Resolve Vulnerabilities; Complete code coverage; Update/Deduplicate dependencies

[jeffsays]

Summary

What does this PR do?

• Resolves open vulnerabilities
  • bump tar to resolve CVE-2026-23950 & CVE-2026-23745
  • bump glob 10.x -> 10.5.0 to resolve CVE-2025-64756
  • bump js-yaml versions to resolve CVE-2025-64718
• Add unit tests where coverage was missing
• Deduplicate dependencies

Details

Why did you make this change? What does it affect?

Fix vulnerabilities
Better coverage is faster

Testing

How can the other reviewers check that your change works?

Tests will pass, 🟢 build will suffice.

[github-actions]

yarn.lock changes

Summary

Status	Count
	44
	178
	2
	14

Click to toggle table visibility

Name	Status	Previous	Current
@ampproject/remapping		2.3.0	-
@aws-sdk/client-cloudformation		3.879.0	3.972.0
@aws-sdk/client-sso		3.879.0	3.972.0
@aws-sdk/core		3.879.0	3.972.0
@aws-sdk/credential-provider-env		3.879.0	3.972.0
@aws-sdk/credential-provider-http		3.879.0	3.972.0
@aws-sdk/credential-provider-ini		3.879.0	3.972.0
@aws-sdk/credential-provider-login		-	3.972.0
@aws-sdk/credential-provider-node		3.879.0	3.972.0
@aws-sdk/credential-provider-process		3.879.0	3.972.0
@aws-sdk/credential-provider-sso		3.879.0	3.972.0
@aws-sdk/credential-provider-web-identity		3.879.0	3.972.0
@aws-sdk/middleware-host-header		3.873.0	3.972.0
@aws-sdk/middleware-logger		3.876.0	3.972.0
@aws-sdk/middleware-recursion-detection		3.873.0	3.972.0
@aws-sdk/middleware-user-agent		3.879.0	3.972.0
@aws-sdk/nested-clients		3.879.0	3.972.0
@aws-sdk/region-config-resolver		3.873.0	3.972.0
@aws-sdk/token-providers		3.879.0	3.972.0
@aws-sdk/types		3.862.0	3.972.0
@aws-sdk/util-endpoints		3.879.0	3.972.0
@aws-sdk/util-user-agent-browser		3.873.0	3.972.0
@aws-sdk/util-user-agent-node		3.879.0	3.972.0
@aws-sdk/xml-builder		3.873.0	3.972.0
@aws/lambda-invoke-store		-	0.2.3
@babel/code-frame		7.27.1	7.28.6
@babel/compat-data		7.27.2	7.28.6
@babel/core		7.27.1	7.28.6
@babel/generator		7.27.1	7.28.6
@babel/helper-compilation-targets		7.27.2	7.28.6
@babel/helper-globals		-	7.28.0
@babel/helper-module-imports		7.27.1	7.28.6
@babel/helper-module-transforms		7.27.1	7.28.6
@babel/helper-plugin-utils		7.27.1	7.28.6
@babel/helper-validator-identifier		7.27.1	7.28.5
@babel/helpers		7.27.1	7.28.6
@babel/parser		7.27.2	7.28.6
@babel/plugin-syntax-jsx		7.27.1	7.28.6
@babel/plugin-syntax-typescript		7.27.1	7.28.6
@babel/template		7.27.2	7.28.6
@babel/traverse		7.27.1	7.28.6
@babel/types		7.27.1	7.28.6
@emnapi/core		-	1.8.1
@emnapi/runtime		-	1.8.1
@emnapi/wasi-threads		-	1.1.0
@eslint-community/eslint-utils		4.7.0	4.9.1
@eslint-community/regexpp		4.12.1	4.12.2
@jest/console		29.7.0	30.2.0
@jest/core		29.7.0	30.2.0
@jest/diff-sequences		-	30.0.1
@jest/environment		29.7.0	30.2.0
@jest/expect		29.7.0	30.2.0
@jest/expect-utils		29.7.0	30.2.0
@jest/fake-timers		29.7.0	30.2.0
@jest/get-type		-	30.1.0
@jest/globals		29.7.0	30.2.0
@jest/pattern		-	30.0.1
@jest/reporters		29.7.0	30.2.0
@jest/schemas		29.6.3	30.0.5
@jest/snapshot-utils		-	30.2.0
@jest/source-map		29.6.3	30.0.1
@jest/test-result		29.7.0	30.2.0
@jest/test-sequencer		29.7.0	30.2.0
@jest/transform		29.7.0	30.2.0
@jest/types		29.6.3	30.2.0
@jridgewell/gen-mapping		0.3.8	0.3.13
@jridgewell/remapping		-	2.3.5
@jridgewell/set-array		1.2.1	-
@jridgewell/sourcemap-codec		1.5.0	1.5.5
