diff --git a/CHANGELOG.md b/CHANGELOG.md index 9eb474a..6ce2a68 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [3.2.5] - 2024-08-22 + +### Security + +- Security updates for npm packages + ## [3.2.4] - 2024-08-09 ### Security diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..5a24f15 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,11 @@ +# Reporting Security Issues + +We take all security reports seriously. +When we receive such reports, +we will investigate and subsequently address +any potential vulnerabilities as quickly as possible. +If you discover a potential security issue in this project, +please notify AWS/Amazon Security via our +[vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) +or directly via email to [AWS Security](mailto:aws-security@amazon.com). +Please do *not* create a public GitHub issue in this project. diff --git a/solution-manifest.yaml b/solution-manifest.yaml index 55b2db2..c6f8f5c 100644 --- a/solution-manifest.yaml +++ b/solution-manifest.yaml @@ -1,6 +1,6 @@ id: SO0109 name: live-streaming-on-aws-with-amazon-s3 -version: v3.2.4 +version: v3.2.5 cloudformation_templates: - template: live-streaming-on-aws-with-amazon-s3.template main_template: true diff --git a/source/constructs/package-lock.json b/source/constructs/package-lock.json index f9b4001..6e95e6e 100644 --- a/source/constructs/package-lock.json +++ b/source/constructs/package-lock.json @@ -1,12 +1,12 @@ { "name": "live-streaming-on-aws-with-amazon-s3", - "version": "3.2.4", + "version": "3.2.5", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "live-streaming-on-aws-with-amazon-s3", - "version": "3.2.4", + "version": "3.2.5", "license": "Apache-2.0", "dependencies": { "@aws-cdk/aws-servicecatalogappregistry-alpha": "2.92.0-alpha.0", diff --git a/source/constructs/package.json b/source/constructs/package.json index a94f10d..168ad62 100644 --- a/source/constructs/package.json +++ b/source/constructs/package.json @@ -1,6 +1,6 @@ { "name": "live-streaming-on-aws-with-amazon-s3", - "version": "3.2.4", + "version": "3.2.5", "author": { "name": "Amazon Web Services", "url": "https://aws.amazon.com/solutions" diff --git a/source/custom-resource/package-lock.json b/source/custom-resource/package-lock.json index 7b16390..bfae02b 100644 --- a/source/custom-resource/package-lock.json +++ b/source/custom-resource/package-lock.json @@ -1,22 +1,22 @@ { "name": "live-streaming-single-pipeline", - "version": "3.2.4", + "version": "3.2.5", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "live-streaming-single-pipeline", - "version": "3.2.4", + "version": "3.2.5", "license": "Apache-2.0", "dependencies": { - "axios": ">=1.4.0", + "axios": "^1.7.4", "uuid": "^9.0.0" }, "devDependencies": { "@aws-sdk/client-medialive": "^3.622.0", "@aws-sdk/client-ssm": "^3.622.0", "aws-sdk-client-mock": "^3.1.0", - "axios-mock-adapter": "^1.21.5", + "axios-mock-adapter": "^1.22.0", "chai": "*", "jest": "^29.6.1" }, @@ -2630,9 +2630,9 @@ } }, "node_modules/axios": { - "version": "1.7.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.2.tgz", - "integrity": "sha512-2A8QhOMrbomlDuiLeK9XibIBzuHeRcqqNOHp0Cyp5EoJ1IFDh+XZH3A6BkXtv0K4gFGCI0Y4BM7B1wOEi0Rmgw==", + "version": "1.7.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz", + "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==", "dependencies": { "follow-redirects": "^1.15.6", "form-data": "^4.0.0", @@ -2640,9 +2640,9 @@ } }, "node_modules/axios-mock-adapter": { - "version": "1.21.5", - "resolved": "https://registry.npmjs.org/axios-mock-adapter/-/axios-mock-adapter-1.21.5.tgz", - "integrity": "sha512-5NI1V/VK+8+JeTF8niqOowuysA4b8mGzdlMN/QnTnoXbYh4HZSNiopsDclN2g/m85+G++IrEtUdZaQ3GnaMsSA==", + "version": "1.22.0", + "resolved": "https://registry.npmjs.org/axios-mock-adapter/-/axios-mock-adapter-1.22.0.tgz", + "integrity": "sha512-dmI0KbkyAhntUR05YY96qg2H6gg0XMl2+qTW0xmYg6Up+BFBAJYRLROMXRdDEL06/Wqwa0TJThAYvFtSFdRCZw==", "dev": true, "dependencies": { "fast-deep-equal": "^3.1.3", diff --git a/source/custom-resource/package.json b/source/custom-resource/package.json index 52eac5f..b51bdd5 100644 --- a/source/custom-resource/package.json +++ b/source/custom-resource/package.json @@ -1,6 +1,6 @@ { "name": "live-streaming-single-pipeline", - "version": "3.2.4", + "version": "3.2.5", "author": { "name": "Amazon Web Services", "url": "https://aws.amazon.com/solutions" @@ -14,14 +14,14 @@ "test": "jest --coverage" }, "dependencies": { - "axios": ">=1.4.0", + "axios": "^1.7.4", "uuid": "^9.0.0" }, "devDependencies": { "@aws-sdk/client-medialive": "^3.622.0", "@aws-sdk/client-ssm": "^3.622.0", "aws-sdk-client-mock": "^3.1.0", - "axios-mock-adapter": "^1.21.5", + "axios-mock-adapter": "^1.22.0", "chai": "*", "jest": "^29.6.1" },