chore(deps-dev): update serverless requirement from ^4.40.0 to ^4.41.0 in /examples/deploy-aws-lambda

[dependabot]

Updates the requirements on serverless to permit the latest version.

Release notes

Sourced from serverless's releases.

4.41.0

Features

• Host MCP servers on AWS Lambda. A new mcp section in serverless.yml deploys official MCP TypeScript SDK servers behind API Gateway with response streaming. You write one SDK module; the Framework owns the endpoint, streaming, packaging, and the OAuth protected-resource discovery document. Servers can be protected with your own API Gateway authorizers or with the MCP SDK's built-in in-server token verification, and each server behaves as an ordinary function — logs, invoke, metrics, rollback, and deploy function work unchanged. MCP servers share one REST API, stage, and custom domain with each other and with http functions. Optional sealed request state lets tools round-trip data across elicitation retries without server-side storage. (#13778, #13784) Read more in the MCP servers guide and explore the MCP examples. A bundled serverless-mcp Agent Skill teaches AI coding agents (Claude Code, Codex, Cursor) how to build and operate MCP servers with the Framework — install it into your service with the agent skills install command:

serverless agent skills install

mcp:
  servers:
    crm:
      server: src/server.mjs
      authorizer:
        name: verifyToken
      oauthDiscovery:
        issuer: https://example.us.auth0.com
functions:
verifyToken:
handler: src/authorizer.handler

Bug Fixes

• Per-function artifacts are now included in change detection. Deployments that only changed a prebuilt per-function package.artifact were silently skipped, so new code never shipped; the artifact content now participates in the change hash. (#13771)
• Compose package and print no longer wipe deployed service state. Running a read-only command in a Compose project cleared the recorded outputs of already-deployed services, breaking later cross-service references and removals. Thanks @​tmatilai for the detailed report. (#13437, #13792)
• Files named like code modules no longer hijack project detection. A template.mjs in the project root made the CLI treat the directory as a SAM/CloudFormation project and hide normal commands; detection is now restricted to SAM-supported template extensions. Thanks @​tomchiverton for the report. (#13738, #13739)
• esbuild outExtension is honored end-to-end. Custom output extensions (e.g. .js → .mjs) now flow through bundling, packaging, deployment, and invoke local, with clear validation for unsupported mappings. (#13740)
• esbuild config-file sourcemap setting controls source-map support. With sourcemap: false in an esbuild config file, the Framework no longer force-enables --enable-source-maps in the function's NODE_OPTIONS. Thanks @​maximepichou for the report. (#12997, #13741)
• Compose services with packages: external resolve root dependencies. Dependencies hoisted to the Compose project root are now traced and packaged when a service's esbuild config marks packages external. Thanks @​joe-price-jt for the report. (#12957, #13742)
• Function URL invokeMode accepts any casing. Values like response_stream or Buffered are now normalized instead of failing validation. (#13756)
• Sandbox dev images build for the Docker daemon's architecture. Dev images previously targeted the host architecture, producing emulated (slow or failing) containers when the daemon reported a different one. (#13787)
• No spinner animations on zero-width terminals. CI providers that report a zero-column terminal (e.g. CircleCI) were flooded with spinner frames; animations now stay disabled there. Thanks @​Kinnersley-Studio for the report. (#13786, #13788)

Maintenance

• Bumped the AWS SDK group with 150 updates across four bumps (#13732, #13752, #13767, #13780)
• Upgraded glob to v13 (#13766)
• Upgraded @​hono/node-server to v2 (#13763)
• Upgraded hono to v4.13 (#13774, #13759)
• Upgraded @​modelcontextprotocol/sdk (#13759)
• Upgraded fs-extra to v11.4 (#13769)
• Upgraded find-my-way (#13745)
• Upgraded ip-address to v10.4 (#13772)
• Upgraded fast-uri (#13775)
• Upgraded p-map (#13754)
• Upgraded js-yaml to v4.3.1 (#13789)

... (truncated)

Commits

• d20837c chore: release 4.41.0 (#13793)
• 7c8c59f fix(compose): stop package and print from wiping deployed service state (#13792)
• d9d6868 ci(binary-installer): sign windows binary with Azure Artifact Signing (#13791)
• 8ae60cd chore(deps): bump js-yaml from 3.15.0 to 3.15.1 (#13790)
• 5931987 chore(deps): bump js-yaml from 4.3.0 to 4.3.1 (#13789)
• 4b3753a feat(mcp): user-supplied authorizers and OAuth discovery for MCP servers (#13...
• 183f25e fix(sandboxes): build dev images for the Docker daemon's architecture (#13787)
• 469e819 fix(cli): never enable spinner animations on zero-width terminals (#13788)
• 7fbc70d chore(deps): bump the aws-sdk group across 1 directory with 37 updates (#13780)
• 4da6754 chore(deps): bump tsx in the patch-updates group across 1 directory (#13782)
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: 125552d

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.33%. Comparing base (9a45c3c) to head (125552d).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #3045   +/-   ##
=======================================
  Coverage   94.33%   94.33%           
=======================================
  Files          43       43           
  Lines        7360     7360           
  Branches      679      679           
=======================================
  Hits         6943     6943           
  Misses        409      409           
  Partials        8        8           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.