chore(deps-dev): bump @guardian/cdk from 62.4.0 to 64.1.0

[dependabot]

Bumps @guardian/cdk from 62.4.0 to 64.1.0.

Release notes

Sourced from @​guardian/cdk's releases.

v64.1.0

Minor Changes

• c038df4: Adds deterministic routing rules for EC2 to ECS migrations.

  Allow callers to force a request to a specific target group using an HTTP header rather than relying on the default weighted routing.

  Example usage:

  curl -i -H 'X-Gu-Target-Group: ecs' https://cdk-playground.code.dev-gutools.co.uk
  

v64.0.0

Major Changes

• d880b52: Implement GuParameterStoreReadPolicy as a singleton to support GuLoadBalancedAppExperimental instantiating it once for the EC2 app and once for the ECS app. The result is a single AWS::IAM::Policy resource in the CloudFormation template, which is attached to both the EC2 and ECS roles, keeping the diff small.

  A GitHub search shows GuParameterStoreReadPolicy is never directly instantiated by clients.

• 348cc70: Removes the roleConfiguration property when instantiating a GuEc2App or GuLoadBalancedAppExperimental in favour of declaring additionalPolicies as a top level property. As a consequence, it is no longer possible to opt-out of log shipping with withoutLogShipping; the IAM Policy will always grant PutRecord to the account's logging Kinesis stream.

  To migrate, remove the roleConfiguration property and move any policies declared in roleConfiguration.additionalPolicies to the top level additionalPolicies property:

  // Before
  new GuEc2App(this, {
    // other props
    roleConfiguration: {
      additionalPolicies: [
        new GuAllowPolicy(this, "AllowPolicyCloudwatchLogs", {
          actions: ["cloudwatch:*", "logs:*"],
          resources: ["*"],
        }),
        new GuAllowPolicy(this, "AllowPolicyDescribeDecryptKms", {
          actions: ["kms:Decrypt", "kms:DescribeKey"],
          resources: [`arn:aws:kms:${region}:${account}:FrontendConfigKey`],
        }),
      ],
    },
  });
  // After
  new GuEc2App(this, {
  // other props
  additionalPolicies: [
  new GuAllowPolicy(this, "AllowPolicyCloudwatchLogs", {

... (truncated)

Changelog

Sourced from @​guardian/cdk's changelog.

64.1.0

Minor Changes

• c038df4: Adds deterministic routing rules for EC2 to ECS migrations.

  Allow callers to force a request to a specific target group using an HTTP header rather than relying on the default weighted routing.

  Example usage:

  curl -i -H 'X-Gu-Target-Group: ecs' https://cdk-playground.code.dev-gutools.co.uk
  

64.0.0

Major Changes

• d880b52: Implement GuParameterStoreReadPolicy as a singleton to support GuLoadBalancedAppExperimental instantiating it once for the EC2 app and once for the ECS app. The result is a single AWS::IAM::Policy resource in the CloudFormation template, which is attached to both the EC2 and ECS roles, keeping the diff small.

  A GitHub search shows GuParameterStoreReadPolicy is never directly instantiated by clients.

• 348cc70: Removes the roleConfiguration property when instantiating a GuEc2App or GuLoadBalancedAppExperimental in favour of declaring additionalPolicies as a top level property. As a consequence, it is no longer possible to opt-out of log shipping with withoutLogShipping; the IAM Policy will always grant PutRecord to the account's logging Kinesis stream.

  To migrate, remove the roleConfiguration property and move any policies declared in roleConfiguration.additionalPolicies to the top level additionalPolicies property:

  // Before
  new GuEc2App(this, {
    // other props
    roleConfiguration: {
      additionalPolicies: [
        new GuAllowPolicy(this, "AllowPolicyCloudwatchLogs", {
          actions: ["cloudwatch:*", "logs:*"],
          resources: ["*"],
        }),
        new GuAllowPolicy(this, "AllowPolicyDescribeDecryptKms", {
          actions: ["kms:Decrypt", "kms:DescribeKey"],
          resources: [`arn:aws:kms:${region}:${account}:FrontendConfigKey`],
        }),
      ],
    },
  });
  // After
  new GuEc2App(this, {
  // other props

... (truncated)

Commits

• f66ea01 Merge pull request #2936 from guardian/changeset-release/main
• d6567a7 Bump package version
• ad63bc5 Merge pull request #2933 from guardian/jb/route-deterministically-to-ecs-or-ec2
• c038df4 Add changeset
• aa74b5d Simplify and be opinionated about headers and values ec2/ecs
• 56835df Deterministic routing enabled by default in weighted routing scenario
• b7b1e55 Add ability to deterministically route requests to EC2 or ECS
• 3f6ac8b chore(deps): bump @​types/node from 22.15.30 to 26.1.0 (#2926)
• be22559 Merge pull request #2930 from guardian/changeset-release/main
• 978f09f Bump package version
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[github-actions]

Deploy build 626 of playground::example-typescript-lambda to CODE

All deployment options

• Deploy build 626 of playground::example-typescript-lambda to CODE
• Deploy parts of build 626 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.

[akash1810]

@dependabot rebase