[Snyk] Security upgrade cdktf-cli from 0.20.3 to 0.21.0

[snyk-io]

Snyk has created this PR to fix 8 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package.json
• test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XMLDOMXMLDOM-19498551
	Regular Expression Denial of Service (ReDoS) SNYK-JS-XMLDOMXMLDOM-19498558
	Allocation of Resources Without Limits or Throttling SNYK-JS-XMLDOMXMLDOM-19499069
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499070
	Inefficient Algorithmic Complexity SNYK-JS-XMLDOMXMLDOM-19499072
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499075
	Allocation of Resources Without Limits or Throttling SNYK-JS-XMLDOMXMLDOM-19499076
	XML Injection SNYK-JS-XMLDOMXMLDOM-19499081

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Allocation of Resources Without Limits or Throttling
🦉 XML Injection

[snyk-io]

This upgrade to cdktf-cli v0.21.0 introduces breaking changes related to the required runtime environment and removes long-deprecated features.

Breaking Changes:

• Minimum Node.js Version: The minimum required Node.js version has been increased to 20.9. Projects using older versions of Node.js will need to upgrade their environment.
• Removal of Deprecated Backends: Support for the artifactory, etcd, etcdv3, manta, and swift backends has been removed. These backends were deprecated in cdktf v0.14 and removed in Terraform v1.3.

Recommendation:
Verify that your CI/CD and local development environments are using Node.js v20.9 or newer before upgrading. If you are using any of the removed backends, you must migrate to a supported backend configuration.

Source: cdktf-cli changelog.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

⛔ Snyk checks have failed. 2 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (2)
⛔	Open Source Security	0	1	1	0	2 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[github-actions]

	Warnings
⚠️	"fix: test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package.json & test/acceptance/workspaces/npm-package-with-dist-tag-subdependency/package-lock.json to reduce vulnerabilities" is too long. Keep the first line of your commit message under 72 characters.

Generated by 🚫 dangerJS against 4c83e68