chore(deps-dev): bump serverless from 3.38.0 to 4.2.4

[dependabot]

Bumps serverless from 3.38.0 to 4.2.4.

Release notes

Sourced from serverless's releases.

4.2.4

Hidden costs in AWS Lambda deployments can quickly add up, particularly from logs, metrics, and traces. These expenses often catch teams by surprise, impacting budgets and operational efficiency.

That’s where Axiom comes in—a standout observability solution that combines a sleek user experience with competitive pricing and an impressive free tier offering 500GB/month of data ingestion.

‍We’re excited to introduce Axiom’s integration with the Serverless Framework. With a simple, one-line configuration in your serverless.yml file, you can easily enhance your monitoring capabilities without breaking the bank.

Cost Comparison Switching from AWS CloudWatch to Axiom can lead to substantial cost savings due to the significant price difference between the two services:

• Axiom: $0.15/GB of ingested data
• AWS CloudWatch: $0.50/GB of ingested data

For example, when managing 5 TB of daily log data, Axiom’s pricing results in a total daily cost of $750 and a monthly cost of $22,500. In contrast, AWS CloudWatch costs $2,650 daily and $79,500 monthly for the same amount of data. This means that by choosing Axiom, companies can save $57,000 per month, which equates to a 70% reduction in costs compared to using CloudWatch.

These savings not only free up budget for other initiatives but also come with the added benefit of Axiom’s more powerful and user-friendly platform for managing and analyzing logs, offering deeper insights and faster problem resolution.

Set Up Axiom with the Serverless Framework Create an Axiom account (Axiom offers a very generous free tier).

Create or join an organization in Axiom–but skip the step to create a Dataset in the Axiom onboarding process, as it will be done automatically and designed per best practices by the Serverless Framework. Instead, click the setting icon in the Dashboard, select API Tokens on the left, and select New API Token.

Enter a name, choose “None” for Expiration, then click the Advanced tab to select the permissions your token should have.

Assign the Ingest, Query, Dashboards, Datasets, and Monitors permissions.

Set the AXIOM_TOKEN environment variable in your CI/CD pipeline or locally. The value should be the API token you created in Axiom.

export AXIOM_TOKEN=your-axiom-access-token

In your serverless.yml file, add the observability property to the stages block, and use axiom as the provider. Here is the easiest way to configure Axiom across all Stages within your serverless application.

service: my-api
stages:
production:
observability: axiom
functions:
api_products:
handler: handler.products
events:
- http:
path: /ecommerce/products
method: get

... (truncated)

Changelog

Sourced from serverless's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

Commits

• 0b15744 chore: update v4 feature list
• efc4c17 chore: improve axiom troubleshooting docs
• 7de1dbc docs: axiom integration (#12773)
• 2930513 chore: add sam and cloudformation support to readme
• bf0430f chore: remove discussions link
• 0eed360 docs: add note on supported SAM/CF files (#12768)
• aaaa66d fix: resolvers docs links (#12767)
• 7e663b4 docs: add general Resolvers and AWS Resolver specific documentation (#12756)
• 8b8a749 docs(sam): add sam docs to menu (#12766)
• 0313fa5 docs(sam): update SAM/CFN docs add remove docs (#12765)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	network Transitive: filesystem	+7	2.48 MB	jasonsaayman
npm/[email protected]	None	0	4.35 MB	ichernev
npm/[email protected]	environment, filesystem Transitive: network, shell	+145	17.2 MB	raine
npm/[email protected]	None	0	16.1 kB	sindresorhus

🚮 Removed packages: npm/[email protected])

View full report↗︎

[dependabot]

Superseded by #294.