[Snyk] Security upgrade serverless from 1.35.1 to 4.0.0

[joeawillis]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

---

This is a significant upgrade across three major versions (v1 → v4), introducing substantial breaking changes in configuration, provider support, and licensing. A direct upgrade is not recommended without careful planning.

Highlights:

• Authentication & Licensing (v4): All CLI usage now requires authentication via a SERVERLESS_ACCESS_KEY or SERVERLESS_LICENSE_KEY. Additionally, organizations with over $2M in annual revenue must purchase a paid subscription.
• Provider Support (v4): Support for all cloud providers except AWS has been deprecated. Projects using Azure, GCP, or others will no longer work.
• Node.js Requirement (v2): The minimum required Node.js version to run the framework was raised to v10 in v2.0.

Source: Serverless Framework Documentation
Recommendation: Due to the multiple major versions, perform a staged upgrade (v1→v2, v2→v3, v3→v4), addressing deprecations at each step. For v4, ensure authentication keys are configured in CI/CD and local environments. Validate plugin compatibility, especially bundlers like serverless-esbuild, which may conflict with native TypeScript support in v4.

Notice 🤖: This content was generated using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

---

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-JSYAML-13961110	631

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution