[Snyk] Upgrade constructs from 10.1.265 to 10.3.0

[gitafolabi]

Snyk has created this PR to upgrade constructs from 10.1.265 to 10.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 121 versions ahead of your current version.

• The recommended version was released on 10 months ago.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[dryrunsecurity]

DryRun Security Summary

The pull request updates the version of the constructs dependency in the project's cdk/package.json and cdk/yarn.lock files, which is a core part of the AWS CDK (Cloud Development Kit) used to define and compose cloud infrastructure components.

Expand for full summary

Summary:

The changes in this pull request involve updating the version of the constructs dependency in the project's cdk/package.json and cdk/yarn.lock files. The constructs package is a core part of the AWS CDK (Cloud Development Kit) and is used to define and compose cloud infrastructure components.

From an application security perspective, these changes are not particularly concerning. Updating dependencies to newer versions is a common and routine practice, and the version changes in this case appear to be minor, indicating bug fixes, improvements, or new features rather than breaking changes.

However, it's always important to review any dependency updates, especially for core packages like constructs, to ensure that there are no known security vulnerabilities or other potential issues that could impact the application. In this case, the version changes seem relatively low-risk, but it's still recommended to review the release notes or change logs for the new versions to understand any potential impacts and to thoroughly test the updated code in a non-production environment.

Files Changed:

1. cdk/package.json: This file has been updated to use version 10.3.0 of the constructs dependency, up from the previous version 10.1.224.
2. cdk/yarn.lock: This file has been updated to reflect the change in the constructs dependency version from 10.1.265 to 10.3.0.

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.