v1.4.4

1.4.4 (2026-03-17)

Chore

• [AEA-0000] - add exclude array for python lambdas (#602) (1453734)
• [AEA-0000] - Optionaly use imports in lambda constructs (#603) (cc10f07)
• [AEA-0000] - stagger dependabot (#576) (e23d9cb)
• [AEA-0000] - Trivy ignore minimatch issues (#574) (2146a9e)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.1005.0 to 3.1007.0 (#584) (7c6ae39)
• [dependabot] - bump @aws-sdk/client-cloudformation from 3.1007.0 to 3.1008.0 (#599) (fe769b9)
• [dependabot] - bump @aws-sdk/client-cloudformation from 3.994.0 to 3.1003.0 (#568) (b1fc489)
• [dependabot] - bump @aws-sdk/client-lambda from 3.1005.0 to 3.1007.0 (#587) (bdba8cd)
• [dependabot] - bump @aws-sdk/client-lambda from 3.1007.0 to 3.1008.0 (#601) (60ae3e4)
• [dependabot] - bump @aws-sdk/client-lambda from 3.994.0 to 3.1003.0 (#566) (dc8005a)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.1005.0 to 3.1007.0 (#583) (aa5183c)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.1007.0 to 3.1008.0 (#598) (1913f7f)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.994.0 to 3.1003.0 (#571) (106093b)
• [dependabot] - bump @aws-sdk/client-s3 from 3.1005.0 to 3.1007.0 (#585) (5fe369b)
• [dependabot] - bump @aws-sdk/client-s3 from 3.1007.0 to 3.1008.0 (#596) (4fbdb38)
• [dependabot] - bump @aws-sdk/client-s3 from 3.994.0 to 3.1003.0 (#570) (34bbfe2)
• [dependabot] - bump @types/node from 25.3.0 to 25.3.5 (#572) (a5870a0)
• [dependabot] - bump @types/node from 25.4.0 to 25.5.0 (#594) (a6ec5fb)
• [dependabot] - bump @typescript-eslint/eslint-plugin from 8.56.0 to 8.56.1 (#552) (5797eb0)
• [dependabot] - bump @vitest/coverage-v8 from 4.0.18 to 4.1.0 (#597) (3da5c05)
• [dependabot] - bump actions/download-artifact from 7.0.0 to 8.0.0 (#548) (4850e49)
• [dependabot] - bump actions/download-artifact from 8.0.0 to 8.0.1 (#582) (3bea290)
• [dependabot] - bump actions/upload-artifact from 6.0.0 to 7.0.0 (#549) (11d0b49)
• [dependabot] - bump aws-cdk from 2.1106.1 to 2.1109.0 (#567) (9c15988)
• [dependabot] - bump aws-cdk from 2.1110.0 to 2.1111.0 (#588) (6a22c2f)
• [dependabot] - bump aws-cdk-lib from 2.239.0 to 2.241.0 (#569) (9dd2d50)
• [dependabot] - bump aws-cdk-lib from 2.241.0 to 2.243.0 (#586) (9f93c31)
• [dependabot] - bump esbuild from 0.27.3 to 0.27.4 (#595) (6b0dc3e)
• [dependabot] - bump eslint from 10.0.1 to 10.0.2 (#559) (479ca73)
• [dependabot] - bump globals from 17.3.0 to 17.4.0 (#573) (c574db4)
• [dependabot] - bump jest from 30.2.0 to 30.3.0 (#581) (4a4311f)
• [dependabot] - bump minimatch from 3.1.2 to 3.1.5 (#575) (0ded230)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.5.1 to 5.6.3 (#565) (68955be)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.6.3 to 5.6.6 (#592) (a37c1fa)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml from 5.5.3 to 5.6.4 (#580) (90211a5)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/get-repo-config.yml from 5.6.4 to 5.6.6 (#589) (b26fe7a)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.5.1 to 5.6.3 (#564) (9989bfe)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.6.3 to 5.6.4 (#578) (795fc4c)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.6.4 to 5.6.6 (#591) (d9dc325)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml from 5.5.3 to 5.6.4 (#579) (0b862f6)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks-devcontainer.yml from 5.6.4 to 5.6.6 (#590) (92400d8)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml from 5.5.3 to 5.6.3 (#563) (b696b65)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml from 5.6.3 to 5.6.4 (#577) (0a1134c)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release-devcontainer.yml from 5.6.4 to 5.6.6 (#593) (eee61af)
• [dependabot] - bump rollup from 4.57.1 to 4.59.0 (#562) (39d131a)

Info

Release workflow run - Workflow ID: 23209529379

It was initialized by anthony-nhs

v1.4.3

1.4.3 (2026-02-25)

Chore

• [AEA-0000] - use latest common workflows (#545) (3137145)

Info

Release workflow run - Workflow ID: 22387982043

It was initialized by

v1.4.2

1.4.2 (2026-02-23)

Chore

• [AEA-0000] - move to common dev container (#543) (0b4cdd5)

Fix

• [AEA-0000] - refactor checkDestructiveChanges (#544) (458b843)

Upgrade

• [dependabot] - bump eslint from 9.39.2 to 10.0.1 (#528) (cf4f69e)

Info

Release workflow run - Workflow ID: 22317825971

It was initialized by anthony-nhs

v1.4.1

1.4.1 (2026-02-23)

Fix

• [AEA-0000] - allow cdk metadata change (#542) (6c602a5)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.993.0 to 3.994.0 (#539) (ffe9fdd)
• [dependabot] - bump @aws-sdk/client-lambda from 3.993.0 to 3.994.0 (#537) (8b7e7d4)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.993.0 to 3.994.0 (#540) (3df619c)
• [dependabot] - bump @aws-sdk/client-s3 from 3.993.0 to 3.994.0 (#536) (a80612c)
• [dependabot] - bump aws-cdk-lib from 2.238.0 to 2.239.0 (#541) (707b8ae)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.4.1 to 5.5.1 (#534) (6f7f9fc)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.4.1 to 5.5.1 (#533) (2bb3712)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks.yml from 5.4.1 to 5.5.1 (#535) (863dd32)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release.yml from 5.4.1 to 5.5.1 (#532) (1c05d45)

Info

Release workflow run - Workflow ID: 22310222697

It was initialized by anthony-nhs

v1.4.0

1.4.0 (2026-02-20)

New

• [AEA-0000] - add function to scan destructive changes (#531) (5d8917b)

Info

Release workflow run - Workflow ID: 22232012641

It was initialized by anthony-nhs

v1.3.2

1.3.2 (2026-02-20)

Fix

• [AEA-6028] - Switched deployApi to accept resolved values for client cert / key (#530) (81f327f)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.987.0 to 3.989.0 (#519) (423b80a)
• [dependabot] - bump @aws-sdk/client-cloudformation from 3.989.0 to 3.993.0 (#523) (e822fe1)
• [dependabot] - bump @aws-sdk/client-lambda from 3.987.0 to 3.993.0 (#524) (6f222d0)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.987.0 to 3.993.0 (#521) (a52bae9)
• [dependabot] - bump @aws-sdk/client-s3 from 3.987.0 to 3.993.0 (#522) (219a9e0)
• [dependabot] - bump @types/node from 25.2.3 to 25.3.0 (#527) (6a733e4)
• [dependabot] - bump @typescript-eslint/eslint-plugin from 8.54.0 to 8.56.0 (#525) (0ea1106)
• [dependabot] - bump aws-cdk from 2.1105.0 to 2.1106.1 (#520) (683666f)
• [dependabot] - bump constructs from 10.4.5 to 10.5.1 (#526) (9df6249)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.4.0 to 5.4.1 (#508) (740cd7e)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.4.0 to 5.4.1 (#511) (01650b8)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks.yml from 5.4.0 to 5.4.1 (#510) (589de7b)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release.yml from 5.3.12 to 5.4.1 (#509) (1ab0eda)

Info

Release workflow run - Workflow ID: 22219269151

It was initialized by MatthewPopat-NHS

v1.3.1

1.3.1 (2026-02-12)

Fix

• [AEA-5967] - Fixed domain name for status lookup for stack deletion (#506) (b3bec59)
• [AEA-5967] - One more trivy ignore (#507) (06e2c15)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.978.0 to 3.984.0 (#505) (869ad53)
• [dependabot] - bump @aws-sdk/client-lambda from 3.978.0 to 3.984.0 (#504) (a67426e)
• [dependabot] - bump @aws-sdk/client-route-53 from 3.978.0 to 3.984.0 (#502) (a127d19)
• [dependabot] - bump @types/node from 25.1.0 to 25.2.1 (#501) (6e54304)
• [dependabot] - bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 (#494) (749ae84)
• [dependabot] - bump aws-cdk from 2.1104.0 to 2.1105.0 (#498) (001c5ef)
• [dependabot] - bump aws-cdk-lib from 2.236.0 to 2.237.1 (#503) (8ee1fa2)
• [dependabot] - bump esbuild from 0.27.2 to 0.27.3 (#499) (a87a303)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.3.5 to 5.3.12 (#495) (d082533)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.3.5 to 5.3.12 (#497) (8ba0c3f)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks.yml from 5.3.5 to 5.3.12 (#496) (5dc4103)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release.yml from 5.3.5 to 5.3.12 (#493) (0307e0d)

Info

Release workflow run - Workflow ID: 21944628948

It was initialized by MatthewPopat-NHS

v1.3.0

1.3.0 (2026-02-03)

Chore

• [AEA-0000] - add eps nag pack (#491) (6991623)
• [AEA-0000] - fix adding cfn guard suppressions to not overwrite all of metadata (#492) (18db8c4)
• [AEA-0000] - only version non pull request stacks (#479) (b957221)

New

• [AEA-6028] - Added cleanup scripts for old stacks and proxygen instances (#490) (0e65746)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.975.0 to 3.978.0 (#489) (8862f35)
• [dependabot] - bump @aws-sdk/client-lambda from 3.975.0 to 3.978.0 (#487) (1d58d2b)
• [dependabot] - bump @aws-sdk/client-s3 from 3.975.0 to 3.978.0 (#486) (a0d7431)
• [dependabot] - bump @types/node from 25.0.10 to 25.1.0 (#488) (b2eb2f6)
• [dependabot] - bump actions/cache from 5.0.2 to 5.0.3 (#482) (58b8b2b)
• [dependabot] - bump aws-cdk from 2.1102.0 to 2.1104.0 (#484) (811dfb7)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.3.4 to 5.3.5 (#480) (449f9fe)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.3.4 to 5.3.5 (#483) (6376b35)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release.yml from 5.3.3 to 5.3.5 (#481) (bfb7e79)
• [dependabot] - bump pip-licenses from 5.5.0 to 5.5.1 (#485) (c6b5b7e)

Info

See code diff
Release workflow run - Workflow ID: 21639633156

It was initialized by MatthewPopat-NHS

v1.2.0

1.2.0 (2026-01-30)

New

• [AEA-0000] - extend cdk-construct library (#478) (4c3e2f6)

Info

See code diff
Release workflow run - Workflow ID: 21523381459

It was initialized by anthony-nhs

v1.1.5

1.1.5 (2026-01-28)

Chore

• [AEA-0000] - add default project tags (#477) (83a10bf)

Upgrade

• [dependabot] - bump @aws-sdk/client-cloudformation from 3.970.0 to 3.974.0 (#467) (7db1d61)
• [dependabot] - bump @aws-sdk/client-lambda from 3.970.0 to 3.974.0 (#468) (09972d5)
• [dependabot] - bump @aws-sdk/client-s3 from 3.970.0 to 3.974.0 (#462) (7a935ad)
• [dependabot] - bump @types/node from 25.0.9 to 25.0.10 (#469) (28b986f)
• [dependabot] - bump @typescript-eslint/eslint-plugin from 8.53.0 to 8.53.1 (#466) (7e4135a)
• [dependabot] - bump @typescript-eslint/parser from 8.53.0 to 8.53.1 (#470) (98ec7ee)
• [dependabot] - bump @vitest/coverage-v8 from 4.0.17 to 4.0.18 (#475) (ef99e63)
• [dependabot] - bump actions/checkout from 6.0.1 to 6.0.2 (#464) (9508c87)
• [dependabot] - bump aws-cdk from 2.1101.0 to 2.1102.0 (#472) (1fb1d4a)
• [dependabot] - bump aws-cdk-lib from 2.235.0 to 2.236.0 (#474) (8e49dbd)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.3.1 to 5.3.3 (#471) (5374231)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/pr_title_check.yml from 5.3.1 to 5.3.3 (#473) (c480650)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/quality-checks.yml from 5.3.1 to 5.3.3 (#465) (c9c1432)
• [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/tag-release.yml from 5.3.1 to 5.3.3 (#476) (e27ba3e)

Info

See code diff
Release workflow run - Workflow ID: 21437600720

It was initialized by anthony-nhs