Bump sst from 2.48.5 to 3.17.0 in the dev-major-updates group

[dependabot]

Bumps the dev-major-updates group with 1 update: sst.

Updates sst from 2.48.5 to 3.17.0

Release notes

Sourced from sst's releases.

v3.17.0

Breaking Changes in sst.aws.Service and sst.aws.Task

Previously, when linking components to a Service or Task, SST passed the linking data into the container as Docker build arguments. This can be insecure when the linking data include sensitive values, ie. passwords for Postgres or Redis components, since build arguments can be exposed in build logs.

Starting from v3.17.0, SST now passes linking data using Docker secrets, which are not exposed in logs, providing a more secure mechanism for handling sensitive values.

How to Migrate

This only affects you if your Dockerfile needs access to linked resources during build time.

To migrate your Dockerfile to use Docker secrets:

1. Remove all ARG SST_RESOURCE_<resource_name> declarations from your Dockerfile.
2. Update your build command to mount secrets, like so:

   - RUN npm run build
   + RUN --mount=type=secret,id=SST_RESOURCE_<resource_name>,env=SST_RESOURCE_<resource_name>` npm run build

3. Deploy the changes.

Changelog

• 4ef5529369830beefc1302a24bd70060505e05ff Cluster: use docker secrets to pass link values
• 08e4522dc273427a3c52920dcd58fed1b0fe5791 Example: sync playground
• 394092949ed7cbb6de33f06a36b48e1ccee4a850 Router: update docs to clarify route path takes prefix
• 69b6c0ccf2faa28adfc50d230523eb923f94d552 Router: update docs to clarify route path takes prefix

v3.16.7

Changelog

• 2158cdd6df3e17280bd52dfcd2c9c212767eec08 Examples: sync playground
• 0f174aeed1c2849ba5176d1caa3216bafbfbeffe StepFunctions: fix ecsRunTask payload format

v3.16.6

Changelog

• 211f6faab5afc625d328832e4687207b13cdc89c Realtime: grant iot permissions when linked

v3.16.5

Changelog

• 210c68a1bb2f602b5e3d4fd17a691b5844475f27 Function: fix addEnvironment not redeployed after refresh

v3.16.4

Changelog

• d41e5969842883a1f6cd8cc80847ab309668021e Fargate: support environment files

v3.16.3

Changelog

• a6df8e0fae12c885b3a30ca59fbdbab9afe498de StepFunctions: fix catch not referencing the head state

v3.16.2

Changelog

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Lokowitz]

Be careful with this update, you need to at least rewrite the config file. See docs

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.