test failure. Default: - 1
-        :param test_match: (experimental) The glob patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: ['**/**tests**/**/*.[jt]s?(x)', '**/?(*.)+(spec|test).[tj]s?(x)']
+        :param test_match: (experimental) The glob patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: ['**/**tests**/**/*.[jt]s?(x)', '**/*(*.)@(spec|test).[tj]s?(x)']
         :param test_path_ignore_patterns: (experimental) An array of regexp pattern strings that are matched against all test paths before executing the test. If the test path matches any of the patterns, it will be skipped. Default: - ["/node_modules/"]
         :param test_regex: (experimental) The pattern or patterns Jest uses to detect test files. By default it looks for .js, .jsx, .ts and .tsx files inside of **tests** folders, as well as any files with a suffix of .test or .spec (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js. Default: - (/**tests**/.*|(\\.|/)(test|spec))\\.[jt]sx?$
         :param test_results_processor: (experimental) This option allows the use of a custom results processor. Default: - undefined
@@ -2576,9 +3093,9 @@ class JestConfigOptions:
     def coverage_provider(self) -> typing.Optional[builtins.str]:
         '''(experimental) Indicates which provider should be used to instrument code for coverage.
 
-        Allowed values are babel (default) or v8
+        Allowed values are v8 (default) or babel
 
-        :default: - "babel"
+        :default: - "v8"
 
         :stability: experimental
         '''
@@ -3117,7 +3634,7 @@ class JestConfigOptions:
         files inside of **tests** folders, as well as any files with a suffix of .test or .spec
         (e.g. Component.test.js or Component.spec.js). It will also find files called test.js or spec.js.
 
-        :default: ['**/**tests**/**/*.[jt]s?(x)', '**/?(*.)+(spec|test).[tj]s?(x)']
+        :default: ['**/**tests**/**/*.[jt]s?(x)', '**/*(*.)@(spec|test).[tj]s?(x)']
 
         :stability: experimental
         '''
@@ -3334,6 +3851,53 @@ class JestConfigOptions:
         )
 
 
+@jsii.data_type(
+    jsii_type="projen.javascript.JestDiscoverTestMatchPatternsForDirsOptions",
+    jsii_struct_bases=[],
+    name_mapping={"file_extension_pattern": "fileExtensionPattern"},
+)
+class JestDiscoverTestMatchPatternsForDirsOptions:
+    def __init__(
+        self,
+        *,
+        file_extension_pattern: typing.Optional[builtins.str] = None,
+    ) -> None:
+        '''(experimental) Options for discoverTestMatchPatternsForDirs.
+
+        :param file_extension_pattern: (experimental) The file extension pattern to use. Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__987ab5c64454683ddeb28bad78f44cdd78a2099af6a0e44ff92f50bc40f8e486)
+            check_type(argname="argument file_extension_pattern", value=file_extension_pattern, expected_type=type_hints["file_extension_pattern"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if file_extension_pattern is not None:
+            self._values["file_extension_pattern"] = file_extension_pattern
+
+    @builtins.property
+    def file_extension_pattern(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The file extension pattern to use.
+
+        Defaults to "[jt]s?(x)".
+
+        :stability: experimental
+        '''
+        result = self._values.get("file_extension_pattern")
+        return typing.cast(typing.Optional[builtins.str], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "JestDiscoverTestMatchPatternsForDirsOptions(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.data_type(
     jsii_type="projen.javascript.JestOptions",
     jsii_struct_bases=[],
@@ -3346,6 +3910,7 @@ class JestConfigOptions:
         "jest_config": "jestConfig",
         "jest_version": "jestVersion",
         "junit_reporting": "junitReporting",
+        "pass_with_no_tests": "passWithNoTests",
         "preserve_default_reporters": "preserveDefaultReporters",
         "update_snapshot": "updateSnapshot",
     },
@@ -3362,6 +3927,7 @@ class JestOptions:
         jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         jest_version: typing.Optional[builtins.str] = None,
         junit_reporting: typing.Optional[builtins.bool] = None,
+        pass_with_no_tests: typing.Optional[builtins.bool] = None,
         preserve_default_reporters: typing.Optional[builtins.bool] = None,
         update_snapshot: typing.Optional["UpdateSnapshot"] = None,
     ) -> None:
@@ -3372,8 +3938,9 @@ class JestOptions:
         :param extra_cli_options: (experimental) Additional options to pass to the Jest CLI invocation. Default: - no extra options
         :param ignore_patterns: (deprecated) Defines ``testPathIgnorePatterns`` and ``coveragePathIgnorePatterns``. Default: ["/node_modules/"]
         :param jest_config: (experimental) Jest configuration. Default: - default jest configuration
-        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. Default: - installs the latest jest version
+        :param jest_version: (experimental) The version of jest to use. Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those. With Jest 30 ts-jest version 29 is used (if Typescript in use) Default: - installs the latest jest version
         :param junit_reporting: (experimental) Result processing with jest-junit. Output directory is ``test-reports/``. Default: true
+        :param pass_with_no_tests: (experimental) Pass with no tests. Default: - true
         :param preserve_default_reporters: (experimental) Preserve the default Jest reporter when additional reporters are added. Default: true
         :param update_snapshot: (experimental) Whether to update snapshots in task "test" (which is executed in task "build" and build workflows), or create a separate task "test:update" for updating snapshots. Default: - ALWAYS
 
@@ -3391,6 +3958,7 @@ class JestOptions:
             check_type(argname="argument jest_config", value=jest_config, expected_type=type_hints["jest_config"])
             check_type(argname="argument jest_version", value=jest_version, expected_type=type_hints["jest_version"])
             check_type(argname="argument junit_reporting", value=junit_reporting, expected_type=type_hints["junit_reporting"])
+            check_type(argname="argument pass_with_no_tests", value=pass_with_no_tests, expected_type=type_hints["pass_with_no_tests"])
             check_type(argname="argument preserve_default_reporters", value=preserve_default_reporters, expected_type=type_hints["preserve_default_reporters"])
             check_type(argname="argument update_snapshot", value=update_snapshot, expected_type=type_hints["update_snapshot"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
@@ -3410,6 +3978,8 @@ class JestOptions:
             self._values["jest_version"] = jest_version
         if junit_reporting is not None:
             self._values["junit_reporting"] = junit_reporting
+        if pass_with_no_tests is not None:
+            self._values["pass_with_no_tests"] = pass_with_no_tests
         if preserve_default_reporters is not None:
             self._values["preserve_default_reporters"] = preserve_default_reporters
         if update_snapshot is not None:
@@ -3493,6 +4063,8 @@ class JestOptions:
 
         Note that same version is used as version of ``@types/jest`` and ``ts-jest`` (if Typescript in use), so given version should work also for those.
 
+        With Jest 30 ts-jest version 29 is used (if Typescript in use)
+
         :default: - installs the latest jest version
 
         :stability: experimental
@@ -3513,6 +4085,17 @@ class JestOptions:
         result = self._values.get("junit_reporting")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def pass_with_no_tests(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Pass with no tests.
+
+        :default: - true
+
+        :stability: experimental
+        '''
+        result = self._values.get("pass_with_no_tests")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def preserve_default_reporters(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Preserve the default Jest reporter when additional reporters are added.
@@ -3769,6 +4352,7 @@ class NodePackage(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -3785,6 +4369,7 @@ class NodePackage(
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional["NodePackageManager"] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -3809,6 +4394,7 @@ class NodePackage(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -3818,18 +4404,19 @@ class NodePackage(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
         :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
@@ -3853,6 +4440,7 @@ class NodePackage(
             bugs_email=bugs_email,
             bugs_url=bugs_url,
             bundled_deps=bundled_deps,
+            bun_version=bun_version,
             code_artifact_options=code_artifact_options,
             deps=deps,
             description=description,
@@ -3869,6 +4457,7 @@ class NodePackage(
             npm_registry=npm_registry,
             npm_registry_url=npm_registry_url,
             npm_token_secret=npm_token_secret,
+            npm_trusted_publishing=npm_trusted_publishing,
             package_manager=package_manager,
             package_name=package_name,
             peer_dependency_options=peer_dependency_options,
@@ -4271,6 +4860,15 @@ class NodePackage(
         '''
         return typing.cast(builtins.str, jsii.get(self, "projenCommand"))
 
+    @builtins.property
+    @jsii.member(jsii_name="bunVersion")
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :stability: experimental
+        '''
+        return typing.cast(typing.Optional[builtins.str], jsii.get(self, "bunVersion"))
+
     @builtins.property
     @jsii.member(jsii_name="codeArtifactOptions")
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
@@ -4298,9 +4896,9 @@ class NodePackage(
     @builtins.property
     @jsii.member(jsii_name="maxNodeVersion")
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Maximum node version required by this package.
+        '''(experimental) Maximum node version supported by this package.
 
-        :default: - no maximum.
+        The value indicates the package is incompatible with newer versions.
 
         :stability: experimental
         '''
@@ -4309,9 +4907,9 @@ class NodePackage(
     @builtins.property
     @jsii.member(jsii_name="minNodeVersion")
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version required by this package.
+        '''(experimental) The minimum node version required by this package to function.
 
-        :default: - no minimum
+        This value indicates the package is incompatible with older versions.
 
         :stability: experimental
         '''
@@ -4331,8 +4929,6 @@ class NodePackage(
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
-
         :stability: experimental
         '''
         return typing.cast(typing.Optional[builtins.str], jsii.get(self, "pnpmVersion"))
@@ -4413,6 +5009,7 @@ class NodePackageManager(enum.Enum):
         "bugs_email": "bugsEmail",
         "bugs_url": "bugsUrl",
         "bundled_deps": "bundledDeps",
+        "bun_version": "bunVersion",
         "code_artifact_options": "codeArtifactOptions",
         "deps": "deps",
         "description": "description",
@@ -4429,6 +5026,7 @@ class NodePackageManager(enum.Enum):
         "npm_registry": "npmRegistry",
         "npm_registry_url": "npmRegistryUrl",
         "npm_token_secret": "npmTokenSecret",
+        "npm_trusted_publishing": "npmTrustedPublishing",
         "package_manager": "packageManager",
         "package_name": "packageName",
         "peer_dependency_options": "peerDependencyOptions",
@@ -4456,6 +5054,7 @@ class NodePackageOptions:
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -4472,6 +5071,7 @@ class NodePackageOptions:
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -4495,6 +5095,7 @@ class NodePackageOptions:
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -4504,18 +5105,19 @@ class NodePackageOptions:
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
         :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
@@ -4543,6 +5145,7 @@ class NodePackageOptions:
             check_type(argname="argument bugs_email", value=bugs_email, expected_type=type_hints["bugs_email"])
             check_type(argname="argument bugs_url", value=bugs_url, expected_type=type_hints["bugs_url"])
             check_type(argname="argument bundled_deps", value=bundled_deps, expected_type=type_hints["bundled_deps"])
+            check_type(argname="argument bun_version", value=bun_version, expected_type=type_hints["bun_version"])
             check_type(argname="argument code_artifact_options", value=code_artifact_options, expected_type=type_hints["code_artifact_options"])
             check_type(argname="argument deps", value=deps, expected_type=type_hints["deps"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -4559,6 +5162,7 @@ class NodePackageOptions:
             check_type(argname="argument npm_registry", value=npm_registry, expected_type=type_hints["npm_registry"])
             check_type(argname="argument npm_registry_url", value=npm_registry_url, expected_type=type_hints["npm_registry_url"])
             check_type(argname="argument npm_token_secret", value=npm_token_secret, expected_type=type_hints["npm_token_secret"])
+            check_type(argname="argument npm_trusted_publishing", value=npm_trusted_publishing, expected_type=type_hints["npm_trusted_publishing"])
             check_type(argname="argument package_manager", value=package_manager, expected_type=type_hints["package_manager"])
             check_type(argname="argument package_name", value=package_name, expected_type=type_hints["package_name"])
             check_type(argname="argument peer_dependency_options", value=peer_dependency_options, expected_type=type_hints["peer_dependency_options"])
@@ -4591,6 +5195,8 @@ class NodePackageOptions:
             self._values["bugs_url"] = bugs_url
         if bundled_deps is not None:
             self._values["bundled_deps"] = bundled_deps
+        if bun_version is not None:
+            self._values["bun_version"] = bun_version
         if code_artifact_options is not None:
             self._values["code_artifact_options"] = code_artifact_options
         if deps is not None:
@@ -4623,6 +5229,8 @@ class NodePackageOptions:
             self._values["npm_registry_url"] = npm_registry_url
         if npm_token_secret is not None:
             self._values["npm_token_secret"] = npm_token_secret
+        if npm_trusted_publishing is not None:
+            self._values["npm_trusted_publishing"] = npm_trusted_publishing
         if package_manager is not None:
             self._values["package_manager"] = package_manager
         if package_name is not None:
@@ -4755,8 +5363,19 @@ class NodePackageOptions:
 
         :stability: experimental
         '''
-        result = self._values.get("bundled_deps")
-        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+        result = self._values.get("bundled_deps")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+    @builtins.property
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :default: "latest"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bun_version")
+        return typing.cast(typing.Optional[builtins.str], result)
 
     @builtins.property
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
@@ -4892,9 +5511,15 @@ class NodePackageOptions:
 
     @builtins.property
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version to require via ``engines`` (inclusive).
+        '''(experimental) The maximum node version supported by this package. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any newer versions of node.
+        This requirement is enforced via the engines field.
 
-        :default: - no max
+        You will normally not need to set this option.
+        Consider this option only if your package is known to not function with newer versions of node.
+
+        :default: - no maximum version is enforced
 
         :stability: experimental
         '''
@@ -4903,9 +5528,19 @@ class NodePackageOptions:
 
     @builtins.property
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive).
+        '''(experimental) The minimum node version required by this package to function. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any older versions of node.
+        This requirement is enforced via the engines field.
 