@jridgewell/trace-mapping		0.3.25	0.3.31
@napi-rs/wasm-runtime		-	0.2.12
@pkgr/core		0.2.4	0.2.9
@sinclair/typebox		0.27.8	0.34.47
@sinonjs/fake-timers		10.3.0	13.0.5
@smithy/abort-controller		4.0.5	4.2.8
@smithy/config-resolver		4.1.5	4.4.6
@smithy/core		3.9.0	3.21.0
@smithy/credential-provider-imds		4.0.7	4.2.8
@smithy/fetch-http-handler		5.1.1	5.3.9
@smithy/hash-node		4.0.5	4.2.8
@smithy/invalid-dependency		4.0.5	4.2.8
@smithy/is-array-buffer		4.0.0	4.2.0
@smithy/middleware-content-length		4.0.5	4.2.8
@smithy/middleware-endpoint		4.1.19	4.4.10
@smithy/middleware-retry		4.1.20	4.4.26
@smithy/middleware-serde		4.0.9	4.2.9
@smithy/middleware-stack		4.0.5	4.2.8
@smithy/node-config-provider		4.1.4	4.3.8
@smithy/node-http-handler		4.1.1	4.4.8
@smithy/property-provider		4.0.5	4.2.8
@smithy/protocol-http		5.1.3	5.3.8
@smithy/querystring-builder		4.0.5	4.2.8
@smithy/querystring-parser		4.0.5	4.2.8
@smithy/service-error-classification		4.0.7	4.2.8
@smithy/shared-ini-file-loader		4.0.5	4.4.3
@smithy/signature-v4		5.1.3	5.3.8
@smithy/smithy-client		4.5.0	4.10.11
@smithy/types		4.3.2	4.12.0
@smithy/url-parser		4.0.5	4.2.8
@smithy/util-base64		4.0.0	4.3.0
@smithy/util-body-length-browser		4.0.0	4.2.0
@smithy/util-body-length-node		4.0.0	4.2.1
@smithy/util-buffer-from		4.0.0	4.2.0
@smithy/util-config-provider		4.0.0	4.2.0
@smithy/util-defaults-mode-browser		4.0.27	4.3.25
@smithy/util-defaults-mode-node		4.0.27	4.2.28
@smithy/util-endpoints		3.0.7	3.2.8
@smithy/util-hex-encoding		4.0.0	4.2.0
@smithy/util-middleware		4.0.5	4.2.8
@smithy/util-retry		4.0.7	4.2.8
@smithy/util-stream		4.2.4	4.5.10
@smithy/util-uri-escape		4.0.0	4.2.0
@smithy/util-utf8		4.0.0	4.2.0
@smithy/util-waiter		4.0.7	4.2.8
@smithy/uuid		-	1.1.0
@tybys/wasm-util		-	0.10.1
@types/gensync		1.0.4	-
@types/graceful-fs		4.1.9	-
@types/jest		29.5.14	30.0.0
@types/uuid		9.0.8	-
@types/yargs		17.0.33	17.0.35
@typescript-eslint/eslint-plugin		8.32.0	8.53.1
@typescript-eslint/parser		8.32.0	8.53.1
@typescript-eslint/project-service		-	8.53.1
@typescript-eslint/scope-manager		8.32.0	8.53.1
@typescript-eslint/tsconfig-utils		-	8.53.1
@typescript-eslint/type-utils		8.32.0	8.53.1
@typescript-eslint/types		8.32.0	8.53.1
@typescript-eslint/typescript-estree		8.32.0	8.53.1
@typescript-eslint/utils		8.32.0	8.53.1
@typescript-eslint/visitor-keys		8.32.0	8.53.1
@unrs/resolver-binding-android-arm-eabi		-	1.11.1
@unrs/resolver-binding-android-arm64		-	1.11.1
@unrs/resolver-binding-darwin-arm64		-	1.11.1
@unrs/resolver-binding-darwin-x64		-	1.11.1
@unrs/resolver-binding-freebsd-x64		-	1.11.1
@unrs/resolver-binding-linux-arm-gnueabihf		-	1.11.1
@unrs/resolver-binding-linux-arm-musleabihf		-	1.11.1
@unrs/resolver-binding-linux-arm64-gnu		-	1.11.1
@unrs/resolver-binding-linux-arm64-musl		-	1.11.1
@unrs/resolver-binding-linux-ppc64-gnu		-	1.11.1
@unrs/resolver-binding-linux-riscv64-gnu		-	1.11.1
@unrs/resolver-binding-linux-riscv64-musl		-	1.11.1
@unrs/resolver-binding-linux-s390x-gnu		-	1.11.1
@unrs/resolver-binding-linux-x64-gnu		-	1.11.1
@unrs/resolver-binding-linux-x64-musl		-	1.11.1
@unrs/resolver-binding-wasm32-wasi		-	1.11.1
@unrs/resolver-binding-win32-arm64-msvc		-	1.11.1
@unrs/resolver-binding-win32-ia32-msvc		-	1.11.1
@unrs/resolver-binding-win32-x64-msvc		-	1.11.1
array-includes		3.1.8	3.1.9
array.prototype.findlastindex		1.2.5	1.2.6
async-generator-function		-	1.0.0
