v1.23.1

What's Changed

• Life cycle packages by @kddejong in #695
• Release v1.23.1 by @kddejong in #696

New Contributors

• @kddejong made their first contribution in #695

Full Changelog: v1.23.0...v1.23.1

v1.23.0

What's Changed

• Update .pre-commit-hooks.yaml to use rain instead of cfn-format by @leinardi in #672
• Add S3 URI handling to modules by @ericzbeard in #675
• Update docs - strict-booleans and default branch name by @dothomson in #674
• Add features to Modules by @ericzbeard in #676

New Contributors

• @dothomson made their first contribution in #674

Full Changelog: v1.22.0...v1.23.0

v1.22.0

What's Changed

• Bump vite from 5.4.6 to 5.4.12 in /test/webapp/site by @dependabot in #631
• Fix breaking change to merge by @ericzbeard in #632
• Fixing duplicate analytics node by @ericzbeard in #644
• Adds optional Extension property to set extension on uploaded artifact by @georgealton in #645
• fix: Update messages when deploying a changeset when importing resources by @haytok in #646
• Fix #653: incorrectly strips quotes from string values that resemble YAML booleans by @leinardi in #654
• Error check type cast in ls changeset by @ericzbeard in #658
• Add strict-booleans node style by @leinardi in #660
• Awscli modules by @ericzbeard in #662

New Contributors

• @haytok made their first contribution in #646
• @leinardi made their first contribution in #654

Full Changelog: v1.21.0...v1.22.0

v1.21.0

What's Changed

• Add uncdk to fmt command by @ericzbeard in #626
• Add analytics to template Metadata by @ericzbeard in #627
• Version bump by @ericzbeard in #628

Dependabot

• Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by @dependabot in #616
• Bump nanoid from 3.3.7 to 3.3.8 in /test/webapp/site by @dependabot in #614
• docs: add markdown formatting to example text and link to example file by @Scribbd in #602
• Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.37.7 to 1.37.8 by @dependabot in #624
• Bump github.com/aws/aws-sdk-go-v2/service/servicequotas from 1.25.7 to 1.25.8 by @dependabot in #622
• Bump github.com/aws/aws-sdk-go-v2/service/cloudformation from 1.56.1 to 1.56.2 by @dependabot in #621
• Bump github.com/aws/aws-sdk-go-v2/service/lightsail from 1.42.7 to 1.42.8 by @dependabot in #623
• Bump github.com/aws/aws-sdk-go-v2/service/cloudcontrol from 1.23.2 to 1.23.3 by @dependabot in #620

Full Changelog: v1.20.2...v1.21.0

v1.20.2

This release adds unit tests to make sure the build command will work for all types.

What's Changed

• Version 1.20.2 by @ericzbeard in #619

Full Changelog: v1.20.1...v1.20.2

v1.20.1

What's Changed

• Fixing incorrect schema by @ericzbeard in #618

Full Changelog: v1.20.0...v1.20.1

v1.20.0

What's Changed

• Remove confirmation prompt for deploy --no-exec by @clncy in #587
• Module packages by @ericzbeard in #582
• Fix s3bucket option for stackset deploy by @Scribbd in #593
• Schema updates for version bump by @ericzbeard in #613

New Contributors

• @clncy made their first contribution in #587
• @Scribbd made their first contribution in #593

Full Changelog: v1.19.0...v1.20.0

v1.19.0

What's Changed

• Fix Import should be ImportValue by @ericzbeard in #574
• Allow overriding the expected bucket owner by @ericzbeard in #576
• Add s3 bucket params to stackset command by @ericzbeard in #578
• Fix bugs in Constants and Sub processing by @ericzbeard in #577
• Version bump to v1.19.0 by @ericzbeard in #579

Full Changelog: v1.18.0...v1.19.0

v1.18.0

This release addresses a security issue that would allow an attacker to predict the name of the rain asset bucket and create it before a user issues a rain pkg command, which uploads assets such as Lambda function code to the bucket. This would give the attacker full access to the contents uploaded by Rain, since they own the bucket. This release adds the ExpectedBucketOwner argument to S3 calls, which causes an Access Denied error if the bucket does not belong to the same account. Additionally, this release adds the s3-bucket argument to the rain bootstrap command, which allows users to create an asset bucket with a user-supplied name, which will be stored in SSM Parameter Store with the key rain-bucket for reference by future Rain commands. We recommend that users upgrade to v1.18.0, and verify that the expected rain asset bucket exists within their own account. Users who do not use the pkg or deploy commands are not affected by this issue. Users who supply the optional s3-bucket argument to those commands are not affected if the bucket they specify is in their account.

What's Changed

• When merging templates with Outputs, replace Imports that reference Exported Names by @ericzbeard in #565
• Add expected bucket owner checks to s3 operations by @ericzbeard in #566

Full Changelog: v1.17.0...v1.18.0

v1.17.0

What's Changed

• Make including nested stacks in a change set optional by @ericzbeard in #550
• Add constant values to a CloudFormation template by @ericzbeard in #557
• Convert web app sample to Pkl by @ericzbeard in #556
• Release 1.17.0 by @ericzbeard in #563

Full Changelog: v1.16.1...v1.17.0