-        :default: - no "engines" specified
+        You will normally not need to set this option, even if your package is incompatible with EOL versions of node.
+        Consider this option only if your package depends on a specific feature, that is not available in other LTS versions.
+        Setting this option has very high impact on the consumers of your package,
+        as package managers will actively prevent usage with node versions you have marked as incompatible.
+
+        To change the node version of your CI/CD workflows, use ``workflowNodeVersion``.
+
+        :default: - no minimum version is enforced
 
         :stability: experimental
         '''
@@ -4982,6 +5617,17 @@ class NodePackageOptions:
         result = self._values.get("npm_token_secret")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def npm_trusted_publishing(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work.
+
+        :default: - false
+
+        :stability: experimental
+        '''
+        result = self._values.get("npm_trusted_publishing")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def package_manager(self) -> typing.Optional[NodePackageManager]:
         '''(experimental) The Node Package Manager used to execute scripts.
@@ -5043,7 +5689,7 @@ class NodePackageOptions:
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
+        :default: "9"
 
         :stability: experimental
         '''
@@ -5148,7 +5794,11 @@ class NodeProject(
         *,
         default_release_branch: builtins.str,
         artifacts_directory: typing.Optional[builtins.str] = None,
+        audit_deps: typing.Optional[builtins.bool] = None,
+        audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+        biome: typing.Optional[builtins.bool] = None,
+        biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow: typing.Optional[builtins.bool] = None,
         build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5212,6 +5862,7 @@ class NodeProject(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -5228,6 +5879,7 @@ class NodeProject(
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -5239,9 +5891,11 @@ class NodeProject(
         scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         stability: typing.Optional[builtins.str] = None,
         yarn_berry_options: typing.Optional[typing.Union["YarnBerryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        bump_package: typing.Optional[builtins.str] = None,
         jsii_release_version: typing.Optional[builtins.str] = None,
         major_version: typing.Optional[jsii.Number] = None,
         min_major_version: typing.Optional[jsii.Number] = None,
+        next_version_command: typing.Optional[builtins.str] = None,
         npm_dist_tag: typing.Optional[builtins.str] = None,
         post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         prerelease: typing.Optional[builtins.str] = None,
@@ -5249,12 +5903,14 @@ class NodeProject(
         publish_tasks: typing.Optional[builtins.bool] = None,
         releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
         release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+        release_environment: typing.Optional[builtins.str] = None,
         release_every_commit: typing.Optional[builtins.bool] = None,
         release_failure_issue: typing.Optional[builtins.bool] = None,
         release_failure_issue_label: typing.Optional[builtins.str] = None,
         release_schedule: typing.Optional[builtins.str] = None,
         release_tag_prefix: typing.Optional[builtins.str] = None,
         release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+        release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         release_workflow_name: typing.Optional[builtins.str] = None,
         release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -5277,14 +5933,18 @@ class NodeProject(
         '''
         :param default_release_branch: (experimental) The name of the main release branch. Default: "main"
         :param artifacts_directory: (experimental) A directory which will contain build artifacts. Default: "dist"
+        :param audit_deps: (experimental) Run security audit on dependencies. When enabled, creates an "audit" task that checks for known security vulnerabilities in dependencies. By default, runs during every build and checks for "high" severity vulnerabilities or above in all dependencies (including dev dependencies). Default: false
+        :param audit_deps_options: (experimental) Security audit options. Default: - default options
         :param auto_approve_upgrades: (experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued). Throw if set to true but ``autoApproveOptions`` are not defined. Default: - true
+        :param biome: (experimental) Setup Biome. Default: false
+        :param biome_options: (experimental) Biome options. Default: - default options
         :param build_workflow: (experimental) Define a GitHub workflow for building PRs. Default: - true if not a subproject
         :param build_workflow_options: (experimental) Options for PR build workflow.
         :param build_workflow_triggers: (deprecated) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
         :param bundler_options: (experimental) Options for ``Bundler``.
         :param check_licenses: (experimental) Configure which licenses should be deemed acceptable for use by dependencies. This setting will cause the build to fail, if any prohibited or not allowed licenses ares encountered. Default: - no license checks are run during the build and all licenses will be accepted
-        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v4 A secret is required for private repos. Configured with ``@codeCovTokenSecret``. Default: false
-        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories. Default: - if this option is not specified, only public repositories are supported
+        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``. Default: false
+        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token. Default: - OIDC auth is used
         :param copyright_owner: (experimental) License copyright owner. Default: - defaults to the value of authorName or "" if ``authorName`` is undefined.
         :param copyright_period: (experimental) The copyright years to put in the LICENSE file. Default: - current year
         :param dependabot: (experimental) Use dependabot to handle dependency upgrades. Cannot be used in conjunction with ``depsUpgrade``. Default: false
@@ -5311,8 +5971,8 @@ class NodeProject(
         :param release_to_npm: (experimental) Automatically release to npm when new versions are introduced. Default: false
         :param release_workflow: (deprecated) DEPRECATED: renamed to ``release``. Default: - true if not a subproject
         :param workflow_bootstrap_steps: (experimental) Workflow steps to use in order to bootstrap this repo. Default: "yarn install --frozen-lockfile && yarn projen"
-        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - GitHub Actions
-        :param workflow_node_version: (experimental) The node version to use in GitHub workflows. Default: - same as ``minNodeVersion``
+        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - default GitHub Actions user
+        :param workflow_node_version: (experimental) The node version used in GitHub Actions workflows. Always use this option if your GitHub Actions workflows require a specific to run. Default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
         :param workflow_package_cache: (experimental) Enable Node.js package cache in GitHub workflows. Default: false
         :param auto_approve_options: (experimental) Enable and configure the 'auto approve' workflow. Default: - auto approve is disabled
         :param auto_merge: (experimental) Enable automatic merging on GitHub. Has no effect if ``github.mergify`` is set to false. Default: true
@@ -5341,6 +6001,7 @@ class NodeProject(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -5350,27 +6011,30 @@ class NodeProject(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
         :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
         :param scripts: (deprecated) npm scripts to include. If a script has the same name as a standard script, the standard script will be overwritten. Also adds the script as a task. Default: {}
         :param stability: (experimental) Package's Stability.
         :param yarn_berry_options: (experimental) Options for Yarn Berry. Default: - Yarn Berry v4 with all default options
+        :param bump_package: (experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string. This can be any compatible package version, including the deprecated ``standard-version@9``. Default: - A recent version of "commit-and-tag-version"
         :param jsii_release_version: (experimental) Version requirement of ``publib`` which is used to publish modules to npm. Default: "latest"
         :param major_version: (experimental) Major version to release from the default branch. If this is specified, we bump the latest version of this major version line. If not specified, we bump the global latest version. Default: - Major version is not enforced.
         :param min_major_version: (experimental) Minimal Major version to release. This can be useful to set to 1, as breaking changes before the 1.x major release are not incrementing the major version number. Can not be set together with ``majorVersion``. Default: - No minimum version is being enforced
+        :param next_version_command: (experimental) A shell command to control the next version to release. If present, this shell command will be run before the bump is executed, and it determines what version to release. It will be executed in the following environment: - Working directory: the project directory. - ``$VERSION``: the current version. Looks like ``1.2.3``. - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset. - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``. The command should print one of the following to ``stdout``: - Nothing: the next version number will be determined based on commit history. - ``x.y.z``: the next version number will be ``x.y.z``. - ``major|minor|patch``: the next version number will be the current version number with the indicated component bumped. This setting cannot be specified together with ``minMajorVersion``; the invoked script can be used to achieve the effects of ``minMajorVersion``. Default: - The next version will be determined based on the commit history and project settings.
         :param npm_dist_tag: (experimental) The npmDistTag to use when publishing from the default branch. To set the npm dist-tag for release branches, set the ``npmDistTag`` property for each branch. Default: "latest"
         :param post_build_steps: (experimental) Steps to execute after build as part of the release workflow. Default: []
         :param prerelease: (experimental) Bump versions from the default branch as pre-releases (e.g. "beta", "alpha", "pre"). Default: - normal semantic versions
@@ -5378,15 +6042,17 @@ class NodeProject(
         :param publish_tasks: (experimental) Define publishing tasks that can be executed manually as well as workflows. Normally, publishing only happens within automated workflows. Enable this in order to create a publishing task for each publishing activity. Default: false
         :param releasable_commits: (experimental) Find commits that should be considered releasable Used to decide if a release is required. Default: ReleasableCommits.everyCommit()
         :param release_branches: (experimental) Defines additional release branches. A workflow will be created for each release branch which will publish releases from commits in this branch. Each release branch *must* be assigned a major version number which is used to enforce that versions published from that branch always use that major version. If multiple branches are used, the ``majorVersion`` field must also be provided for the default branch. Default: - no additional branches are used for release. you can use ``addBranch()`` to add additional branches.
+        :param release_environment: (experimental) The GitHub Actions environment used for the release. This can be used to add an explicit approval step to the release or limit who can initiate a release through environment protection rules. When multiple artifacts are released, the environment can be overwritten on a per artifact basis. Default: - no environment used, unless set at the artifact level
         :param release_every_commit: (deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``. Default: true
         :param release_failure_issue: (experimental) Create a github issue on every failed publishing task. Default: false
         :param release_failure_issue_label: (experimental) The label to apply to issues indicating publish failures. Only applies if ``releaseFailureIssue`` is true. Default: "failed-release"
         :param release_schedule: (deprecated) CRON schedule to trigger new releases. Default: - no scheduled releases
         :param release_tag_prefix: (experimental) Automatically add the given prefix to release tags. Useful if you are releasing on multiple branches with overlapping version numbers. Note: this prefix is used to detect the latest tagged version when bumping, so if you change this on a project with an existing version history, you may need to manually tag your latest release with the new prefix. Default: "v"
         :param release_trigger: (experimental) The release trigger to use. Default: - Continuous releases (``ReleaseTrigger.continuous()``)
+        :param release_workflow_env: (experimental) Build environment variables for release workflows. Default: {}
         :param release_workflow_name: (experimental) The name of the default release workflow. Default: "release"
         :param release_workflow_setup_steps: (experimental) A set of workflow steps to execute in order to setup the workflow container.
-        :param versionrc_options: (experimental) Custom configuration used when creating changelog with standard-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
+        :param versionrc_options: (experimental) Custom configuration used when creating changelog with commit-and-tag-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
         :param workflow_container_image: (experimental) Container image to use for GitHub workflows. Default: - default image
         :param workflow_runs_on: (experimental) Github Runner selection labels. Default: ["ubuntu-latest"]
         :param workflow_runs_on_group: (experimental) Github Runner Group selection options.
@@ -5408,7 +6074,11 @@ class NodeProject(
         options = NodeProjectOptions(
             default_release_branch=default_release_branch,
             artifacts_directory=artifacts_directory,
+            audit_deps=audit_deps,
+            audit_deps_options=audit_deps_options,
             auto_approve_upgrades=auto_approve_upgrades,
+            biome=biome,
+            biome_options=biome_options,
             build_workflow=build_workflow,
             build_workflow_options=build_workflow_options,
             build_workflow_triggers=build_workflow_triggers,
@@ -5472,6 +6142,7 @@ class NodeProject(
             bugs_email=bugs_email,
             bugs_url=bugs_url,
             bundled_deps=bundled_deps,
+            bun_version=bun_version,
             code_artifact_options=code_artifact_options,
             deps=deps,
             description=description,
@@ -5488,6 +6159,7 @@ class NodeProject(
             npm_registry=npm_registry,
             npm_registry_url=npm_registry_url,
             npm_token_secret=npm_token_secret,
+            npm_trusted_publishing=npm_trusted_publishing,
             package_manager=package_manager,
             package_name=package_name,
             peer_dependency_options=peer_dependency_options,
@@ -5499,9 +6171,11 @@ class NodeProject(
             scripts=scripts,
             stability=stability,
             yarn_berry_options=yarn_berry_options,
+            bump_package=bump_package,
             jsii_release_version=jsii_release_version,
             major_version=major_version,
             min_major_version=min_major_version,
+            next_version_command=next_version_command,
             npm_dist_tag=npm_dist_tag,
             post_build_steps=post_build_steps,
             prerelease=prerelease,
@@ -5509,12 +6183,14 @@ class NodeProject(
             publish_tasks=publish_tasks,
             releasable_commits=releasable_commits,
             release_branches=release_branches,
+            release_environment=release_environment,
             release_every_commit=release_every_commit,
             release_failure_issue=release_failure_issue,
             release_failure_issue_label=release_failure_issue_label,
             release_schedule=release_schedule,
             release_tag_prefix=release_tag_prefix,
             release_trigger=release_trigger,
+            release_workflow_env=release_workflow_env,
             release_workflow_name=release_workflow_name,
             release_workflow_setup_steps=release_workflow_setup_steps,
             versionrc_options=versionrc_options,
@@ -5895,6 +6571,14 @@ class NodeProject(
         '''
         return typing.cast(typing.Optional[_AutoMerge_f73f9be0], jsii.get(self, "autoMerge"))
 
+    @builtins.property
+    @jsii.member(jsii_name="biome")
+    def biome(self) -> typing.Optional[Biome]:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(typing.Optional[Biome], jsii.get(self, "biome"))
+
     @builtins.property
     @jsii.member(jsii_name="buildWorkflow")
     def build_workflow(self) -> typing.Optional[_BuildWorkflow_bdd5e6cc]:
@@ -5927,7 +6611,9 @@ class NodeProject(
     @builtins.property
     @jsii.member(jsii_name="maxNodeVersion")
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Maximum node version required by this package.
+        '''(experimental) Maximum node version supported by this package.
+
+        The value indicates the package is incompatible with newer versions.
 
         :stability: experimental
         '''
@@ -5936,7 +6622,9 @@ class NodeProject(
     @builtins.property
     @jsii.member(jsii_name="minNodeVersion")
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version required by this package.
+        '''(experimental) The minimum node version required by this package to function.
+
+        This value indicates the package is incompatible with older versions.
 
