Skip to content

chore(deps-dev): update serverless requirement from ^4.36.1 to ^4.37.0 in /examples/deploy-aws-lambda#2952

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0
Jun 2, 2026
Merged

chore(deps-dev): update serverless requirement from ^4.36.1 to ^4.37.0 in /examples/deploy-aws-lambda#2952
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 29, 2026

Updates the requirements on serverless to permit the latest version.

Release notes

Sourced from serverless's releases.

4.37.0

Features

  • New serverless diff command for previewing changes against the deployed stack. Packages the service locally and renders a structured diff — resources, IAM grants, security groups, parameters, outputs — against the CloudFormation stack currently in AWS. A Function Code section reports per-function code changes by comparing local zip hashes against each Lambda's CodeSha256. Especially useful in CI and PR-review workflows. --json emits a machine-readable summary; --package <path> reuses an existing artifact directory to skip the auto-package step. Docs. (#13602)

    serverless diff
    serverless diff --json
    serverless diff --package .serverless
  • TypeScript files supported in ${file()} variable references. The ${file(...)} variable resolver now loads .ts, .mts, and .cts modules in addition to JavaScript, with no separate build step required. All export shapes — default object, async default function, named export, named-export function with property selector, and injected resolveVariable / resolveConfigurationProperty callbacks — behave identically across JavaScript and TypeScript sources. Docs. (#13590)

    // scripts/secrets.ts
    export const getSecrets = async () => ({ apiKey: process.env.API_KEY })
    custom:
      secrets: ${file(./scripts/secrets.ts):getSecrets}
  • Custom .env file locations and explicit opt-out via useDotenv. Previously a boolean. Now accepts a path or array of paths to load additional .env files alongside the local .env / .env.${stage} already loaded automatically — useful for monorepos sharing variables across services. useDotenv: false is now honored as the documented opt-out. Debug logging at core:resolver:env surfaces which files loaded and which keys came from each (visible with SLS_DEBUG=*; keys only, never values). Docs. Closes #10641. (#13597)

    useDotenv: ../shared           # load files from a sibling directory
    # useDotenv:                   # …or a list — earlier entries win
    #   - ./overrides.env
    #   - ../
    # useDotenv: false             # disable all .env loading
  • CloudWatch Logs Infrequent Access log class. Opt-in logs.logGroupClass: infrequent_access at provider or function level provisions an Infrequent Access log group alongside the standard one, wires Lambda's LoggingConfig.LogGroup to write to it, and applies DeletionPolicy: Retain so its history survives stack updates and removals. The standard sibling is always created so pre-existing logs at the default path are preserved during migration. Services that do not opt in produce an identical CloudFormation template. Docs. Closes #12278. (#13601)

    provider:
      logs:
        lambda:
          logGroupClass: infrequent_access   # service-wide default
    functions:
    realTimeReports:
    handler: handler.reports
    logs:
    logGroupClass: standard            # override per function

    Note: AWS does not allow the class of an existing log group to be changed in place. serverless logs -f <function> cannot read Infrequent Access groups — use CloudWatch Logs Insights instead. Once an IA log group has been retained out of the stack, re-enabling infrequent_access later for the same function will fail with ResourceAlreadyExistsException unless the orphaned group is first deleted or imported back into the stack.

... (truncated)

Commits
  • 4ec3c03 chore: release 4.37.0 (#13606)
  • 34fd88c fix: make ${file(.ts)} and serverless diff work in the published distribu...
  • 8efe699 docs(menu): register diff command and alphabetize CLI Reference (#13608)
  • 8576307 chore(deps): bump @​smithy/util-retry (#13607)
  • 3a4cb54 feat: add 'diff' command to preview changes against the deployed stack (#13602)
  • 4c5ad90 feat: support CloudWatch Logs Infrequent Access log class (#13601)
  • c612af4 feat: support TypeScript files in ${file()} variable resolver (#13590)
  • 53d132a chore(deps): bump the aws-sdk group across 1 directory with 34 updates (#13605)
  • d98240e feat: add batching to reconcile command for large-scale instance reconciliati...
  • 9ff8846 feat: support ECR repository image retention via lifecycle policy (#13584)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 29, 2026
@dependabot dependabot Bot requested a review from a team as a code owner May 29, 2026 18:58
@dependabot dependabot Bot added area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels May 29, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 29, 2026

⚠️ No Changeset found

Latest commit: a1a1701

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@github-actions github-actions Bot enabled auto-merge (squash) May 29, 2026 18:58
@codecov
Copy link
Copy Markdown

codecov Bot commented May 29, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.47%. Comparing base (8241f6d) to head (a1a1701).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #2952   +/-   ##
=======================================
  Coverage   94.47%   94.47%           
=======================================
  Files          45       45           
  Lines        7885     7885           
  Branches      708      708           
=======================================
  Hits         7449     7449           
  Misses        428      428           
  Partials        8        8           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0 branch from 328f9be to d991479 Compare May 29, 2026 19:10
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0 branch from d991479 to 6d51199 Compare June 1, 2026 23:47
@zimeg
Copy link
Copy Markdown
Member

zimeg commented Jun 2, 2026

@dependabot recreate

Updates the requirements on [serverless](https://github.com/serverless/serverless) to permit the latest version.
- [Release notes](https://github.com/serverless/serverless/releases)
- [Changelog](https://github.com/serverless/serverless/blob/main/RELEASE_PROCESS.md)
- [Commits](https://github.com/serverless/serverless/compare/sf-core@4.36.1...sf-core@4.37.0)

---
updated-dependencies:
- dependency-name: serverless
  dependency-version: 4.37.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0 branch from 6d51199 to a1a1701 Compare June 2, 2026 03:54
@github-actions github-actions Bot merged commit 38e8817 into main Jun 2, 2026
30 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/examples/deploy-aws-lambda/serverless-tw-4.37.0 branch June 2, 2026 03:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:examples issues related to example or sample code dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant