Skip to content

Chore/migrate cdktf to cdktn#1603

Draft
MarcAstr0 wants to merge 3 commits into
boostercloud:mainfrom
Optum:chore/migrate-cdktf-to-cdktn
Draft

Chore/migrate cdktf to cdktn#1603
MarcAstr0 wants to merge 3 commits into
boostercloud:mainfrom
Optum:chore/migrate-cdktf-to-cdktn

Conversation

@MarcAstr0
Copy link
Copy Markdown
Collaborator

@MarcAstr0 MarcAstr0 commented May 5, 2026

Description

Changes

Checks

  • Project Builds
  • Project passes tests and checks
  • Updated documentation accordingly

Castro, Mario and others added 3 commits May 5, 2026 15:15
@claude @MarcAstr0
Migrate from cdktf to cdktn (CDK Terrain)
eca01b6 
cdktf was sunsetted by HashiCorp in Dec 2025 and is no longer maintained.
CDK Terrain (cdktn) is a community fork from cdktf 0.21.0 with active
maintenance. This migration replaces all cdktf dependencies and imports
with their cdktn equivalents, eliminating the archived dependency chain.

- Replace cdktf 0.21.0 with cdktn 0.22.1
- Replace cdktf-cli 0.21.0 with cdktn-cli 0.22.1
- Replace @cdktf/provider-azurerm 14.23.1 with @cdktn/provider-azurerm 15.11.0
- Replace @cdktf/provider-null 11.0.1 with @cdktn/provider-null 12.0.0
- Replace @cdktf/provider-time 11.0.1 with @cdktn/provider-time 12.0.0
- Update all source imports across 27 files
- Update CLI invocation from cdktf-cli to cdktn-cli

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@claude @MarcAstr0
Bump Effect ecosystem to fix 5 HIGH vulnerabilities in Azure path
117e905 
Upgrades Effect packages to resolve production-facing security issues:
- effect 3.13.2 → 3.20.0 (fixes AsyncLocalStorage context contamination)
- @effect/platform 0.77.2 → 0.79.4
- @effect/platform-node 0.73.2 → 0.75.0 (last version before rpc/sql/cluster peer deps)
- @effect/cli 0.56.2 → 0.58.0
- @effect/printer 0.41.2 → 0.41.9
- @effect/printer-ansi 0.41.2 → 0.41.9
- @effect/typeclass 0.32.2 → 0.32.9

Adds pnpm security override for undici >= 7.24.0 to patch 3 WebSocket
vulnerabilities (overflow, unbounded memory, unhandled exception).

Resolves: GHSA-38f7 (effect), GHSA-f269/GHSA-vrm6/GHSA-v9p9 (undici),
GHSA-c2c7 (picomatch). Total audit: 90 → 25 vulns, 0 Azure-path HIGHs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Add rush change file
89055ff
@MarcAstr0 MarcAstr0 added the do not merge This PR can be approved, but not merged yet label May 5, 2026
@what-the-diff
Copy link
Copy Markdown

what-the-diff Bot commented May 5, 2026

PR Summary

  • Integration of the New Package cdktn in place of cdktf
    This PR includes the replacement of the cdktf package with the new cdktn package in the @boostercloud/framework-core system. This not only includes the addition of a new JSON file documenting this migration, but also modifications to multiple import statements within the codebase, particularly within the framework-provider-azure-infrastructure package. This change increases the adaptability and efficiency of the system.

  • Updated Dependency Versions
    Numerous dependency versions within the framework-core and framework-integration-tests have been updated. These include new versions of effect, @effect/platform, @effect/cli, @effect/printer, @effect/typeclass, and @effect/platform-node. Such updates ensure higher performance, improved stability and additional features in the application.

  • New Security Override for the undici Package
    The .pnpmfile.cjs configuration received a security upgrade with the introduction of a new security override for the undici package. This upgrade enhances the security of the application, protecting it from potential vulnerabilities.

  • Updated Logging Messages Reflecting Recent Changes
    With the transition to cdktn, logging messages have been adjusted to correctly represent the new deployment process, thereby enhancing the overall transparency and user-friendliness of the system.

  • Updated @effect Libraries Versions
    Several @effect libraries have been updated, including effect, @effect/cli, @effect/platform, @effect/printer, @effect/printer-ansi, and @effect/typeclass. These updates ensure the system remains up-to-date with the latest improvements in these libraries, thereby promoting better functionality and user experience.

@MarcAstr0
Copy link
Copy Markdown
Collaborator Author

MarcAstr0 commented May 5, 2026

/integration sha=89055ff

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 5, 2026

⌛ Integration tests are running...

Check their status here 👈

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 5, 2026

✅ Integration tests have finished successfully!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

do not merge This PR can be approved, but not merged yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MarcAstr0