Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump @architect/functions from 5.3.4 to 8.0.0 #1885

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2024

Bumps @architect/functions from 5.3.4 to 8.0.0.

Changelog

Sourced from @​architect/functions's changelog.

[8.0.0] 2023-10-17

Architect Functions just got a lot faster. Gone are the days of 500-1000ms cold starts due to instantiating the AWS SDK – Functions v8 is now between 2-5x faster, and uses 2-4x less memory, courtesy of aws-lite!

Added

  • arc.tables() now includes a new DynamoDB client: _client, an instantiation of @aws-lite/dynamodb
    • _client is largely functionally similar to the AWS SDK's DocumentClient, but a bit less fiddly (we think)
    • arc.tables() methods should be functionally the same, including key error properties

Changed

  • Breaking change: AWS SDK v2 + v3 DynamoDB client + DocumentClient instantiation is now opt-in
    • Code depending on data._db or data._doc must now instantiate with the awsSdkClient boolean option, like so: await arc.tables({ awsSdkClient: true })
    • If you only rely on the DocumentClient (_doc), you may want to just try using the new @aws-lite/dynamodb-based _client
  • Breaking change: while we've taken efforts to ensure the maximum degree of compatibility with AWS SDK v2 and v3 errors, the errors returned in Arc Functions 8.0 (using aws-lite) may still vary slightly
    • This only really applies if your error handling relies on specific properties or values
    • If you just console.log() your errors, you will be totally fine, and the quality of the errors you get via aws-lite will most likely improve with this change
    • Note: if you're an AWS SDK v2 user considering migrating to v3, error incompatibility will apply even more so; v3 errors are incompatible with v2, whereas aws-lite errors attempt to be compatible with both SDK v2 + v3
  • Added Node.js 20.x to test matrix
  • Breaking change: removed support for Node.js 14.x (now EOL, and no longer available to created in AWS Lambda)

[7.0.0] 2023-07-10

Added

  • Added support for arc.http to accept either async or callback functions
    • This is not a breaking change, and arc.http.async will remain as a legacy code path
    • Moving forward we suggest passing all middleware through arc.http, which will figure out whether to run in async or callback mode
    • Note: pass only callback or async middleware, but not both. Don't drink and drive, and don't mix async primitives.
  • Added service discovery for DynamoDB-backed sessions
    • Now you can set your ARC_SESSION_TABLE_NAME env var with the logical name of your sessions table found in your app.arc file
    • However, the physical DynamoDB table name will work as well
  • Added support for JWE session encryption customization
    • Configure by adding an env var named ARC_APP_SECRET_ALGO with a value of A256GCM (default if not specified), A192GCM, or A128GCM
  • Added tables.scanAll method for retrieving the entire contents of a table

Changed

  • Improved SNS (@events), SQS (@queues), and SSM (arc.discovery) performance by caching clients, thereby enabling more efficient usage, especially in large workloads; thanks @​w5mix & @​CameronSima!
  • Breaking change: default JWE session encryption algorithm is now A256GCM
    • This algorithm offers greater entropy with as good or greater performance in session token encryption / decryption
    • Backwards compatible JWE session encryption is available by adding a truthy env var named ARC_FORCE_LEGACY_JWE_SECRET
  • Invalid session secrets now error loudly
  • Updated deps

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps [@architect/functions](https://github.com/architect/functions) from 5.3.4 to 8.0.0.
- [Changelog](https://github.com/architect/functions/blob/main/_changelog.md)
- [Commits](architect/functions@v5.3.4...v8.0.0)

---
updated-dependencies:
- dependency-name: "@architect/functions"
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Feb 5, 2024
@lpsinger
Copy link
Member

lpsinger commented Feb 5, 2024

Blocked by remix-run/remix#7207.

@lpsinger lpsinger closed this Feb 5, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 5, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/npm_and_yarn/architect/functions-8.0.0 branch February 5, 2024 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant