fix(deps): update dependency serverless to v4#134
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
November 5, 2025 18:33
195a1db to
e8eb5b8
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
3 times, most recently
from
November 21, 2025 17:10
1782add to
fb01bfe
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
3 times, most recently
from
December 8, 2025 20:06
9649ed6 to
091b03a
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
December 17, 2025 22:02
8bf71f0 to
7762e40
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
January 2, 2026 21:52
7979a04 to
9117a10
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
January 15, 2026 18:13
6b182d8 to
f0aab99
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
January 27, 2026 21:52
1336d31 to
cce62cc
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
February 12, 2026 23:28
868f495 to
b1f0a1e
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
February 19, 2026 22:14
b1f0a1e to
f8c4480
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
March 5, 2026 19:14
f8c4480 to
9c3efc2
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
4 times, most recently
from
April 2, 2026 18:14
f96888e to
cfecc76
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
April 10, 2026 17:07
cfecc76 to
fbb47ad
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
April 30, 2026 20:05
4032ec4 to
81e4ef9
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
May 12, 2026 16:46
48c6ea7 to
843d6b3
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
May 14, 2026 17:41
843d6b3 to
d9cd15f
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
May 27, 2026 22:58
d9cd15f to
a6d3e31
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
2 times, most recently
from
June 19, 2026 21:12
eb73924 to
896da66
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
July 8, 2026 21:01
896da66 to
a050fd2
Compare
renovate
Bot
force-pushed
the
renovate/serverless-4.x
branch
from
July 22, 2026 18:11
a050fd2 to
52e3431
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^3.35.2→^4.0.0Release Notes
serverless/serverless (serverless)
v4.40.0Compare Source
v4.39.0Compare Source
v4.38.1Compare Source
v4.38.0Compare Source
v4.37.0Compare Source
v4.36.1Compare Source
v4.36.0Compare Source
v4.35.1Compare Source
v4.35.0Compare Source
v4.34.0Compare Source
v4.33.3Compare Source
v4.33.2Compare Source
v4.33.1Compare Source
v4.33.0Compare Source
v4.32.0Compare Source
v4.31.2Compare Source
v4.31.1Compare Source
v4.31.0Compare Source
v4.30.0Compare Source
v4.29.4Compare Source
v4.29.3Compare Source
v4.29.0: 4.29.0Compare Source
Features
sls login awscommand. Learn more in the docs.Bux Fixes
Maintenance
v4.28.0: 4.28.0Compare Source
Features
Maintenance
v4.27.1: 4.27.1Compare Source
Bux Fixes
sls invokev4.27.0: 4.27.0Compare Source
Features
ap-southeast-6AWS region (#13174)ipv6AllowedForDualStack). Learn more in the docs (#12253)Bux Fixes
nodejs24.xruntime in dev mode (#13172)v4.26.1: 4.26.1Compare Source
Bug Fixes
v4.26.0: 4.26.0Compare Source
Features
serverless.yml(see AWS announcement and read more in our docs).perFunctionIAM role mode where the shared service-wide execution role is not created and each function gets its own role. Read more in our docs. (#13141)Fn::ForEachintrinsic function, enabling more expressive and reusable templates (#12402).Bug Fixes
invoke localcommand by normalizing values consistently before passing them to the runtime (#13166).glob-alldependency and refreshed related dependencies across core packages to improve security.v4.25.0: 4.25.0Compare Source
Features
nodejs24.xAWS Lambda runtimepython3.14AWS Lambda runtimeresponse.transferMode: streamon yourhttpevent to stream responses back to clients. See the docs for a quick how-to.v4.24.0: 4.24.0Compare Source
Features
java25AWS Lambda runtime (#13159)custom. apiGatewayServiceProxiesis present, so keep or add that block. It is fully backward-compatible. Learn more in the docs.Bux Fixes
v4.23.0: 4.23.0Compare Source
Features
Bux Fixes
Maintenance
v4.22.0: 4.22.0Compare Source
Features
pluginslist in your configuration file and from yourpackage.json. The integration activates automatically whenevercustom.pythonRequirementsis present, so keep or add that block. It is fully backward-compatible and comes with uv support! Learn more in the docs.Bug Fixes
printcommand returns a config without$refreferences when no cycles existMaintenance
v4.21.1: 4.21.1Compare Source
Bug Fixes
--configflag in version pinning (frameworkVersionproperty)invoke localwhen using Docker and lambda/provided AWS Lambda images; added log capture and proper exit codes for function errors (#12921)path.basenameto improve Windows support (#13120)v4.21.0: 4.21.0Compare Source
Features
v4.20.2: 4.20.2Compare Source
Bug Fixes
v4.20.1: 4.20.1Compare Source
Bug Fixes
v4.20.0: 4.20.0Compare Source
Features
Bug Fixes
invoke localcommand (#12921)NO_PROXYenvironment variable in AWS SDKMaintenance
v4.19.1: 4.19.1Compare Source
Bug Fixes
v4.19.0: 4.19.0Compare Source
Features
SLS_AWS_SDK=3. See the docs for more info.Bug Fixes
EventSourceMappings, fixes #13112Maintenance
url.parsewith WHATWGURL, fixes Node.js DEP0169axios, fixes GHSA-4hjh-wcwx-xvwjv4.18.2: 4.18.2Compare Source
Bug Fixes
v4.18.1: 4.18.1Compare Source
Bug Fixes
v4.18.0: 4.18.0Compare Source
Features
v4.17.2: 4.17.2Compare Source
Bug Fixes
v4.17.1: 4.17.1Compare Source
Features
ENABLE_LEGACY_DEPLOYMENT_BUCKETenv var.Bug Fixes
v4.17.0: 4.17.0Compare Source
Features
NO_PROXY(#6048)v4.16.1: 4.16.1Compare Source
Features
v4.16.0Compare Source
v4.15.1: 4.15.1Compare Source
Bug Fixes
v4.15.0: 4.15.0Compare Source
Features
Bug Fixes
Serverless Framework
Serverless Container Framework
v4.14.4: 4.14.4Compare Source
Bug Fixes
packagecommand if a deployment bucket name is explicitly set viaprovider.deploymentBucket-sshortcut in certain casesserviceis provided as an object with anamepropertyv4.14.3: 4.14.3Compare Source
Security Fixes
net/httpin the Golang stdlib: We’ve reviewed the recent CVE, which generally affects the Go standard library in web servers and web-related functionalities. Since the Serverless Framework is a CLI tool does not rely on running a web server or handling web requests, users are not affected by this vulnerability. The CLI uses a small amount of Go to handle updating to the version set inframeworkCoreinserverless.yml. Our update process uses HTTPS with SSL/TLS to securely check for and install new versions, ensuring no risk of exploitation or malicious code injection. All dependencies have been audited, and no vulnerabilities were found. However, upgrading is always a best practice and, we recommend users upgrade to the latest version to ensure they’re on the most secure release. This can be done via theserverless upgradecommand, which will update the installer.v4.14.2: 4.14.2Compare Source
Bug Fixes
v4.14.1: 4.14.1Compare Source
Bug Fixes
v4.14.0: 4.14.0Compare Source
Features
v4.13.0: 4.13.0Compare Source
Features
Intelligent Error Analysis
errors-infotool for advanced error pattern detection across AWS services.patterncommand.Confirmation Handling for Queries
Enhanced Logs Search
logs-searchtool with more flexible search behavior.Integrated Documentation Tool
General Tooling Improvements
Improved AWS Credential Error Handling
Context Overflow Protection
Optimized Lambda Logs Queries
errors-infotool for broader analyses.Service-wide Analysis Support