babel-jest		29.7.0	30.2.0
babel-plugin-istanbul		6.1.1	7.0.1
babel-plugin-jest-hoist		29.6.3	30.2.0
babel-preset-current-node-syntax		1.1.0	1.2.0
babel-preset-jest		29.6.3	30.2.0
call-bind-apply-helpers		1.0.1	1.0.2
call-bound		1.0.3	1.0.4
ci-info		3.9.0	4.3.1
cjs-module-lexer		1.4.3	2.2.0
collect-v8-coverage		1.0.2	1.0.3
create-jest		29.7.0	-
debug		4.4.0	4.4.3
dedent		1.6.0	1.7.1
diff-sequences		29.6.3	-
es-abstract		1.23.9	1.24.1
es-shim-unscopables		1.0.2	1.1.0
eslint-config-prettier		8.10.0	8.10.2
eslint-module-utils		2.12.0	2.12.1
eslint-plugin-import		2.31.0	2.32.0
eslint-plugin-jest		28.11.0	28.14.0
eslint-plugin-prettier		5.4.0	5.5.5
eslint-visitor-keys		4.2.0	4.2.1
exit		0.1.2	-
exit-x		-	0.2.2
expect		29.7.0	30.2.0
fdir		-	6.5.0
for-each		0.3.4	0.3.5
generator-function		-	2.0.1
get-intrinsic		1.2.7	1.3.1
glob		10.4.5	10.5.0
ignore		5.3.2	7.0.5
is-negative-zero		-	2.0.3
istanbul-lib-source-maps		4.0.1	5.0.6
jest		29.7.0	30.2.0
jest-changed-files		29.7.0	30.2.0
jest-circus		29.7.0	30.2.0
jest-cli		29.7.0	30.2.0
jest-config		29.7.0	30.2.0
jest-diff		29.7.0	30.2.0
jest-docblock		29.7.0	30.2.0
jest-each		29.7.0	30.2.0
jest-environment-node		29.7.0	30.2.0
jest-get-type		29.6.3	-
jest-haste-map		29.7.0	30.2.0
jest-leak-detector		29.7.0	30.2.0
jest-matcher-utils		29.7.0	30.2.0
jest-message-util		29.7.0	30.2.0
jest-mock		29.7.0	30.2.0
jest-regex-util		29.6.3	30.0.1
jest-resolve		29.7.0	30.2.0
jest-resolve-dependencies		29.7.0	30.2.0
jest-runner		29.7.0	30.2.0
jest-runtime		29.7.0	30.2.0
jest-snapshot		29.7.0	30.2.0
jest-util		29.7.0	30.2.0
jest-validate		29.7.0	30.2.0
jest-watcher		29.7.0	30.2.0
jest-worker		29.7.0	30.2.0
js-yaml		4.1.0	4.1.1
kleur		3.0.3	-
minizlib		3.0.1	3.1.0
mkdirp		3.0.1	0.5.6
napi-postinstall		-	0.3.4
picomatch		2.3.1	4.0.3
pirates		4.0.6	4.0.7
prettier		3.5.3	3.8.0
prettier-linter-helpers		1.0.0	1.0.1
pretty-format		29.7.0	30.2.0
prompts		2.4.2	-
pure-rand		6.1.0	7.0.1
resolve.exports		2.0.3	-
rimraf		5.0.10	3.0.2
semver		7.7.2	7.7.3
sisteransi		1.0.5	-
stop-iteration-iterator		-	1.1.0
synckit		0.11.4	0.11.12
tar		7.4.3	7.5.6
tinyglobby		-	0.2.15
ts-api-utils		2.1.0	2.4.0
ts-jest		29.4.1	29.4.6
typescript		5.8.3	5.9.3
unrs-resolver		-	1.11.1
uuid		9.0.1	-
which-typed-array		1.1.18	1.1.20
write-file-atomic		4.0.2	5.0.1

[Copilot]

Pull request overview

This PR aims to resolve security vulnerabilities by updating dependencies, improve test coverage to 100%, and deduplicate dependencies. However, there are critical issues with the implementation.

Changes:

• Increased Jest coverage thresholds from 95%/79% to 100% for all metrics (statements, branches, lines)
• Added comprehensive unit tests for edge cases including null/undefined stack responses and optional field handling
• Updated multiple development dependencies to newer versions (jest, @types/jest, prettier, typescript, eslint plugins)
• Updated @aws-sdk/client-cloudformation to ^3.972.0

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
test/unit/index.test.ts	Added 183 lines of new tests covering edge cases for null/undefined stack states, missing fields, and optional branches to achieve 100% code coverage
package.json	Updated coverage thresholds to 100%, upgraded multiple dependencies including jest, typescript, prettier, and AWS SDK

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.