         :stability: experimental
         '''
@@ -6047,6 +6735,7 @@ class NodeProject(
         "bugs_email": "bugsEmail",
         "bugs_url": "bugsUrl",
         "bundled_deps": "bundledDeps",
+        "bun_version": "bunVersion",
         "code_artifact_options": "codeArtifactOptions",
         "deps": "deps",
         "description": "description",
@@ -6063,6 +6752,7 @@ class NodeProject(
         "npm_registry": "npmRegistry",
         "npm_registry_url": "npmRegistryUrl",
         "npm_token_secret": "npmTokenSecret",
+        "npm_trusted_publishing": "npmTrustedPublishing",
         "package_manager": "packageManager",
         "package_name": "packageName",
         "peer_dependency_options": "peerDependencyOptions",
@@ -6074,9 +6764,11 @@ class NodeProject(
         "scripts": "scripts",
         "stability": "stability",
         "yarn_berry_options": "yarnBerryOptions",
+        "bump_package": "bumpPackage",
         "jsii_release_version": "jsiiReleaseVersion",
         "major_version": "majorVersion",
         "min_major_version": "minMajorVersion",
+        "next_version_command": "nextVersionCommand",
         "npm_dist_tag": "npmDistTag",
         "post_build_steps": "postBuildSteps",
         "prerelease": "prerelease",
@@ -6084,12 +6776,14 @@ class NodeProject(
         "publish_tasks": "publishTasks",
         "releasable_commits": "releasableCommits",
         "release_branches": "releaseBranches",
+        "release_environment": "releaseEnvironment",
         "release_every_commit": "releaseEveryCommit",
         "release_failure_issue": "releaseFailureIssue",
         "release_failure_issue_label": "releaseFailureIssueLabel",
         "release_schedule": "releaseSchedule",
         "release_tag_prefix": "releaseTagPrefix",
         "release_trigger": "releaseTrigger",
+        "release_workflow_env": "releaseWorkflowEnv",
         "release_workflow_name": "releaseWorkflowName",
         "release_workflow_setup_steps": "releaseWorkflowSetupSteps",
         "versionrc_options": "versionrcOptions",
@@ -6098,7 +6792,11 @@ class NodeProject(
         "workflow_runs_on_group": "workflowRunsOnGroup",
         "default_release_branch": "defaultReleaseBranch",
         "artifacts_directory": "artifactsDirectory",
+        "audit_deps": "auditDeps",
+        "audit_deps_options": "auditDepsOptions",
         "auto_approve_upgrades": "autoApproveUpgrades",
+        "biome": "biome",
+        "biome_options": "biomeOptions",
         "build_workflow": "buildWorkflow",
         "build_workflow_options": "buildWorkflowOptions",
         "build_workflow_triggers": "buildWorkflowTriggers",
@@ -6184,6 +6882,7 @@ class NodeProjectOptions(
         bugs_email: typing.Optional[builtins.str] = None,
         bugs_url: typing.Optional[builtins.str] = None,
         bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+        bun_version: typing.Optional[builtins.str] = None,
         code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         deps: typing.Optional[typing.Sequence[builtins.str]] = None,
         description: typing.Optional[builtins.str] = None,
@@ -6200,6 +6899,7 @@ class NodeProjectOptions(
         npm_registry: typing.Optional[builtins.str] = None,
         npm_registry_url: typing.Optional[builtins.str] = None,
         npm_token_secret: typing.Optional[builtins.str] = None,
+        npm_trusted_publishing: typing.Optional[builtins.bool] = None,
         package_manager: typing.Optional[NodePackageManager] = None,
         package_name: typing.Optional[builtins.str] = None,
         peer_dependency_options: typing.Optional[typing.Union["PeerDependencyOptions", typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6211,9 +6911,11 @@ class NodeProjectOptions(
         scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         stability: typing.Optional[builtins.str] = None,
         yarn_berry_options: typing.Optional[typing.Union["YarnBerryOptions", typing.Dict[builtins.str, typing.Any]]] = None,
+        bump_package: typing.Optional[builtins.str] = None,
         jsii_release_version: typing.Optional[builtins.str] = None,
         major_version: typing.Optional[jsii.Number] = None,
         min_major_version: typing.Optional[jsii.Number] = None,
+        next_version_command: typing.Optional[builtins.str] = None,
         npm_dist_tag: typing.Optional[builtins.str] = None,
         post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         prerelease: typing.Optional[builtins.str] = None,
@@ -6221,12 +6923,14 @@ class NodeProjectOptions(
         publish_tasks: typing.Optional[builtins.bool] = None,
         releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
         release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+        release_environment: typing.Optional[builtins.str] = None,
         release_every_commit: typing.Optional[builtins.bool] = None,
         release_failure_issue: typing.Optional[builtins.bool] = None,
         release_failure_issue_label: typing.Optional[builtins.str] = None,
         release_schedule: typing.Optional[builtins.str] = None,
         release_tag_prefix: typing.Optional[builtins.str] = None,
         release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+        release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         release_workflow_name: typing.Optional[builtins.str] = None,
         release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
         versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -6235,7 +6939,11 @@ class NodeProjectOptions(
         workflow_runs_on_group: typing.Optional[typing.Union[_GroupRunnerOptions_148c59c1, typing.Dict[builtins.str, typing.Any]]] = None,
         default_release_branch: builtins.str,
         artifacts_directory: typing.Optional[builtins.str] = None,
+        audit_deps: typing.Optional[builtins.bool] = None,
+        audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+        biome: typing.Optional[builtins.bool] = None,
+        biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow: typing.Optional[builtins.bool] = None,
         build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
         build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -6313,6 +7021,7 @@ class NodeProjectOptions(
         :param bugs_email: (experimental) The email address to which issues should be reported.
         :param bugs_url: (experimental) The url to your project's issue tracker.
         :param bundled_deps: (experimental) List of dependencies to bundle into this module. These modules will be added both to the ``dependencies`` section and ``bundledDependencies`` section of your ``package.json``. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include.
+        :param bun_version: (experimental) The version of Bun to use if using Bun as a package manager. Default: "latest"
         :param code_artifact_options: (experimental) Options for npm packages using AWS CodeArtifact. This is required if publishing packages to, or installing scoped packages from AWS CodeArtifact Default: - undefined
         :param deps: (experimental) Runtime dependencies of this module. The recommendation is to only specify the module name here (e.g. ``express``). This will behave similar to ``yarn add`` or ``npm install`` in the sense that it will add the module as a dependency to your ``package.json`` file with the latest version (``^``). You can specify semver requirements in the same syntax passed to ``npm i`` or ``yarn add`` (e.g. ``express@^2``) and this will be what you ``package.json`` will eventually include. Default: []
         :param description: (experimental) The description is just a string that helps people understand the purpose of the package. It can be used when searching for packages in a package manager as well. See https://classic.yarnpkg.com/en/docs/package-json/#toc-description
@@ -6322,27 +7031,30 @@ class NodeProjectOptions(
         :param keywords: (experimental) Keywords to include in ``package.json``.
         :param license: (experimental) License's SPDX identifier. See https://github.com/projen/projen/tree/main/license-text for a list of supported licenses. Use the ``licensed`` option if you want to no license to be specified. Default: "Apache-2.0"
         :param licensed: (experimental) Indicates if a license should be added. Default: true
-        :param max_node_version: (experimental) Minimum node.js version to require via ``engines`` (inclusive). Default: - no max
-        :param min_node_version: (experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive). Default: - no "engines" specified
+        :param max_node_version: (experimental) The maximum node version supported by this package. Most projects should not use this option. The value indicates that the package is incompatible with any newer versions of node. This requirement is enforced via the engines field. You will normally not need to set this option. Consider this option only if your package is known to not function with newer versions of node. Default: - no maximum version is enforced
+        :param min_node_version: (experimental) The minimum node version required by this package to function. Most projects should not use this option. The value indicates that the package is incompatible with any older versions of node. This requirement is enforced via the engines field. You will normally not need to set this option, even if your package is incompatible with EOL versions of node. Consider this option only if your package depends on a specific feature, that is not available in other LTS versions. Setting this option has very high impact on the consumers of your package, as package managers will actively prevent usage with node versions you have marked as incompatible. To change the node version of your CI/CD workflows, use ``workflowNodeVersion``. Default: - no minimum version is enforced
         :param npm_access: (experimental) Access level of the npm package. Default: - for scoped packages (e.g. ``foo@bar``), the default is ``NpmAccess.RESTRICTED``, for non-scoped packages, the default is ``NpmAccess.PUBLIC``.
         :param npm_provenance: (experimental) Should provenance statements be generated when the package is published. A supported package manager is required to publish a package with npm provenance statements and you will need to use a supported CI/CD provider. Note that the projen ``Release`` and ``Publisher`` components are using ``publib`` to publish packages, which is using npm internally and supports provenance statements independently of the package manager used. Default: - true for public packages, false otherwise
         :param npm_registry: (deprecated) The host name of the npm registry to publish to. Cannot be set together with ``npmRegistryUrl``.
         :param npm_registry_url: (experimental) The base URL of the npm package registry. Must be a URL (e.g. start with "https://" or "http://") Default: "https://registry.npmjs.org"
         :param npm_token_secret: (experimental) GitHub secret which contains the NPM token to use when publishing packages. Default: "NPM_TOKEN"
+        :param npm_trusted_publishing: (experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work. Default: - false
         :param package_manager: (experimental) The Node Package Manager used to execute scripts. Default: NodePackageManager.YARN_CLASSIC
         :param package_name: (experimental) The "name" in package.json. Default: - defaults to project name
         :param peer_dependency_options: (experimental) Options for ``peerDeps``.
         :param peer_deps: (experimental) Peer dependencies for this module. Dependencies listed here are required to be installed (and satisfied) by the *consumer* of this library. Using peer dependencies allows you to ensure that only a single module of a certain library exists in the ``node_modules`` tree of your consumers. Note that prior to npm@7, peer dependencies are *not* automatically installed, which means that adding peer dependencies to a library will be a breaking change for your customers. Unless ``peerDependencyOptions.pinnedDevDependency`` is disabled (it is enabled by default), projen will automatically add a dev dependency with a pinned version for each peer dependency. This will ensure that you build & test your module against the lowest peer version required. Default: []
-        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "7"
+        :param pnpm_version: (experimental) The version of PNPM to use if using PNPM as a package manager. Default: "9"
         :param repository: (experimental) The repository is the location where the actual code for your package lives. See https://classic.yarnpkg.com/en/docs/package-json/#toc-repository
         :param repository_directory: (experimental) If the package.json for your package is not in the root directory (for example if it is part of a monorepo), you can specify the directory in which it lives.
         :param scoped_packages_options: (experimental) Options for privately hosted scoped packages. Default: - fetch all scoped packages from the public npm registry
         :param scripts: (deprecated) npm scripts to include. If a script has the same name as a standard script, the standard script will be overwritten. Also adds the script as a task. Default: {}
         :param stability: (experimental) Package's Stability.
         :param yarn_berry_options: (experimental) Options for Yarn Berry. Default: - Yarn Berry v4 with all default options
+        :param bump_package: (experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string. This can be any compatible package version, including the deprecated ``standard-version@9``. Default: - A recent version of "commit-and-tag-version"
         :param jsii_release_version: (experimental) Version requirement of ``publib`` which is used to publish modules to npm. Default: "latest"
         :param major_version: (experimental) Major version to release from the default branch. If this is specified, we bump the latest version of this major version line. If not specified, we bump the global latest version. Default: - Major version is not enforced.
         :param min_major_version: (experimental) Minimal Major version to release. This can be useful to set to 1, as breaking changes before the 1.x major release are not incrementing the major version number. Can not be set together with ``majorVersion``. Default: - No minimum version is being enforced
+        :param next_version_command: (experimental) A shell command to control the next version to release. If present, this shell command will be run before the bump is executed, and it determines what version to release. It will be executed in the following environment: - Working directory: the project directory. - ``$VERSION``: the current version. Looks like ``1.2.3``. - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset. - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``. The command should print one of the following to ``stdout``: - Nothing: the next version number will be determined based on commit history. - ``x.y.z``: the next version number will be ``x.y.z``. - ``major|minor|patch``: the next version number will be the current version number with the indicated component bumped. This setting cannot be specified together with ``minMajorVersion``; the invoked script can be used to achieve the effects of ``minMajorVersion``. Default: - The next version will be determined based on the commit history and project settings.
         :param npm_dist_tag: (experimental) The npmDistTag to use when publishing from the default branch. To set the npm dist-tag for release branches, set the ``npmDistTag`` property for each branch. Default: "latest"
         :param post_build_steps: (experimental) Steps to execute after build as part of the release workflow. Default: []
         :param prerelease: (experimental) Bump versions from the default branch as pre-releases (e.g. "beta", "alpha", "pre"). Default: - normal semantic versions
@@ -6350,28 +7062,34 @@ class NodeProjectOptions(
         :param publish_tasks: (experimental) Define publishing tasks that can be executed manually as well as workflows. Normally, publishing only happens within automated workflows. Enable this in order to create a publishing task for each publishing activity. Default: false
         :param releasable_commits: (experimental) Find commits that should be considered releasable Used to decide if a release is required. Default: ReleasableCommits.everyCommit()
         :param release_branches: (experimental) Defines additional release branches. A workflow will be created for each release branch which will publish releases from commits in this branch. Each release branch *must* be assigned a major version number which is used to enforce that versions published from that branch always use that major version. If multiple branches are used, the ``majorVersion`` field must also be provided for the default branch. Default: - no additional branches are used for release. you can use ``addBranch()`` to add additional branches.
+        :param release_environment: (experimental) The GitHub Actions environment used for the release. This can be used to add an explicit approval step to the release or limit who can initiate a release through environment protection rules. When multiple artifacts are released, the environment can be overwritten on a per artifact basis. Default: - no environment used, unless set at the artifact level
         :param release_every_commit: (deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``. Default: true
         :param release_failure_issue: (experimental) Create a github issue on every failed publishing task. Default: false
         :param release_failure_issue_label: (experimental) The label to apply to issues indicating publish failures. Only applies if ``releaseFailureIssue`` is true. Default: "failed-release"
         :param release_schedule: (deprecated) CRON schedule to trigger new releases. Default: - no scheduled releases
         :param release_tag_prefix: (experimental) Automatically add the given prefix to release tags. Useful if you are releasing on multiple branches with overlapping version numbers. Note: this prefix is used to detect the latest tagged version when bumping, so if you change this on a project with an existing version history, you may need to manually tag your latest release with the new prefix. Default: "v"
         :param release_trigger: (experimental) The release trigger to use. Default: - Continuous releases (``ReleaseTrigger.continuous()``)
+        :param release_workflow_env: (experimental) Build environment variables for release workflows. Default: {}
         :param release_workflow_name: (experimental) The name of the default release workflow. Default: "release"
         :param release_workflow_setup_steps: (experimental) A set of workflow steps to execute in order to setup the workflow container.
-        :param versionrc_options: (experimental) Custom configuration used when creating changelog with standard-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
+        :param versionrc_options: (experimental) Custom configuration used when creating changelog with commit-and-tag-version package. Given values either append to default configuration or overwrite values in it. Default: - standard configuration applicable for GitHub repositories
         :param workflow_container_image: (experimental) Container image to use for GitHub workflows. Default: - default image
         :param workflow_runs_on: (experimental) Github Runner selection labels. Default: ["ubuntu-latest"]
         :param workflow_runs_on_group: (experimental) Github Runner Group selection options.
         :param default_release_branch: (experimental) The name of the main release branch. Default: "main"
         :param artifacts_directory: (experimental) A directory which will contain build artifacts. Default: "dist"
+        :param audit_deps: (experimental) Run security audit on dependencies. When enabled, creates an "audit" task that checks for known security vulnerabilities in dependencies. By default, runs during every build and checks for "high" severity vulnerabilities or above in all dependencies (including dev dependencies). Default: false
+        :param audit_deps_options: (experimental) Security audit options. Default: - default options
         :param auto_approve_upgrades: (experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued). Throw if set to true but ``autoApproveOptions`` are not defined. Default: - true
+        :param biome: (experimental) Setup Biome. Default: false
+        :param biome_options: (experimental) Biome options. Default: - default options
         :param build_workflow: (experimental) Define a GitHub workflow for building PRs. Default: - true if not a subproject
         :param build_workflow_options: (experimental) Options for PR build workflow.
         :param build_workflow_triggers: (deprecated) Build workflow triggers. Default: "{ pullRequest: {}, workflowDispatch: {} }"
         :param bundler_options: (experimental) Options for ``Bundler``.
         :param check_licenses: (experimental) Configure which licenses should be deemed acceptable for use by dependencies. This setting will cause the build to fail, if any prohibited or not allowed licenses ares encountered. Default: - no license checks are run during the build and all licenses will be accepted
-        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v4 A secret is required for private repos. Configured with ``@codeCovTokenSecret``. Default: false
-        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories. Default: - if this option is not specified, only public repositories are supported
+        :param code_cov: (experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``. Default: false
+        :param code_cov_token_secret: (experimental) Define the secret name for a specified https://codecov.io/ token. Default: - OIDC auth is used
         :param copyright_owner: (experimental) License copyright owner. Default: - defaults to the value of authorName or "" if ``authorName`` is undefined.
         :param copyright_period: (experimental) The copyright years to put in the LICENSE file. Default: - current year
         :param dependabot: (experimental) Use dependabot to handle dependency upgrades. Cannot be used in conjunction with ``depsUpgrade``. Default: false
@@ -6398,8 +7116,8 @@ class NodeProjectOptions(
         :param release_to_npm: (experimental) Automatically release to npm when new versions are introduced. Default: false
         :param release_workflow: (deprecated) DEPRECATED: renamed to ``release``. Default: - true if not a subproject
         :param workflow_bootstrap_steps: (experimental) Workflow steps to use in order to bootstrap this repo. Default: "yarn install --frozen-lockfile && yarn projen"
-        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - GitHub Actions
-        :param workflow_node_version: (experimental) The node version to use in GitHub workflows. Default: - same as ``minNodeVersion``
+        :param workflow_git_identity: (experimental) The git identity to use in workflows. Default: - default GitHub Actions user
+        :param workflow_node_version: (experimental) The node version used in GitHub Actions workflows. Always use this option if your GitHub Actions workflows require a specific to run. Default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
         :param workflow_package_cache: (experimental) Enable Node.js package cache in GitHub workflows. Default: false
 
         :stability: experimental
@@ -6434,6 +7152,10 @@ class NodeProjectOptions(
             yarn_berry_options = YarnBerryOptions(**yarn_berry_options)
         if isinstance(workflow_runs_on_group, dict):
             workflow_runs_on_group = _GroupRunnerOptions_148c59c1(**workflow_runs_on_group)
+        if isinstance(audit_deps_options, dict):
+            audit_deps_options = AuditOptions(**audit_deps_options)
+        if isinstance(biome_options, dict):
+            biome_options = BiomeOptions(**biome_options)
         if isinstance(build_workflow_options, dict):
             build_workflow_options = BuildWorkflowOptions(**build_workflow_options)
         if isinstance(build_workflow_triggers, dict):
@@ -6497,6 +7219,7 @@ class NodeProjectOptions(
             check_type(argname="argument bugs_email", value=bugs_email, expected_type=type_hints["bugs_email"])
             check_type(argname="argument bugs_url", value=bugs_url, expected_type=type_hints["bugs_url"])
             check_type(argname="argument bundled_deps", value=bundled_deps, expected_type=type_hints["bundled_deps"])
+            check_type(argname="argument bun_version", value=bun_version, expected_type=type_hints["bun_version"])
             check_type(argname="argument code_artifact_options", value=code_artifact_options, expected_type=type_hints["code_artifact_options"])
             check_type(argname="argument deps", value=deps, expected_type=type_hints["deps"])
             check_type(argname="argument description", value=description, expected_type=type_hints["description"])
@@ -6513,6 +7236,7 @@ class NodeProjectOptions(
             check_type(argname="argument npm_registry", value=npm_registry, expected_type=type_hints["npm_registry"])
             check_type(argname="argument npm_registry_url", value=npm_registry_url, expected_type=type_hints["npm_registry_url"])
             check_type(argname="argument npm_token_secret", value=npm_token_secret, expected_type=type_hints["npm_token_secret"])
+            check_type(argname="argument npm_trusted_publishing", value=npm_trusted_publishing, expected_type=type_hints["npm_trusted_publishing"])
             check_type(argname="argument package_manager", value=package_manager, expected_type=type_hints["package_manager"])
             check_type(argname="argument package_name", value=package_name, expected_type=type_hints["package_name"])
             check_type(argname="argument peer_dependency_options", value=peer_dependency_options, expected_type=type_hints["peer_dependency_options"])
@@ -6524,9 +7248,11 @@ class NodeProjectOptions(
             check_type(argname="argument scripts", value=scripts, expected_type=type_hints["scripts"])
             check_type(argname="argument stability", value=stability, expected_type=type_hints["stability"])
             check_type(argname="argument yarn_berry_options", value=yarn_berry_options, expected_type=type_hints["yarn_berry_options"])
+            check_type(argname="argument bump_package", value=bump_package, expected_type=type_hints["bump_package"])
             check_type(argname="argument jsii_release_version", value=jsii_release_version, expected_type=type_hints["jsii_release_version"])
             check_type(argname="argument major_version", value=major_version, expected_type=type_hints["major_version"])
             check_type(argname="argument min_major_version", value=min_major_version, expected_type=type_hints["min_major_version"])
+            check_type(argname="argument next_version_command", value=next_version_command, expected_type=type_hints["next_version_command"])
             check_type(argname="argument npm_dist_tag", value=npm_dist_tag, expected_type=type_hints["npm_dist_tag"])
             check_type(argname="argument post_build_steps", value=post_build_steps, expected_type=type_hints["post_build_steps"])
             check_type(argname="argument prerelease", value=prerelease, expected_type=type_hints["prerelease"])
@@ -6534,12 +7260,14 @@ class NodeProjectOptions(
             check_type(argname="argument publish_tasks", value=publish_tasks, expected_type=type_hints["publish_tasks"])
             check_type(argname="argument releasable_commits", value=releasable_commits, expected_type=type_hints["releasable_commits"])
             check_type(argname="argument release_branches", value=release_branches, expected_type=type_hints["release_branches"])
+            check_type(argname="argument release_environment", value=release_environment, expected_type=type_hints["release_environment"])
             check_type(argname="argument release_every_commit", value=release_every_commit, expected_type=type_hints["release_every_commit"])
             check_type(argname="argument release_failure_issue", value=release_failure_issue, expected_type=type_hints["release_failure_issue"])
             check_type(argname="argument release_failure_issue_label", value=release_failure_issue_label, expected_type=type_hints["release_failure_issue_label"])
             check_type(argname="argument release_schedule", value=release_schedule, expected_type=type_hints["release_schedule"])
             check_type(argname="argument release_tag_prefix", value=release_tag_prefix, expected_type=type_hints["release_tag_prefix"])
             check_type(argname="argument release_trigger", value=release_trigger, expected_type=type_hints["release_trigger"])
+            check_type(argname="argument release_workflow_env", value=release_workflow_env, expected_type=type_hints["release_workflow_env"])
             check_type(argname="argument release_workflow_name", value=release_workflow_name, expected_type=type_hints["release_workflow_name"])
             check_type(argname="argument release_workflow_setup_steps", value=release_workflow_setup_steps, expected_type=type_hints["release_workflow_setup_steps"])
             check_type(argname="argument versionrc_options", value=versionrc_options, expected_type=type_hints["versionrc_options"])
@@ -6548,7 +7276,11 @@ class NodeProjectOptions(
             check_type(argname="argument workflow_runs_on_group", value=workflow_runs_on_group, expected_type=type_hints["workflow_runs_on_group"])
             check_type(argname="argument default_release_branch", value=default_release_branch, expected_type=type_hints["default_release_branch"])
             check_type(argname="argument artifacts_directory", value=artifacts_directory, expected_type=type_hints["artifacts_directory"])
+            check_type(argname="argument audit_deps", value=audit_deps, expected_type=type_hints["audit_deps"])
+            check_type(argname="argument audit_deps_options", value=audit_deps_options, expected_type=type_hints["audit_deps_options"])
             check_type(argname="argument auto_approve_upgrades", value=auto_approve_upgrades, expected_type=type_hints["auto_approve_upgrades"])
+            check_type(argname="argument biome", value=biome, expected_type=type_hints["biome"])
+            check_type(argname="argument biome_options", value=biome_options, expected_type=type_hints["biome_options"])
             check_type(argname="argument build_workflow", value=build_workflow, expected_type=type_hints["build_workflow"])
             check_type(argname="argument build_workflow_options", value=build_workflow_options, expected_type=type_hints["build_workflow_options"])
             check_type(argname="argument build_workflow_triggers", value=build_workflow_triggers, expected_type=type_hints["build_workflow_triggers"])
@@ -6665,6 +7397,8 @@ class NodeProjectOptions(
             self._values["bugs_url"] = bugs_url
         if bundled_deps is not None:
             self._values["bundled_deps"] = bundled_deps
+        if bun_version is not None:
+            self._values["bun_version"] = bun_version
         if code_artifact_options is not None:
             self._values["code_artifact_options"] = code_artifact_options
         if deps is not None:
@@ -6697,6 +7431,8 @@ class NodeProjectOptions(
             self._values["npm_registry_url"] = npm_registry_url
         if npm_token_secret is not None:
             self._values["npm_token_secret"] = npm_token_secret
+        if npm_trusted_publishing is not None:
+            self._values["npm_trusted_publishing"] = npm_trusted_publishing
         if package_manager is not None:
             self._values["package_manager"] = package_manager
         if package_name is not None:
@@ -6719,12 +7455,16 @@ class NodeProjectOptions(
             self._values["stability"] = stability
         if yarn_berry_options is not None:
             self._values["yarn_berry_options"] = yarn_berry_options
+        if bump_package is not None:
+            self._values["bump_package"] = bump_package
         if jsii_release_version is not None:
             self._values["jsii_release_version"] = jsii_release_version
         if major_version is not None:
             self._values["major_version"] = major_version
         if min_major_version is not None:
             self._values["min_major_version"] = min_major_version
+        if next_version_command is not None:
+            self._values["next_version_command"] = next_version_command
         if npm_dist_tag is not None:
             self._values["npm_dist_tag"] = npm_dist_tag
         if post_build_steps is not None:
@@ -6739,6 +7479,8 @@ class NodeProjectOptions(
             self._values["releasable_commits"] = releasable_commits
         if release_branches is not None:
             self._values["release_branches"] = release_branches
+        if release_environment is not None:
+            self._values["release_environment"] = release_environment
         if release_every_commit is not None:
             self._values["release_every_commit"] = release_every_commit
         if release_failure_issue is not None:
@@ -6751,6 +7493,8 @@ class NodeProjectOptions(
             self._values["release_tag_prefix"] = release_tag_prefix
         if release_trigger is not None:
             self._values["release_trigger"] = release_trigger
+        if release_workflow_env is not None:
+            self._values["release_workflow_env"] = release_workflow_env
         if release_workflow_name is not None:
             self._values["release_workflow_name"] = release_workflow_name
         if release_workflow_setup_steps is not None:
@@ -6765,8 +7509,16 @@ class NodeProjectOptions(
             self._values["workflow_runs_on_group"] = workflow_runs_on_group
         if artifacts_directory is not None:
             self._values["artifacts_directory"] = artifacts_directory
+        if audit_deps is not None:
+            self._values["audit_deps"] = audit_deps
+        if audit_deps_options is not None:
+            self._values["audit_deps_options"] = audit_deps_options
         if auto_approve_upgrades is not None:
             self._values["auto_approve_upgrades"] = auto_approve_upgrades
+        if biome is not None:
+            self._values["biome"] = biome
+        if biome_options is not None:
+            self._values["biome_options"] = biome_options
         if build_workflow is not None:
             self._values["build_workflow"] = build_workflow
         if build_workflow_options is not None:
@@ -7304,6 +8056,17 @@ class NodeProjectOptions(
         result = self._values.get("bundled_deps")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def bun_version(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The version of Bun to use if using Bun as a package manager.
+
+        :default: "latest"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bun_version")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def code_artifact_options(self) -> typing.Optional[CodeArtifactOptions]:
         '''(experimental) Options for npm packages using AWS CodeArtifact.
@@ -7438,9 +8201,15 @@ class NodeProjectOptions(
 
     @builtins.property
     def max_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum node.js version to require via ``engines`` (inclusive).
+        '''(experimental) The maximum node version supported by this package. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any newer versions of node.
+        This requirement is enforced via the engines field.
 
