Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 12, 2025

Updates the requirements on serverless to permit the latest version.

Release notes

Sourced from serverless's releases.

4.14.3

Security Fixes

  • Update Go version to address CVE-2025-22871, related to net/http in the Golang stdlib: We’ve reviewed the recent CVE, which generally affects the Go standard library in web servers and web-related functionalities. Since the Serverless Framework is a CLI tool does not rely on running a web server or handling web requests, users are not affected by this vulnerability. The CLI uses a small amount of Go to handle updating to the version set in frameworkCore in serverless.yml. Our update process uses HTTPS with SSL/TLS to securely check for and install new versions, ensuring no risk of exploitation or malicious code injection. All dependencies have been audited, and no vulnerabilities were found. However, upgrading is always a best practice and, we recommend users upgrade to the latest version to ensure they’re on the most secure release. This can be done via the serverless upgrade command, which will update the installer.
Changelog

Sourced from serverless's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

3.38.0 (2023-11-21)

Features

3.37.0 (2023-11-16)

Features

Bug Fixes

3.36.0 (2023-10-23)

Features

  • Improved dashboard documentation and gitignore (#12176) (eb462ed)

Bug Fixes

  • Dashboard documentation improvements (bb4d7c8)
  • Fix menu for dashboard documentation (8f266af)
  • Improve dashboard documentation (ad8bbf1)
  • Improve dashboard documentation (f67df7f)
  • Minor dashboard doc improvements (#12177) (f1fa19c)

3.35.2 (2023-09-16)

Bug Fixes

3.35.1 (2023-09-16)

Bug Fixes

3.35.0 (2023-09-15)

Features

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @WilliamBergamin.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 12, 2025
Copy link

codecov bot commented May 12, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.28%. Comparing base (2214260) to head (1aab7f8).
Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2526   +/-   ##
=======================================
  Coverage   93.28%   93.28%           
=======================================
  Files          37       37           
  Lines        7495     7495           
  Branches      656      656           
=======================================
  Hits         6992     6992           
  Misses        498      498           
  Partials        5        5           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.14.3 branch 3 times, most recently from f4a8932 to ffe7036 Compare May 12, 2025 19:23
@WilliamBergamin
Copy link
Contributor

@dependabot squash and merge

Updates the requirements on [serverless](https://github.com/serverless/serverless) to permit the latest version.
- [Release notes](https://github.com/serverless/serverless/releases)
- [Changelog](https://github.com/serverless/serverless/blob/main/CHANGELOG.md)
- [Commits](serverless/serverless@v4.14.2...v4.14.3)

---
updated-dependencies:
- dependency-name: serverless
  dependency-version: 4.14.3
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.14.3 branch from ffe7036 to 1aab7f8 Compare May 12, 2025 19:33
@dependabot dependabot bot merged commit 151fa3c into main May 12, 2025
18 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.14.3 branch May 12, 2025 19:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant