aws-lambda: Error when bundling due to spawnSync

[oceanofmaya]

Describe the bug

After installing version 2.245.0 I receive the following error when I execute CDK snapshots or running cdk synth/watch on my Windows machine. It works fine in versions before that.

Failed to bundle asset ..., bundle output is located at ...\cdk.out.temp\bundling-temp-e98a665278e5ab86e3563dd5685700fd07e9d2f33c1363861fee27f22f55690e-building: Error: spawnSync npx.cmd EINVAL

It might be related to the below change in version 2.245.0:

• lambda-nodejs: use direct spawn for local bundling (fix(lambda-nodejs): use direct spawn for local bundling #37292) (9bf4263)

Regression Issue

• Select this option if this issue appears to be a regression.

Last Known Working CDK Library Version

2.244.0

Expected Behavior

Bundling of assets work as expected without any issues

Current Behavior

When bundling is attempted, it fails with the error "Error: spawnSync npx.cmd EINVAL"

Reproduction Steps

Using aws-cdk-lib version 2.245.0, run a unit test to generate a snapshot or run cdk synth

Possible Solution

Reevaluate the change done in 2.245.0 related to the spawning

lambda-nodejs: use direct spawn for local bundling (#37292) (9bf4263)

Additional Information/Context

No response

AWS CDK Library version (aws-cdk-lib)

2.245.0

AWS CDK CLI version

2.1114.1

Node.js Version

22

OS

Windows

Language

TypeScript

Language Version

5.9.3

Other information

No response

[vraxis]

This impacts pretty much every version of node with no work around from node 22 onward. https://nodejs.org/en/blog/vulnerability/april-2024-security-releases-2 mentions an additional argument that could be added to prevent this error. Please fix as this is breaking anyone on the latest version of cdk.

[Abogical]

Hello, thanks for raising this issue. I've successfully reproduced the issue and will create a fix for this as soon as possible.

[github-actions]

Comments on closed issues and PRs are hard for our team to see.
If you need help, please open a new issue that references this one.