[Snyk] Upgrade @types/aws-lambda from 8.10.111 to 8.10.142

[gitafolabi]

Snyk has created this PR to upgrade @types/aws-lambda from 8.10.111 to 8.10.142.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 31 versions ahead of your current version.

• The recommended version was released on 22 days ago.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[dryrunsecurity]

DryRun Security Summary

The pull request primarily involves updating the dependencies used in the AWS CDK project, including a minor version update to the @types/aws-lambda dependency and the addition of the axios dependency, which should be reviewed for potential security vulnerabilities and secure dependency management practices.

Expand for full summary

Summary:

The changes in this pull request primarily involve updates to the dependencies used in the AWS CDK (Cloud Development Kit) project. The key changes include:

1. Updating the version of the @types/aws-lambda dependency from ^8.10.109 to ^8.10.142.
2. Adding the axios dependency to the project.

From an application security perspective, these changes should be reviewed to ensure that the updated dependencies do not introduce any security vulnerabilities or breaking changes. Additionally, it is important to establish secure practices for managing dependencies, such as using dependency scanning tools, reviewing dependency configurations, and implementing a clear strategy for upgrading dependencies.

Files Changed:

• cdk/package.json: This file has been updated to include the new version of the @types/aws-lambda dependency and the addition of the axios dependency. The update to the @types/aws-lambda dependency is a minor version change, which typically indicates a non-breaking change or a bug fix. The addition of the axios dependency should be reviewed to ensure that it is being used securely and that any potential vulnerabilities in the library are addressed.
• cdk/yarn.lock: This file has been updated to reflect the changes in the package.json file, specifically the update to the @types/aws-lambda dependency from version 8.10.111 to 8.10.143. This is a minor version update and is unlikely to introduce any significant security risks, unless there are any specific security vulnerabilities or breaking changes mentioned in the release notes for the new version.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.