-        :default: - no max
+        You will normally not need to set this option.
+        Consider this option only if your package is known to not function with newer versions of node.
+
+        :default: - no maximum version is enforced
 
         :stability: experimental
         '''
@@ -7449,9 +8218,19 @@ class NodeProjectOptions(
 
     @builtins.property
     def min_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Minimum Node.js version to require via package.json ``engines`` (inclusive).
+        '''(experimental) The minimum node version required by this package to function. Most projects should not use this option.
+
+        The value indicates that the package is incompatible with any older versions of node.
+        This requirement is enforced via the engines field.
 
-        :default: - no "engines" specified
+        You will normally not need to set this option, even if your package is incompatible with EOL versions of node.
+        Consider this option only if your package depends on a specific feature, that is not available in other LTS versions.
+        Setting this option has very high impact on the consumers of your package,
+        as package managers will actively prevent usage with node versions you have marked as incompatible.
+
+        To change the node version of your CI/CD workflows, use ``workflowNodeVersion``.
+
+        :default: - no minimum version is enforced
 
         :stability: experimental
         '''
@@ -7528,6 +8307,17 @@ class NodeProjectOptions(
         result = self._values.get("npm_token_secret")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def npm_trusted_publishing(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Use trusted publishing for publishing to npmjs.com Needs to be pre-configured on npm.js to work.
+
+        :default: - false
+
+        :stability: experimental
+        '''
+        result = self._values.get("npm_trusted_publishing")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def package_manager(self) -> typing.Optional[NodePackageManager]:
         '''(experimental) The Node Package Manager used to execute scripts.
@@ -7589,7 +8379,7 @@ class NodeProjectOptions(
     def pnpm_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) The version of PNPM to use if using PNPM as a package manager.
 
-        :default: "7"
+        :default: "9"
 
         :stability: experimental
         '''
@@ -7666,6 +8456,19 @@ class NodeProjectOptions(
         result = self._values.get("yarn_berry_options")
         return typing.cast(typing.Optional["YarnBerryOptions"], result)
 
+    @builtins.property
+    def bump_package(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The ``commit-and-tag-version`` compatible package used to bump the package version, as a dependency string.
+
+        This can be any compatible package version, including the deprecated ``standard-version@9``.
+
+        :default: - A recent version of "commit-and-tag-version"
+
+        :stability: experimental
+        '''
+        result = self._values.get("bump_package")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def jsii_release_version(self) -> typing.Optional[builtins.str]:
         '''(experimental) Version requirement of ``publib`` which is used to publish modules to npm.
@@ -7707,6 +8510,36 @@ class NodeProjectOptions(
         result = self._values.get("min_major_version")
         return typing.cast(typing.Optional[jsii.Number], result)
 
+    @builtins.property
+    def next_version_command(self) -> typing.Optional[builtins.str]:
+        '''(experimental) A shell command to control the next version to release.
+
+        If present, this shell command will be run before the bump is executed, and
+        it determines what version to release. It will be executed in the following
+        environment:
+
+        - Working directory: the project directory.
+        - ``$VERSION``: the current version. Looks like ``1.2.3``.
+        - ``$LATEST_TAG``: the most recent tag. Looks like ``prefix-v1.2.3``, or may be unset.
+        - ``$SUGGESTED_BUMP``: the suggested bump action based on commits. One of ``major|minor|patch|none``.
+
+        The command should print one of the following to ``stdout``:
+
+        - Nothing: the next version number will be determined based on commit history.
+        - ``x.y.z``: the next version number will be ``x.y.z``.
+        - ``major|minor|patch``: the next version number will be the current version number
+          with the indicated component bumped.
+
+        This setting cannot be specified together with ``minMajorVersion``; the invoked
+        script can be used to achieve the effects of ``minMajorVersion``.
+
+        :default: - The next version will be determined based on the commit history and project settings.
+
+        :stability: experimental
+        '''
+        result = self._values.get("next_version_command")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def npm_dist_tag(self) -> typing.Optional[builtins.str]:
         '''(experimental) The npmDistTag to use when publishing from the default branch.
@@ -7802,6 +8635,23 @@ class NodeProjectOptions(
         result = self._values.get("release_branches")
         return typing.cast(typing.Optional[typing.Mapping[builtins.str, _BranchOptions_13663d08]], result)
 
+    @builtins.property
+    def release_environment(self) -> typing.Optional[builtins.str]:
+        '''(experimental) The GitHub Actions environment used for the release.
+
+        This can be used to add an explicit approval step to the release
+        or limit who can initiate a release through environment protection rules.
+
+        When multiple artifacts are released, the environment can be overwritten
+        on a per artifact basis.
+
+        :default: - no environment used, unless set at the artifact level
+
+        :stability: experimental
+        '''
+        result = self._values.get("release_environment")
+        return typing.cast(typing.Optional[builtins.str], result)
+
     @builtins.property
     def release_every_commit(self) -> typing.Optional[builtins.bool]:
         '''(deprecated) Automatically release new versions every commit to one of branches in ``releaseBranches``.
@@ -7879,6 +8729,19 @@ class NodeProjectOptions(
         result = self._values.get("release_trigger")
         return typing.cast(typing.Optional[_ReleaseTrigger_e4dc221f], result)
 
+    @builtins.property
+    def release_workflow_env(
+        self,
+    ) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables for release workflows.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("release_workflow_env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def release_workflow_name(self) -> typing.Optional[builtins.str]:
         '''(experimental) The name of the default release workflow.
@@ -7905,7 +8768,7 @@ class NodeProjectOptions(
     def versionrc_options(
         self,
     ) -> typing.Optional[typing.Mapping[builtins.str, typing.Any]]:
-        '''(experimental) Custom configuration used when creating changelog with standard-version package.
+        '''(experimental) Custom configuration used when creating changelog with commit-and-tag-version package.
 
         Given values either append to default configuration or overwrite values in it.
 
@@ -7974,6 +8837,32 @@ class NodeProjectOptions(
         result = self._values.get("artifacts_directory")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def audit_deps(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Run security audit on dependencies.
+
+        When enabled, creates an "audit" task that checks for known security vulnerabilities
+        in dependencies. By default, runs during every build and checks for "high" severity
+        vulnerabilities or above in all dependencies (including dev dependencies).
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("audit_deps")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def audit_deps_options(self) -> typing.Optional[AuditOptions]:
+        '''(experimental) Security audit options.
+
+        :default: - default options
+
+        :stability: experimental
+        '''
+        result = self._values.get("audit_deps_options")
+        return typing.cast(typing.Optional[AuditOptions], result)
+
     @builtins.property
     def auto_approve_upgrades(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Automatically approve deps upgrade PRs, allowing them to be merged by mergify (if configued).
@@ -7987,6 +8876,28 @@ class NodeProjectOptions(
         result = self._values.get("auto_approve_upgrades")
         return typing.cast(typing.Optional[builtins.bool], result)
 
+    @builtins.property
+    def biome(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Setup Biome.
+
+        :default: false
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
+    @builtins.property
+    def biome_options(self) -> typing.Optional[BiomeOptions]:
+        '''(experimental) Biome options.
+
+        :default: - default options
+
+        :stability: experimental
+        '''
+        result = self._values.get("biome_options")
+        return typing.cast(typing.Optional[BiomeOptions], result)
+
     @builtins.property
     def build_workflow(self) -> typing.Optional[builtins.bool]:
         '''(experimental) Define a GitHub workflow for building PRs.
@@ -8044,7 +8955,7 @@ class NodeProjectOptions(
 
     @builtins.property
     def code_cov(self) -> typing.Optional[builtins.bool]:
-        '''(experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v4 A secret is required for private repos. Configured with ``@codeCovTokenSecret``.
+        '''(experimental) Define a GitHub workflow step for sending code coverage metrics to https://codecov.io/ Uses codecov/codecov-action@v5 By default, OIDC auth is used. Alternatively a token can be provided via ``codeCovTokenSecret``.
 
         :default: false
 
@@ -8055,9 +8966,9 @@ class NodeProjectOptions(
 
     @builtins.property
     def code_cov_token_secret(self) -> typing.Optional[builtins.str]:
-        '''(experimental) Define the secret name for a specified https://codecov.io/ token A secret is required to send coverage for private repositories.
+        '''(experimental) Define the secret name for a specified https://codecov.io/ token.
 
-        :default: - if this option is not specified, only public repositories are supported
+        :default: - OIDC auth is used
 
         :stability: experimental
         '''
@@ -8368,7 +9279,7 @@ class NodeProjectOptions(
     def workflow_git_identity(self) -> typing.Optional[_GitIdentity_6effc3de]:
         '''(experimental) The git identity to use in workflows.
 
-        :default: - GitHub Actions
+        :default: - default GitHub Actions user
 
         :stability: experimental
         '''
@@ -8377,9 +9288,11 @@ class NodeProjectOptions(
 
     @builtins.property
     def workflow_node_version(self) -> typing.Optional[builtins.str]:
-        '''(experimental) The node version to use in GitHub workflows.
+        '''(experimental) The node version used in GitHub Actions workflows.
 
-        :default: - same as ``minNodeVersion``
+        Always use this option if your GitHub Actions workflows require a specific to run.
+
+        :default: - ``minNodeVersion`` if set, otherwise ``lts/*``.
 
         :stability: experimental
         '''
@@ -9417,7 +10330,10 @@ class Projenrc(
     metaclass=jsii.JSIIMeta,
     jsii_type="projen.javascript.Projenrc",
 ):
-    '''(experimental) Sets up a javascript project to use TypeScript for projenrc.
+    '''(experimental) A projenrc file written in JavaScript.
+
+    This component can be instantiated in any type of project
+    and has no expectations around the project's main language.
 
     :stability: experimental
     '''
@@ -9667,7 +10583,7 @@ class RunBundleTask(enum.Enum):
        // Tell the bundler to bundle the compiled results (from the "lib" directory)
        project.bundler.addBundle("./lib/index.js", {
          platform: "node",
-         target: "node18",
+         target: "node22",
          sourcemap: false,
          format: "esm",
        });
@@ -9840,6 +10756,7 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "jsx_import_source": "jsxImportSource",
         "lib": "lib",
         "module": "module",
+        "module_detection": "moduleDetection",
         "module_resolution": "moduleResolution",
         "no_emit": "noEmit",
         "no_emit_on_error": "noEmitOnError",
@@ -9867,6 +10784,7 @@ class Transform(metaclass=jsii.JSIIMeta, jsii_type="projen.javascript.Transform"
         "strip_internal": "stripInternal",
         "target": "target",
         "ts_build_info_file": "tsBuildInfoFile",
+        "type_roots": "typeRoots",
         "types": "types",
         "use_unknown_in_catch_variables": "useUnknownInCatchVariables",
         "verbatim_module_syntax": "verbatimModuleSyntax",
@@ -9905,6 +10823,7 @@ class TypeScriptCompilerOptions:
         jsx_import_source: typing.Optional[builtins.str] = None,
         lib: typing.Optional[typing.Sequence[builtins.str]] = None,
         module: typing.Optional[builtins.str] = None,
+        module_detection: typing.Optional["TypeScriptModuleDetection"] = None,
         module_resolution: typing.Optional["TypeScriptModuleResolution"] = None,
         no_emit: typing.Optional[builtins.bool] = None,
         no_emit_on_error: typing.Optional[builtins.bool] = None,
@@ -9932,6 +10851,7 @@ class TypeScriptCompilerOptions:
         strip_internal: typing.Optional[builtins.bool] = None,
         target: typing.Optional[builtins.str] = None,
         ts_build_info_file: typing.Optional[builtins.str] = None,
+        type_roots: typing.Optional[typing.Sequence[builtins.str]] = None,
         types: typing.Optional[typing.Sequence[builtins.str]] = None,
         use_unknown_in_catch_variables: typing.Optional[builtins.bool] = None,
         verbatim_module_syntax: typing.Optional[builtins.bool] = None,
@@ -9966,6 +10886,7 @@ class TypeScriptCompilerOptions:
         :param jsx_import_source: (experimental) Declares the module specifier to be used for importing the jsx and jsxs factory functions when using jsx. Default: undefined
         :param lib: (experimental) Reference for type definitions / libraries to use (eg. ES2016, ES5, ES2018). Default: [ "es2018" ]
         :param module: (experimental) Sets the module system for the program. See https://www.typescriptlang.org/docs/handbook/modules.html#ambient-modules. Default: "CommonJS"
+        :param module_detection: (experimental) This setting controls how TypeScript determines whether a file is a `script or a module <https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript>`_. Default: "auto"
         :param module_resolution: (experimental) Determine how modules get resolved. Either "Node" for Node.js/io.js style resolution, or "Classic". Default: "node"
         :param no_emit: (experimental) Do not emit outputs. Default: false
         :param no_emit_on_error: (experimental) Do not emit compiler output files like JavaScript source code, source-maps or declarations if any errors were reported. Default: true
@@ -9993,6 +10914,7 @@ class TypeScriptCompilerOptions:
         :param strip_internal: (experimental) Do not emit declarations for code that has an ``@internal`` annotation in it’s JSDoc comment. Default: true
         :param target: (experimental) Modern browsers support all ES6 features, so ES6 is a good choice. You might choose to set a lower target if your code is deployed to older environments, or a higher target if your code is guaranteed to run in newer environments. Default: "ES2018"
         :param ts_build_info_file: (experimental) This setting lets you specify a file for storing incremental compilation information as a part of composite projects which enables faster building of larger TypeScript codebases. You can read more about composite projects in the handbook.
+        :param type_roots: (experimental) If typeRoots is specified, only packages under typeRoots will be included.
         :param types: (experimental) If types is specified, only packages listed will be included in the global scope.
         :param use_unknown_in_catch_variables: (experimental) Change the type of the variable in a catch clause from any to unknown Available with TypeScript 4.4 and newer. Default: true
         :param verbatim_module_syntax: (experimental) Simplifies TypeScript's handling of import/export ``type`` modifiers. Default: undefined
@@ -10030,6 +10952,7 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument jsx_import_source", value=jsx_import_source, expected_type=type_hints["jsx_import_source"])
             check_type(argname="argument lib", value=lib, expected_type=type_hints["lib"])
             check_type(argname="argument module", value=module, expected_type=type_hints["module"])
+            check_type(argname="argument module_detection", value=module_detection, expected_type=type_hints["module_detection"])
             check_type(argname="argument module_resolution", value=module_resolution, expected_type=type_hints["module_resolution"])
             check_type(argname="argument no_emit", value=no_emit, expected_type=type_hints["no_emit"])
             check_type(argname="argument no_emit_on_error", value=no_emit_on_error, expected_type=type_hints["no_emit_on_error"])
@@ -10057,6 +10980,7 @@ class TypeScriptCompilerOptions:
             check_type(argname="argument strip_internal", value=strip_internal, expected_type=type_hints["strip_internal"])
             check_type(argname="argument target", value=target, expected_type=type_hints["target"])
             check_type(argname="argument ts_build_info_file", value=ts_build_info_file, expected_type=type_hints["ts_build_info_file"])
+            check_type(argname="argument type_roots", value=type_roots, expected_type=type_hints["type_roots"])
             check_type(argname="argument types", value=types, expected_type=type_hints["types"])
             check_type(argname="argument use_unknown_in_catch_variables", value=use_unknown_in_catch_variables, expected_type=type_hints["use_unknown_in_catch_variables"])
             check_type(argname="argument verbatim_module_syntax", value=verbatim_module_syntax, expected_type=type_hints["verbatim_module_syntax"])
@@ -10119,6 +11043,8 @@ class TypeScriptCompilerOptions:
             self._values["lib"] = lib
         if module is not None:
             self._values["module"] = module
+        if module_detection is not None:
+            self._values["module_detection"] = module_detection
         if module_resolution is not None:
             self._values["module_resolution"] = module_resolution
         if no_emit is not None:
@@ -10173,6 +11099,8 @@ class TypeScriptCompilerOptions:
             self._values["target"] = target
         if ts_build_info_file is not None:
             self._values["ts_build_info_file"] = ts_build_info_file
+        if type_roots is not None:
+            self._values["type_roots"] = type_roots
         if types is not None:
             self._values["types"] = types
         if use_unknown_in_catch_variables is not None:
@@ -10551,6 +11479,17 @@ class TypeScriptCompilerOptions:
         result = self._values.get("module")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def module_detection(self) -> typing.Optional["TypeScriptModuleDetection"]:
+        '''(experimental) This setting controls how TypeScript determines whether a file is a `script or a module <https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript>`_.
+
+        :default: "auto"
+
+        :stability: experimental
+        '''
+        result = self._values.get("module_detection")
+        return typing.cast(typing.Optional["TypeScriptModuleDetection"], result)
+
     @builtins.property
     def module_resolution(self) -> typing.Optional["TypeScriptModuleResolution"]:
         '''(experimental) Determine how modules get resolved.
@@ -10870,11 +11809,21 @@ class TypeScriptCompilerOptions:
         result = self._values.get("ts_build_info_file")
         return typing.cast(typing.Optional[builtins.str], result)
 
+    @builtins.property
+    def type_roots(self) -> typing.Optional[typing.List[builtins.str]]:
+        '''(experimental) If typeRoots is specified, only packages under typeRoots will be included.
+
+        :see: https://www.typescriptlang.org/tsconfig/#typeRoots
+        :stability: experimental
+        '''
+        result = self._values.get("type_roots")
+        return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
     @builtins.property
     def types(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) If types is specified, only packages listed will be included in the global scope.
 
-        :see: {@link https://www.typescriptlang.org/tsconfig#types}
+        :see: https://www.typescriptlang.org/tsconfig#types
         :stability: experimental
         '''
         result = self._values.get("types")
@@ -10980,6 +11929,34 @@ class TypeScriptJsxMode(enum.Enum):
     '''
 
 
+@jsii.enum(jsii_type="projen.javascript.TypeScriptModuleDetection")
+class TypeScriptModuleDetection(enum.Enum):
+    '''(experimental) This setting controls how TypeScript determines whether a file is a script or a module.
+
+    :see: https://www.typescriptlang.org/docs/handbook/modules/theory.html#scripts-and-modules-in-javascript
+    :stability: experimental
+    '''
+
+    AUTO = "AUTO"
+    '''(experimental) TypeScript will not only look for import and export statements, but it will also check whether the "type" field in a package.json is set to "module" when running with module: nodenext or node16, and check whether the current file is a JSX file when running under jsx: react-jsx.
+
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
+    :stability: experimental
+    '''
+    LEGACY = "LEGACY"
+    '''(experimental) The same behavior as 4.6 and prior, usings import and export statements to determine whether a file is a module.
+
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
+    :stability: experimental
+    '''
+    FORCE = "FORCE"
+    '''(experimental) Ensures that every non-declaration file is treated as a module.
+
+    :see: https://www.typescriptlang.org/tsconfig/#moduleDetection
+    :stability: experimental
+    '''
+
+
 @jsii.enum(jsii_type="projen.javascript.TypeScriptModuleResolution")
 class TypeScriptModuleResolution(enum.Enum):
     '''(experimental) Determines how modules get resolved.
@@ -11000,6 +11977,12 @@ class TypeScriptModuleResolution(enum.Enum):
     :see: https://www.typescriptlang.org/docs/handbook/module-resolution.html#node
     :stability: experimental
     '''
+    NODE10 = "NODE10"
+    '''(experimental) ``--moduleResolution node`` was renamed to ``node10`` (keeping ``node`` as an alias for backward compatibility) in TypeScript 5.0. It reflects the CommonJS module resolution algorithm as it existed in Node.js versions earlier than v12. It should no longer be used.
+
+    :see: https://www.typescriptlang.org/docs/handbook/modules/reference.html#node10-formerly-known-as-node
+    :stability: experimental
+    '''
     NODE16 = "NODE16"
     '''(experimental) Node.js’ ECMAScript Module Support from TypeScript 4.7 onwards.
 
@@ -11066,9 +12049,11 @@ class TypescriptConfig(
 
     @jsii.member(jsii_name="addExclude")
     def add_exclude(self, pattern: builtins.str) -> None:
-        '''
-        :param pattern: -
+        '''(experimental) Add an exclude pattern to the ``exclude`` array of the TSConfig.
+
+        :param pattern: The pattern to add.
 
+        :see: https://www.typescriptlang.org/tsconfig#exclude
         :stability: experimental
         '''
         if __debug__:
@@ -11092,9 +12077,11 @@ class TypescriptConfig(
 
     @jsii.member(jsii_name="addInclude")
     def add_include(self, pattern: builtins.str) -> None:
-        '''
-        :param pattern: -
+        '''(experimental) Add an include pattern to the ``include`` array of the TSConfig.
 
+        :param pattern: The pattern to add.
+
+        :see: https://www.typescriptlang.org/tsconfig#include
         :stability: experimental
         '''
         if __debug__:
@@ -11110,6 +12097,34 @@ class TypescriptConfig(
         '''
         return typing.cast(None, jsii.invoke(self, "preSynthesize", []))
 
+    @jsii.member(jsii_name="removeExclude")
+    def remove_exclude(self, pattern: builtins.str) -> None:
+        '''(experimental) Remove an exclude pattern from the ``exclude`` array of the TSConfig.
+
+        :param pattern: The pattern to remove.
+
+        :see: https://www.typescriptlang.org/tsconfig#exclude
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9f78586828830a46219bc19d7af8c53b4b5a1cc2bc1a03491930c9271790f10a)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "removeExclude", [pattern]))
+
+    @jsii.member(jsii_name="removeInclude")
+    def remove_include(self, pattern: builtins.str) -> None:
+        '''(experimental) Remove an include pattern from the ``include`` array of the TSConfig.
+
+        :param pattern: The pattern to remove.
+
+        :see: https://www.typescriptlang.org/tsconfig#include
+        :stability: experimental
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__85556ff93e412b3ea5e894bc7d7669275e51dfae8c077378748d8053a46e4946)
+            check_type(argname="argument pattern", value=pattern, expected_type=type_hints["pattern"])
+        return typing.cast(None, jsii.invoke(self, "removeInclude", [pattern]))
+
     @jsii.member(jsii_name="resolveExtendsPath")
     def resolve_extends_path(self, config_path: builtins.str) -> builtins.str:
         '''(experimental) Resolve valid TypeScript extends paths relative to this config.
@@ -11378,8 +12393,10 @@ class UpgradeDependencies(
         self,
         project: NodeProject,
         *,
+        cooldown: typing.Optional[jsii.Number] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        include_deprecated_versions: typing.Optional[builtins.bool] = None,
         pull_request_title: typing.Optional[builtins.str] = None,
         satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
         semantic_commit: typing.Optional[builtins.str] = None,
@@ -11392,8 +12409,10 @@ class UpgradeDependencies(
     ) -> None:
         '''
         :param project: -
+        :param cooldown: (experimental) Exclude package versions published within the specified number of days. This may provide some protection against supply chain attacks, simply by avoiding newly published packages that may be malicious. It gives the ecosystem more time to detect malicious packages. However it comes at the cost of updating other packages slower, which might also contain vulnerabilities or bugs in need of a fix. The cooldown period applies to both npm-check-updates discovery and the package manager update command. Default: - No cooldown period.
         :param exclude: (experimental) List of package names to exclude during the upgrade. Default: - Nothing is excluded.
         :param include: (experimental) List of package names to include during the upgrade. Default: - Everything is included.
+        :param include_deprecated_versions: (experimental) Include deprecated packages. By default, deprecated versions will be excluded from upgrades. Default: false
         :param pull_request_title: (experimental) Title of the pull request to use (should be all lower-case). Default: "upgrade dependencies"
         :param satisfy_peer_dependencies: (experimental) Check peer dependencies of installed packages and filter updates to compatible versions. By default, the upgrade workflow will adhere to version constraints from peer dependencies. Sometimes this is not desirable and can be disabled. Default: true
         :param semantic_commit: (experimental) The semantic commit type. Default: 'chore'
@@ -11410,8 +12429,10 @@ class UpgradeDependencies(
             type_hints = typing.get_type_hints(_typecheckingstub__497e18a2c8dc3200cff8b21dfad7c418d29517aa6d67e2a2555ee78fa63ff385)
             check_type(argname="argument project", value=project, expected_type=type_hints["project"])
         options = UpgradeDependenciesOptions(
+            cooldown=cooldown,
             exclude=exclude,
             include=include,
+            include_deprecated_versions=include_deprecated_versions,
             pull_request_title=pull_request_title,
             satisfy_peer_dependencies=satisfy_peer_dependencies,
             semantic_commit=semantic_commit,
@@ -11447,6 +12468,14 @@ class UpgradeDependencies(
         '''
         return typing.cast(_Task_9fa875b6, jsii.get(self, "postUpgradeTask"))
 
+    @builtins.property
+    @jsii.member(jsii_name="project")
+    def project(self) -> NodeProject:
+        '''
+        :stability: experimental
+        '''
+        return typing.cast(NodeProject, jsii.get(self, "project"))
+
     @builtins.property
     @jsii.member(jsii_name="upgradeTask")
     def upgrade_task(self) -> _Task_9fa875b6:
@@ -11484,15 +12513,17 @@ class UpgradeDependencies(
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__66ba20de6f144f37e582e192e3ed592a6be0e8bc3d10e3b730af62082afa0010)
             check_type(argname="argument value", value=value, expected_type=type_hints["value"])
-        jsii.set(self, "containerOptions", value)
+        jsii.set(self, "containerOptions", value) # pyright: ignore[reportArgumentType]
 
 
 @jsii.data_type(
     jsii_type="projen.javascript.UpgradeDependenciesOptions",
     jsii_struct_bases=[],
     name_mapping={
+        "cooldown": "cooldown",
         "exclude": "exclude",
         "include": "include",
+        "include_deprecated_versions": "includeDeprecatedVersions",
         "pull_request_title": "pullRequestTitle",
         "satisfy_peer_dependencies": "satisfyPeerDependencies",
         "semantic_commit": "semanticCommit",
@@ -11508,8 +12539,10 @@ class UpgradeDependenciesOptions:
     def __init__(
         self,
         *,
+        cooldown: typing.Optional[jsii.Number] = None,
         exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
         include: typing.Optional[typing.Sequence[builtins.str]] = None,
+        include_deprecated_versions: typing.Optional[builtins.bool] = None,
         pull_request_title: typing.Optional[builtins.str] = None,
         satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
         semantic_commit: typing.Optional[builtins.str] = None,
@@ -11522,8 +12555,10 @@ class UpgradeDependenciesOptions:
     ) -> None:
         '''(experimental) Options for ``UpgradeDependencies``.
 
+        :param cooldown: (experimental) Exclude package versions published within the specified number of days. This may provide some protection against supply chain attacks, simply by avoiding newly published packages that may be malicious. It gives the ecosystem more time to detect malicious packages. However it comes at the cost of updating other packages slower, which might also contain vulnerabilities or bugs in need of a fix. The cooldown period applies to both npm-check-updates discovery and the package manager update command. Default: - No cooldown period.
         :param exclude: (experimental) List of package names to exclude during the upgrade. Default: - Nothing is excluded.
         :param include: (experimental) List of package names to include during the upgrade. Default: - Everything is included.
+        :param include_deprecated_versions: (experimental) Include deprecated packages. By default, deprecated versions will be excluded from upgrades. Default: false
         :param pull_request_title: (experimental) Title of the pull request to use (should be all lower-case). Default: "upgrade dependencies"
         :param satisfy_peer_dependencies: (experimental) Check peer dependencies of installed packages and filter updates to compatible versions. By default, the upgrade workflow will adhere to version constraints from peer dependencies. Sometimes this is not desirable and can be disabled. Default: true
         :param semantic_commit: (experimental) The semantic commit type. Default: 'chore'
@@ -11540,8 +12575,10 @@ class UpgradeDependenciesOptions:
             workflow_options = UpgradeDependenciesWorkflowOptions(**workflow_options)
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__0f7b896c11469470869bc4bfc86c9bb13fd308223e316ba71124c00b5709af1e)
+            check_type(argname="argument cooldown", value=cooldown, expected_type=type_hints["cooldown"])
             check_type(argname="argument exclude", value=exclude, expected_type=type_hints["exclude"])
             check_type(argname="argument include", value=include, expected_type=type_hints["include"])
+            check_type(argname="argument include_deprecated_versions", value=include_deprecated_versions, expected_type=type_hints["include_deprecated_versions"])
             check_type(argname="argument pull_request_title", value=pull_request_title, expected_type=type_hints["pull_request_title"])
             check_type(argname="argument satisfy_peer_dependencies", value=satisfy_peer_dependencies, expected_type=type_hints["satisfy_peer_dependencies"])
             check_type(argname="argument semantic_commit", value=semantic_commit, expected_type=type_hints["semantic_commit"])
@@ -11552,10 +12589,14 @@ class UpgradeDependenciesOptions:
             check_type(argname="argument workflow", value=workflow, expected_type=type_hints["workflow"])
             check_type(argname="argument workflow_options", value=workflow_options, expected_type=type_hints["workflow_options"])
         self._values: typing.Dict[builtins.str, typing.Any] = {}
+        if cooldown is not None:
+            self._values["cooldown"] = cooldown
         if exclude is not None:
             self._values["exclude"] = exclude
         if include is not None:
             self._values["include"] = include
+        if include_deprecated_versions is not None:
+            self._values["include_deprecated_versions"] = include_deprecated_versions
         if pull_request_title is not None:
             self._values["pull_request_title"] = pull_request_title
         if satisfy_peer_dependencies is not None:
@@ -11575,6 +12616,26 @@ class UpgradeDependenciesOptions:
         if workflow_options is not None:
             self._values["workflow_options"] = workflow_options
 
+    @builtins.property
+    def cooldown(self) -> typing.Optional[jsii.Number]:
+        '''(experimental) Exclude package versions published within the specified number of days.
+
+        This may provide some protection against supply chain attacks, simply by avoiding
+        newly published packages that may be malicious. It gives the ecosystem more time
+        to detect malicious packages. However it comes at the cost of updating other
+        packages slower, which might also contain vulnerabilities or bugs in need of a fix.
+
+        The cooldown period applies to both npm-check-updates discovery
+        and the package manager update command.
+
+        :default: - No cooldown period.
+
+        :see: https://yarnpkg.com/configuration/yarnrc#npmMinimalAgeGate
+        :stability: experimental
+        '''
+        result = self._values.get("cooldown")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def exclude(self) -> typing.Optional[typing.List[builtins.str]]:
         '''(experimental) List of package names to exclude during the upgrade.
@@ -11597,6 +12658,20 @@ class UpgradeDependenciesOptions:
         result = self._values.get("include")
         return typing.cast(typing.Optional[typing.List[builtins.str]], result)
 
+    @builtins.property
+    def include_deprecated_versions(self) -> typing.Optional[builtins.bool]:
+        '''(experimental) Include deprecated packages.
+
+        By default, deprecated versions will be excluded from upgrades.
+
+        :default: false
+
+        :see: https://github.com/raineorshine/npm-check-updates?tab=readme-ov-file#options
+        :stability: experimental
+        '''
+        result = self._values.get("include_deprecated_versions")
+        return typing.cast(typing.Optional[builtins.bool], result)
+
     @builtins.property
     def pull_request_title(self) -> typing.Optional[builtins.str]:
         '''(experimental) Title of the pull request to use (should be all lower-case).
@@ -11807,6 +12882,7 @@ class UpgradeDependenciesSchedule(
         "assignees": "assignees",
         "branches": "branches",
         "container": "container",
+        "env": "env",
         "git_identity": "gitIdentity",
         "labels": "labels",
         "permissions": "permissions",
@@ -11823,6 +12899,7 @@ class UpgradeDependenciesWorkflowOptions:
         assignees: typing.Optional[typing.Sequence[builtins.str]] = None,
         branches: typing.Optional[typing.Sequence[builtins.str]] = None,
         container: typing.Optional[typing.Union[_ContainerOptions_f50907af, typing.Dict[builtins.str, typing.Any]]] = None,
+        env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
         git_identity: typing.Optional[typing.Union[_GitIdentity_6effc3de, typing.Dict[builtins.str, typing.Any]]] = None,
         labels: typing.Optional[typing.Sequence[builtins.str]] = None,
         permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -11836,7 +12913,8 @@ class UpgradeDependenciesWorkflowOptions:
         :param assignees: (experimental) Assignees to add on the PR. Default: - no assignees
         :param branches: (experimental) List of branches to create PR's for. Default: - All release branches configured for the project.
         :param container: (experimental) Job container options. Default: - defaults
-        :param git_identity: (experimental) The git identity to use for commits. Default: "github-actions@github.com"
+        :param env: (experimental) Build environment variables for the upgrade job. Default: {}
+        :param git_identity: (experimental) The git identity to use for commits. Default: - default GitHub Actions user
         :param labels: (experimental) Labels to apply on the PR. Default: - no labels.
         :param permissions: (experimental) Permissions granted to the upgrade job To limit job permissions for ``contents``, the desired permissions have to be explicitly set, e.g.: ``{ contents: JobPermission.NONE }``. Default: ``{ contents: JobPermission.READ }``
         :param projen_credentials: (experimental) Choose a method for authenticating with GitHub for creating the PR. When using the default github token, PR's created by this workflow will not trigger any subsequent workflows (i.e the build workflow), so projen requires API access to be provided through e.g. a personal access token or other method. Default: - personal access token named PROJEN_GITHUB_TOKEN
@@ -11859,6 +12937,7 @@ class UpgradeDependenciesWorkflowOptions:
             check_type(argname="argument assignees", value=assignees, expected_type=type_hints["assignees"])
             check_type(argname="argument branches", value=branches, expected_type=type_hints["branches"])
             check_type(argname="argument container", value=container, expected_type=type_hints["container"])
+            check_type(argname="argument env", value=env, expected_type=type_hints["env"])
             check_type(argname="argument git_identity", value=git_identity, expected_type=type_hints["git_identity"])
             check_type(argname="argument labels", value=labels, expected_type=type_hints["labels"])
             check_type(argname="argument permissions", value=permissions, expected_type=type_hints["permissions"])
@@ -11873,6 +12952,8 @@ class UpgradeDependenciesWorkflowOptions:
             self._values["branches"] = branches
         if container is not None:
             self._values["container"] = container
+        if env is not None:
+            self._values["env"] = env
         if git_identity is not None:
             self._values["git_identity"] = git_identity
         if labels is not None:
@@ -11921,11 +13002,22 @@ class UpgradeDependenciesWorkflowOptions:
         result = self._values.get("container")
         return typing.cast(typing.Optional[_ContainerOptions_f50907af], result)
 
+    @builtins.property
+    def env(self) -> typing.Optional[typing.Mapping[builtins.str, builtins.str]]:
+        '''(experimental) Build environment variables for the upgrade job.
+
+        :default: {}
+
+        :stability: experimental
+        '''
+        result = self._values.get("env")
+        return typing.cast(typing.Optional[typing.Mapping[builtins.str, builtins.str]], result)
+
     @builtins.property
     def git_identity(self) -> typing.Optional[_GitIdentity_6effc3de]:
         '''(experimental) The git identity to use for commits.
 
-        :default: "github-actions@github.com"
+        :default: - default GitHub Actions user
 
         :stability: experimental
         '''
@@ -14788,7 +15880,7 @@ class AddBundleOptions(BundlingOptions):
         :param banner: (experimental) Use this to insert an arbitrary string at the beginning of generated JavaScript files. This is similar to footer which inserts at the end instead of the beginning. This is commonly used to insert comments: Default: - no comments are passed
         :param charset: (experimental) The charset to use for esbuild's output. By default esbuild's output is ASCII-only. Any non-ASCII characters are escaped using backslash escape sequences. Using escape sequences makes the generated output slightly bigger, and also makes it harder to read. If you would like for esbuild to print the original characters without using escape sequences, use ``Charset.UTF8``. Default: Charset.ASCII
         :param define: (experimental) Replace global identifiers with constant expressions. For example, ``{ 'process.env.DEBUG': 'true' }``. Another example, ``{ 'process.env.API_KEY': JSON.stringify('xxx-xxxx-xxx') }``. Default: - no replacements are made
-        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node18", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
+        :param esbuild_args: (experimental) Build arguments to pass into esbuild. For example, to add the `--log-limit <https://esbuild.github.io/api/#log-limit>`_ flag:: project.bundler.addBundle("./src/hello.ts", { platform: "node", target: "node22", sourcemap: true, format: "esm", esbuildArgs: { "--log-limit": "0", }, }); Default: - no additional esbuild arguments are passed
         :param executable: (experimental) Mark the output file as executable. Default: false
         :param footer: (experimental) Use this to insert an arbitrary string at the end of generated JavaScript files. This is similar to banner which inserts at the beginning instead of the end. This is commonly used to insert comments Default: - no comments are passed
         :param format: (experimental) Output format for the generated JavaScript files. There are currently three possible values that can be configured: ``"iife"``, ``"cjs"``, and ``"esm"``. If not set (``undefined``), esbuild picks an output format for you based on ``platform``: - ``"cjs"`` if ``platform`` is ``"node"`` - ``"iife"`` if ``platform`` is ``"browser"`` - ``"esm"`` if ``platform`` is ``"neutral"`` Note: If making a bundle to run under node with ESM, set ``format`` to ``"esm"`` instead of setting ``platform`` to ``"neutral"``. Default: undefined
@@ -15011,7 +16103,7 @@ class AddBundleOptions(BundlingOptions):
 
            project.bundler.addBundle("./src/hello.ts", {
              platform: "node",
-             target: "node18",
+             target: "node22",
              sourcemap: true,
              format: "esm",
              esbuildArgs: {
@@ -15249,7 +16341,10 @@ class AddBundleOptions(BundlingOptions):
 __all__ = [
     "AddBundleOptions",
     "ArrowParens",
+    "AuditOptions",
     "AutoRelease",
+    "Biome",
+    "BiomeOptions",
     "BuildWorkflowOptions",
     "Bundle",
     "BundleLogLevel",
@@ -15263,12 +16358,14 @@ __all__ = [
     "EmbeddedLanguageFormatting",
     "EndOfLine",
     "Eslint",
+    "EslintCommandOptions",
     "EslintOptions",
     "EslintOverride",
     "HTMLWhitespaceSensitivity",
     "HasteConfig",
     "Jest",
     "JestConfigOptions",
+    "JestDiscoverTestMatchPatternsForDirsOptions",
     "JestOptions",
     "JestReporter",
     "LicenseChecker",
@@ -15299,6 +16396,7 @@ __all__ = [
     "TypeScriptCompilerOptions",
     "TypeScriptImportsNotUsedAsValues",
     "TypeScriptJsxMode",
+    "TypeScriptModuleDetection",
     "TypeScriptModuleResolution",
     "TypescriptConfig",
     "TypescriptConfigExtends",
@@ -15332,12 +16430,65 @@ __all__ = [
     "YarnWorkerPoolMode",
     "Yarnrc",
     "YarnrcOptions",
+    "biome_config",
 ]
 
 publication.publish()
 
