chore: transform private references to be local (aws#3320)

In order for dependabot to be able to identify package updates, it needs
to be able to resolve all packages in the dependency closure. Private
packages are not published to the npmjs.com registry and fail resolving.

This changes the private packages to use local path references within
the mono-repo, so that dependabot can work normally. This can also
enable standard use of `npm audit`.

Author: RomainMuller

.dependabot/config.yml

@@ -9,6 +9,6 @@ update_configs:
     ignored_updates:
       - match:
           # Don't suggest upgrading @types/node to versions >= 9
-          dependency_name: @types/node
-          version_requirements: '>= 9'
+          dependency_name: '@types/node'
+          version_requirement: '>= 9'
     version_requirement_updates: increase_versions

install.sh

@@ -19,3 +19,7 @@ echo "==========================================================================
 echo "cleanup and start bootstrapping..."
 lerna clean --yes
 lerna bootstrap --reject-cycles --ci
+
+echo "============================================================================================="
+echo "installing local links..."
+node scripts/install-local-deps.js

lerna.json

@@ -1,5 +1,5 @@
 {
-  "lerna": "2.5.1",
+  "lerna": "3.15.0",
   "packages": [
     "packages/*",
     "packages/@aws-cdk/*",

package-lock.json

@@ -9,17 +9,18 @@
   },
   "devDependencies": {
     "@types/jest": "^24.0.15",
-    "@types/node": "^8.10.49",
+    "@types/node": "^8.10.50",
     "@types/nodeunit": "^0.0.30",
     "conventional-changelog-cli": "^2.0.21",
+    "fs-extra": "^8.1.0",
     "jest": "^24.8.0",
     "jsii-diff": "^0.14.0",
     "lerna": "^3.15.0",
     "nodeunit": "^0.11.3",
     "nyc": "^14.1.1",
     "ts-jest": "^24.0.2",
-    "tslint": "^5.17.0",
-    "typescript": "^3.5.2"
+    "tslint": "^5.18.0",
+    "typescript": "^3.5.3"
   },
   "repository": {
     "type": "git",

package.json

@@ -67,9 +67,9 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@aws-cdk/assert": "^1.0.0",
-    "cdk-build-tools": "^1.0.0",
-    "cfn2ts": "^1.0.0",
-    "pkglint": "^1.0.0"
+    "cdk-build-tools": "file:../../../tools/cdk-build-tools",
+    "cfn2ts": "file:../../../tools/cfn2ts",
+    "pkglint": "file:../../../tools/pkglint"
   },
   "dependencies": {
     "@aws-cdk/core": "^1.0.0"

packages/@aws-cdk/alexa-ask/package-lock.json

@@ -52,10 +52,10 @@
   "devDependencies": {
     "@aws-cdk/assert": "^1.0.0",
     "@aws-cdk/aws-s3": "^1.0.0",
-    "cdk-build-tools": "^1.0.0",
-    "cdk-integ-tools": "^1.0.0",
+    "cdk-build-tools": "file:../../../tools/cdk-build-tools",
+    "cdk-integ-tools": "file:../../../tools/cdk-integ-tools",
     "fast-check": "^1.15.1",
-    "pkglint": "^1.0.0"
+    "pkglint": "file:../../../tools/pkglint"
   },
   "repository": {
     "type": "git",