service-summarytool now supportsserviceWideAnalysis, enabling complete resource scanning without requiring specific IDs.v4.12.0: 4.12.0Compare Source
Features
stdioand HTTP/SSE transports, and includes comprehensive tools for Lambda, API Gateway, DynamoDB, S3, SQS, and CloudWatch.mcp_config.jsonormcp.json)v4.11.1: 4.11.1Compare Source
Bug Fixes
=Truncated in Serverless v4 Parameter Values (#13050)v4.11.0: 4.11.0Compare Source
Features
v4.10.1: 4.10.1Compare Source
Bug Fixes
removecommand (#13041)Maintenance
v4.10.0: 4.10.0Compare Source
Features
v4.9.1: 4.9.1Compare Source
Features
ap-southeast-7andmx-central-1AWS regionsBug Fixes
v4.9.0: 4.9.0Compare Source
Features
Maintenance
axiosand@babel/helpersto address GHSA-jr5f-v2jv-69x6 and GHSA-968p-4wvh-cqc8v4.8.0: 4.8.0Compare Source
Features
reconcilecommand (docs)v4.7.0: 4.7.0Compare Source
Features
Fn::Subliteral values (AWS docs)domainof a container, so that it points toward the ALB.Maintenance
esbuildto v0.25.0 andtsxto v4.19.3 to address GHSA-67mh-4wv8-2f99Bug Fixes
AWS_PROFILEwhen using Dev Mode to properly use Lambda Function AWS credentialscpuandmemoryconfiguration for AWS ECS Fargate containers.v4.6.4Compare Source
v4.6.3: 4.6.3Compare Source
Features
Maintenance
formdiableandtardependencies (#12422, #12442)Bug Fixes
PROPandiotprovider name to prevent misinterpreting CloudWatch dynamic labels and IoT Core policy variables (#13015)printcommand to output tostdoutnotstderr(#13006)v4.6.2: 4.6.2Compare Source
Features
Maintenance
Bug Fixes
SIGINTandSIGTERMsignalsv4.6.1: 4.6.1Compare Source
Bug Fixes
SIGINTandSIGTERMsignalsv4.6.0Compare Source
Features
v4.5.4: 4.5.4Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Maintenance
v4.5.3: 4.5.3Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Bug Fixes
node_moduleswhen using lockfiles withyarn(#13012)v4.5.2: 4.5.2Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Bug Fixes
TypeError: Cannot read properties of undefined (reading 'promiseResolved')(#13010)node_moduleswhen using lockfiles withpnpm(#13002)v4.5.1: 4.5.1Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Bug Fixes
printcommand is only displayed when using the--debugflag (#13006)frameworkVersionproperty (version pinning) inserverless-composeconfiguration filesv4.5.0: 4.5.0Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Maintanance
Bug Fixes
v4.4.21Compare Source
v4.4.20Compare Source
v4.4.19: 4.4.19Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Features
ap-southeast-5andca-west-1AWS regions (#12981)Bug Fixes
v4.4.18Compare Source
v4.4.17: 4.4.17Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Features
provenanceoption in docker build (#12808)Maintenance
nanoidversion to address GHSA-mwcw-c2x4-8c55Bug Fixes
v4.4.16: 4.4.16Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Bug Fixes
selfresolver by correcting the variable execution order to prevent errors.packageanddeploy --packagecommands (#12943)v4.4.15: 4.4.15Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Maintanance
Bug Fixes
The value at this path is object, but it should be a stringwhen using YAML anchors in files loaded by the file resolver (#12934)provider.regionkey (#12932)excludeproperty (#12942)v4.4.14: 4.4.14Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Bug Fixes
v4.4.13: 4.4.13Compare Source
This is another Serverless Framework V.4 GA release. If you have Serverless Framework V.4 installed already, it will auto-update within 24 hours, or you can run
serverless updateto get the latest version immediately. If you are upgrading to V.4 from V.3 or less, see our Upgrading to Serverless Framework V.4 Documentation.Features
nodejs22.xruntime in dev modeBug Fixes
v4.4.12: 4.4.12[Compare Source](https://redirect.github.com/serverless/serverless
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.