+# Loading modules to ensure their types are registered with the jsii runtime library
+from . import biome_config
+
+def _typecheckingstub__fa4156d4e0a4a5a2efe965ea98ba35b587dcbfe01e1b4d659a959bcf54294ed2(
+    *,
+    level: typing.Optional[builtins.str] = None,
+    prod_only: typing.Optional[builtins.bool] = None,
+    run_on: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9f2264088409136f62af7e2ac4488206c06c3b9a69056be8b9ead20ab895f1bc(
+    project: NodeProject,
+    *,
+    assist: typing.Optional[builtins.bool] = None,
+    biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+    formatter: typing.Optional[builtins.bool] = None,
+    ignore_generated_files: typing.Optional[builtins.bool] = None,
+    linter: typing.Optional[builtins.bool] = None,
+    merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+    version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__02197aa3a69f17c43ff359679227be724559aba6ef0881da4e04e9a0bf66d078(
+    project: _Project_57d89203,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5609a4432d207b19ee177e477fdf5e275031b8ec1346b00ac4bbfdf93f688757(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__b53a2988afa9afc23bda2fe96e2de8ffaff18ab919e00b69a6c8d3d229f3dcc1(
+    *,
+    assist: typing.Optional[builtins.bool] = None,
+    biome_config: typing.Optional[typing.Union[_BiomeConfiguration_dd1a6c83, typing.Dict[builtins.str, typing.Any]]] = None,
+    formatter: typing.Optional[builtins.bool] = None,
+    ignore_generated_files: typing.Optional[builtins.bool] = None,
+    linter: typing.Optional[builtins.bool] = None,
+    merge_arrays_in_configuration: typing.Optional[builtins.bool] = None,
+    version: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__12c3595783c38c358dfa0cc66282771c2ed2020f0770e8379920bb5731b72372(
     *,
+    env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     name: typing.Optional[builtins.str] = None,
     permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,
     pre_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
@@ -15451,12 +16602,14 @@ def _typecheckingstub__41d20792db723180b2558eb351d1b15e6cc51985fdc95dd8481c5fae7
     dirs: typing.Sequence[builtins.str],
     alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
     file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
     lint_projen_rc: typing.Optional[builtins.bool] = None,
     lint_projen_rc_file: typing.Optional[builtins.str] = None,
     prettier: typing.Optional[builtins.bool] = None,
+    sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
     ts_always_try_types: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
     yaml: typing.Optional[builtins.bool] = None,
@@ -15506,17 +16659,27 @@ def _typecheckingstub__45c512f160dd2d4145e1c0d43de9571ffe4d89e10b34c7d9a7b9fbba3
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__ab5437a5e5c0bee91b2bed562cbb0dc9e80e748c8ca3251df4c2eb91ea3a4160(
+    *,
+    extra_args: typing.Optional[typing.Sequence[builtins.str]] = None,
+    fix: typing.Optional[builtins.bool] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__26892c968b7bf4d64dd2597bbdabf1f1e9ced92002225a4eedfae6cbe3c22894(
     *,
     dirs: typing.Sequence[builtins.str],
     alias_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     alias_map: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
+    command_options: typing.Optional[typing.Union[EslintCommandOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     devdirs: typing.Optional[typing.Sequence[builtins.str]] = None,
     file_extensions: typing.Optional[typing.Sequence[builtins.str]] = None,
     ignore_patterns: typing.Optional[typing.Sequence[builtins.str]] = None,
     lint_projen_rc: typing.Optional[builtins.bool] = None,
     lint_projen_rc_file: typing.Optional[builtins.str] = None,
     prettier: typing.Optional[builtins.bool] = None,
+    sort_extends: typing.Optional[_ICompareString_f119e19c] = None,
     ts_always_try_types: typing.Optional[builtins.bool] = None,
     tsconfig_path: typing.Optional[builtins.str] = None,
     yaml: typing.Optional[builtins.bool] = None,
@@ -15548,7 +16711,7 @@ def _typecheckingstub__1d0f97663aee053bcca0e3b33c8be45ef5c6271b8e0c683a67d717aa9
     pass
 
 def _typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc46ab7738(
-    project: NodeProject,
+    scope: _constructs_77d1e7e8.IConstruct,
     *,
     config_file_path: typing.Optional[builtins.str] = None,
     coverage: typing.Optional[builtins.bool] = None,
@@ -15558,6 +16721,7 @@ def _typecheckingstub__7f22158e02967239263c228b0eadfa82f5edd4d7b172b8506a5b32bc4
     jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     jest_version: typing.Optional[builtins.str] = None,
     junit_reporting: typing.Optional[builtins.bool] = None,
+    pass_with_no_tests: typing.Optional[builtins.bool] = None,
     preserve_default_reporters: typing.Optional[builtins.bool] = None,
     update_snapshot: typing.Optional[UpdateSnapshot] = None,
 ) -> None:
@@ -15630,6 +16794,14 @@ def _typecheckingstub__340f8ef9eed036d2e1af02ee13866e070b25e032c7262d1181adf28bb
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__0681a729d70e1f1999defc63f8a0f12400f6e0b609f4fb8dbf7f858c435cd9b1(
+    dirs: typing.Sequence[builtins.str],
+    *,
+    file_extension_pattern: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__38439e86b40e7bc302e4faa48880e15ba8a10e5a2769a5b73cbf33a01a318752(
     *,
     additional_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -15702,6 +16874,13 @@ def _typecheckingstub__38439e86b40e7bc302e4faa48880e15ba8a10e5a2769a5b73cbf33a01
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__987ab5c64454683ddeb28bad78f44cdd78a2099af6a0e44ff92f50bc40f8e486(
+    *,
+    file_extension_pattern: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__6fea73c8bcc51e881c3829384cb90956e3310a1a08296d32da54fc51bd1b0872(
     *,
     config_file_path: typing.Optional[builtins.str] = None,
@@ -15712,6 +16891,7 @@ def _typecheckingstub__6fea73c8bcc51e881c3829384cb90956e3310a1a08296d32da54fc51b
     jest_config: typing.Optional[typing.Union[JestConfigOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     jest_version: typing.Optional[builtins.str] = None,
     junit_reporting: typing.Optional[builtins.bool] = None,
+    pass_with_no_tests: typing.Optional[builtins.bool] = None,
     preserve_default_reporters: typing.Optional[builtins.bool] = None,
     update_snapshot: typing.Optional[UpdateSnapshot] = None,
 ) -> None:
@@ -15761,6 +16941,7 @@ def _typecheckingstub__d10cd20471c8ed8e2de153476379f00bfa1b587c92e8982006812a0e3
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -15777,6 +16958,7 @@ def _typecheckingstub__d10cd20471c8ed8e2de153476379f00bfa1b587c92e8982006812a0e3
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -15897,6 +17079,7 @@ def _typecheckingstub__32555a77b63910142de45100c4a6d74880ddece00a3cbae9c27803467
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -15913,6 +17096,7 @@ def _typecheckingstub__32555a77b63910142de45100c4a6d74880ddece00a3cbae9c27803467
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -16060,6 +17244,7 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     bugs_email: typing.Optional[builtins.str] = None,
     bugs_url: typing.Optional[builtins.str] = None,
     bundled_deps: typing.Optional[typing.Sequence[builtins.str]] = None,
+    bun_version: typing.Optional[builtins.str] = None,
     code_artifact_options: typing.Optional[typing.Union[CodeArtifactOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     deps: typing.Optional[typing.Sequence[builtins.str]] = None,
     description: typing.Optional[builtins.str] = None,
@@ -16076,6 +17261,7 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     npm_registry: typing.Optional[builtins.str] = None,
     npm_registry_url: typing.Optional[builtins.str] = None,
     npm_token_secret: typing.Optional[builtins.str] = None,
+    npm_trusted_publishing: typing.Optional[builtins.bool] = None,
     package_manager: typing.Optional[NodePackageManager] = None,
     package_name: typing.Optional[builtins.str] = None,
     peer_dependency_options: typing.Optional[typing.Union[PeerDependencyOptions, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -16087,9 +17273,11 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     scripts: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     stability: typing.Optional[builtins.str] = None,
     yarn_berry_options: typing.Optional[typing.Union[YarnBerryOptions, typing.Dict[builtins.str, typing.Any]]] = None,
+    bump_package: typing.Optional[builtins.str] = None,
     jsii_release_version: typing.Optional[builtins.str] = None,
     major_version: typing.Optional[jsii.Number] = None,
     min_major_version: typing.Optional[jsii.Number] = None,
+    next_version_command: typing.Optional[builtins.str] = None,
     npm_dist_tag: typing.Optional[builtins.str] = None,
     post_build_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
     prerelease: typing.Optional[builtins.str] = None,
@@ -16097,12 +17285,14 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     publish_tasks: typing.Optional[builtins.bool] = None,
     releasable_commits: typing.Optional[_ReleasableCommits_d481ce10] = None,
     release_branches: typing.Optional[typing.Mapping[builtins.str, typing.Union[_BranchOptions_13663d08, typing.Dict[builtins.str, typing.Any]]]] = None,
+    release_environment: typing.Optional[builtins.str] = None,
     release_every_commit: typing.Optional[builtins.bool] = None,
     release_failure_issue: typing.Optional[builtins.bool] = None,
     release_failure_issue_label: typing.Optional[builtins.str] = None,
     release_schedule: typing.Optional[builtins.str] = None,
     release_tag_prefix: typing.Optional[builtins.str] = None,
     release_trigger: typing.Optional[_ReleaseTrigger_e4dc221f] = None,
+    release_workflow_env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     release_workflow_name: typing.Optional[builtins.str] = None,
     release_workflow_setup_steps: typing.Optional[typing.Sequence[typing.Union[_JobStep_c3287c05, typing.Dict[builtins.str, typing.Any]]]] = None,
     versionrc_options: typing.Optional[typing.Mapping[builtins.str, typing.Any]] = None,
@@ -16111,7 +17301,11 @@ def _typecheckingstub__05c2eb8aa04095bbe6af788737363089516ccd341e3a6624f153e8ff7
     workflow_runs_on_group: typing.Optional[typing.Union[_GroupRunnerOptions_148c59c1, typing.Dict[builtins.str, typing.Any]]] = None,
     default_release_branch: builtins.str,
     artifacts_directory: typing.Optional[builtins.str] = None,
+    audit_deps: typing.Optional[builtins.bool] = None,
+    audit_deps_options: typing.Optional[typing.Union[AuditOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     auto_approve_upgrades: typing.Optional[builtins.bool] = None,
+    biome: typing.Optional[builtins.bool] = None,
+    biome_options: typing.Optional[typing.Union[BiomeOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     build_workflow: typing.Optional[builtins.bool] = None,
     build_workflow_options: typing.Optional[typing.Union[BuildWorkflowOptions, typing.Dict[builtins.str, typing.Any]]] = None,
     build_workflow_triggers: typing.Optional[typing.Union[_Triggers_e9ae7617, typing.Dict[builtins.str, typing.Any]]] = None,
@@ -16334,6 +17528,7 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     jsx_import_source: typing.Optional[builtins.str] = None,
     lib: typing.Optional[typing.Sequence[builtins.str]] = None,
     module: typing.Optional[builtins.str] = None,
+    module_detection: typing.Optional[TypeScriptModuleDetection] = None,
     module_resolution: typing.Optional[TypeScriptModuleResolution] = None,
     no_emit: typing.Optional[builtins.bool] = None,
     no_emit_on_error: typing.Optional[builtins.bool] = None,
@@ -16361,6 +17556,7 @@ def _typecheckingstub__c3368fe3a3107764de1a64c16f7fe4c15d510477a888b2a74df2afb14
     strip_internal: typing.Optional[builtins.bool] = None,
     target: typing.Optional[builtins.str] = None,
     ts_build_info_file: typing.Optional[builtins.str] = None,
+    type_roots: typing.Optional[typing.Sequence[builtins.str]] = None,
     types: typing.Optional[typing.Sequence[builtins.str]] = None,
     use_unknown_in_catch_variables: typing.Optional[builtins.bool] = None,
     verbatim_module_syntax: typing.Optional[builtins.bool] = None,
@@ -16398,6 +17594,18 @@ def _typecheckingstub__ecc6431d5d9f322d469f99e5739da10bb780beb09da03305a82dac281
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__9f78586828830a46219bc19d7af8c53b4b5a1cc2bc1a03491930c9271790f10a(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__85556ff93e412b3ea5e894bc7d7669275e51dfae8c077378748d8053a46e4946(
+    pattern: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__c4b076d47872be6e9462b52280fba0e6d5509d09e6f0c405542d8edb8b704f3d(
     config_path: builtins.str,
 ) -> None:
@@ -16430,8 +17638,10 @@ def _typecheckingstub__f928658806d66c2cd4f3977b17ae3d10092cf4b9afb10e736c01729b7
 def _typecheckingstub__497e18a2c8dc3200cff8b21dfad7c418d29517aa6d67e2a2555ee78fa63ff385(
     project: NodeProject,
     *,
+    cooldown: typing.Optional[jsii.Number] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     include: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include_deprecated_versions: typing.Optional[builtins.bool] = None,
     pull_request_title: typing.Optional[builtins.str] = None,
     satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
     semantic_commit: typing.Optional[builtins.str] = None,
@@ -16459,8 +17669,10 @@ def _typecheckingstub__66ba20de6f144f37e582e192e3ed592a6be0e8bc3d10e3b730af62082
 
 def _typecheckingstub__0f7b896c11469470869bc4bfc86c9bb13fd308223e316ba71124c00b5709af1e(
     *,
+    cooldown: typing.Optional[jsii.Number] = None,
     exclude: typing.Optional[typing.Sequence[builtins.str]] = None,
     include: typing.Optional[typing.Sequence[builtins.str]] = None,
+    include_deprecated_versions: typing.Optional[builtins.bool] = None,
     pull_request_title: typing.Optional[builtins.str] = None,
     satisfy_peer_dependencies: typing.Optional[builtins.bool] = None,
     semantic_commit: typing.Optional[builtins.str] = None,
@@ -16485,6 +17697,7 @@ def _typecheckingstub__59fa39c2475322c21b2f7d03f2f2ada171b7e546b1d88beb8a75baa82
     assignees: typing.Optional[typing.Sequence[builtins.str]] = None,
     branches: typing.Optional[typing.Sequence[builtins.str]] = None,
     container: typing.Optional[typing.Union[_ContainerOptions_f50907af, typing.Dict[builtins.str, typing.Any]]] = None,
+    env: typing.Optional[typing.Mapping[builtins.str, builtins.str]] = None,
     git_identity: typing.Optional[typing.Union[_GitIdentity_6effc3de, typing.Dict[builtins.str, typing.Any]]] = None,
     labels: typing.Optional[typing.Sequence[builtins.str]] = None,
     permissions: typing.Optional[typing.Union[_JobPermissions_3b5b53dc, typing.Dict[builtins.str, typing.Any]]] = None,