Skip to content

fix(deps): update middy-js monorepo to v7.7.0#49

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/middy-js-monorepo
Jun 28, 2026
Merged

fix(deps): update middy-js monorepo to v7.7.0#49
renovate[bot] merged 1 commit into
mainfrom
renovate/middy-js-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@middy/core (source) 7.6.87.7.0 age confidence
@middy/input-output-logger (source) 7.6.87.7.0 age confidence

Release Notes

middyjs/middy (@​middy/core)

v7.7.0

Compare Source

What's Changed

  • Update @aws/durable-execution-sdk-js to v2 - May cause Type breaking change
  • Update core to use new SDK for improved executionMode detection

Security hardening

  • http-response-serializer — caps media-type length at 128 chars and validates against a media-type grammar before reflecting into Content-Type. Stops ReDoS via attacker-supplied media types and prevents echoing untrusted input.

Bug fixes / edge cases

  • Added missing defaults, plus small fixes across http-header-normalizer, http-multipart-body-parser, glue-schema-registry, validator, http-content-negotiation, event-batch-response, http-x402.

Performance

  • core/index.js reworked across standard/durable/streamify execution modes.

Tooling / CI (not user-facing)

  • Biome → 2.5.0 + config migration; fuzz-test fixes (event-normalizer); mutation-coverage improvements; provenance-attestation source fix.

Docs

  • WAF alternative note; typo fixes.
  • Deps: bump github/codeql-action 4.35.5 → 4.36.0 (#​1656)

Full Changelog: middyjs/middy@7.6.8...7.7.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested a review from a team as a code owner June 26, 2026 20:43
@renovate renovate Bot enabled auto-merge (squash) June 26, 2026 20:43
@renovate renovate Bot force-pushed the renovate/middy-js-monorepo branch from 288bd7e to d998483 Compare June 28, 2026 16:27
@coderbyheart coderbyheart added the non-significant Non-significant changes that do not need a PR review label Jun 28, 2026
@renovate renovate Bot merged commit 5a632d2 into main Jun 28, 2026
2 checks passed
@coderbyheart

Copy link
Copy Markdown
Member

Non-significant change, no PR review required.

@renovate renovate Bot deleted the renovate/middy-js-monorepo branch June 28, 2026 16:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies non-significant Non-significant changes that do not need a PR review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant