Skip to content

[Snyk] Upgrade @aws-sdk/client-cognito-identity from 3.258.0 to 3.623.0 #3750

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
bibiefrat wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade @aws-sdk/client-cognito-identity from 3.258.0 to 3.623.0 #3750

bibiefrat wants to merge 1 commit into from

Conversation

@bibiefrat
Copy link
Owner

@bibiefrat bibiefrat commented Aug 24, 2024

snyk-top-banner

Snyk has created this PR to upgrade @aws-sdk/client-cognito-identity from 3.258.0 to 3.623.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 180 versions ahead of your current version.

  • The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858		 646 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-FASTXMLPARSER-3325616		 646 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-7573289		 646 No Known Exploit
Release notes
Package name: @aws-sdk/client-cognito-identity
  • 3.623.0 - 2024-08-02

    3.623.0(2024-08-02)

    Chores
    • id-auth-sra: sigv4a compatibility for id-auth sra (#6342) (9836a09e)
    • lib-dynamodb: use pagination factory from core (#6345) (922292b6)
    New Features
    • client-ivschat: updates cloudtrail event source for SDKs (deeea907)
    • client-ecs: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (21bdf2a9)
    • client-cloudwatch: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (51a8423c)
    • client-glue: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (be78cf63)
    • client-route-53: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (39096d9a)
    • client-ivs-realtime: updates cloudtrail event source for SDKs (6e9c35b3)
    • client-ssm: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (ae83e779)
    • client-kinesis: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (86c28e0e)
    • client-waf-regional: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (52b9cf43)
    • client-resiliencehub: Customers are presented with the grouping recommendations and can determine if the recommendations are accurate and apply to their case. This feature simplifies onboarding by organizing resources into appropriate AppComponents. (b8d8c647)
    • client-ivs: updates cloudtrail event source for SDKs (00374d58)
    Bug Fixes
    • client-transcribe-streaming: add plugin only for operations with streaming trait (#6349) (6043d799)

    For list of updated packages, view updated-packages.md in assets-3.623.0.zip

  • 3.622.0 - 2024-08-01

    3.622.0(2024-08-01)

    Chores
    Documentation Changes
    • client-memorydb: Doc only update for changes to deletion API. (bd90490b)
    • client-support: Doc only updates to CaseDetails (c28e9390)
    • client-controltower: Updated Control Tower service documentation for controlcatalog control ARN support with existing Control Tower public APIs (2f7a9651)
    • supplemental-docs: add documentation for using queue names with SQS Client (#6337) (9f4b6df4)
    New Features
    • client-iam: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (b754d411)
    • client-bedrock: API and Documentation for Bedrock Model Copy feature. This feature lets you share and copy a custom model from one region to another or one account to another. (b85315c5)
    • client-sagemaker: This release adds support for Amazon EMR Serverless applications in SageMaker Studio for running data processing jobs. (b43bb894)
    • client-rds: This release adds support for specifying optional MinACU parameter in CreateDBShardGroup and ModifyDBShardGroup API. DBShardGroup response will contain MinACU if specified. (d2d3328a)
    • client-ssm-quicksetup: This release adds API support for the QuickSetup feature of AWS Systems Manager (71f373db)
    • client-controlcatalog: AWS Control Tower provides two new public APIs controlcatalog:ListControls and controlcatalog:GetControl under controlcatalog service namespace, which enable customers to programmatically retrieve control metadata of available controls. (c897818b)

    For list of updated packages, view updated-packages.md in assets-3.622.0.zip

  • 3.621.0 - 2024-07-30

    3.621.0(2024-07-30)

    Chores
    Documentation Changes
    • client-elasticache: Doc only update for changes to deletion API. (3cf46f19)
    • client-workspaces: Removing multi-session as it isn't supported for pools (01552b00)
    New Features
    • clients: update client endpoints as of 2024-07-30 (ecc97a25)
    • client-lex-models-v2: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base. (4d9c7a12)
    • client-eventbridge: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (65290c81)
    • client-rolesanywhere: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile. (5bc30087)
    • client-cloudwatch-logs: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (88b6a41c)
    • client-codepipeline: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements. (5e8b92d3)
    • client-elastic-load-balancing: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (6cbe7bf6)
    • client-tnb: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation. (cee6948a)
    • client-auto-scaling: Increase the length limit for VPCZoneIdentifier from 2047 to 5000 (23471630)
    • client-appstream: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0 (bbb4450b)
    Bug Fixes
    • package.json homepage links to use the main branch (#6336) (e3322302)
    • polly-request-presigner: override middleware name to allow concurrent presigning (#6335) (54990fa2)

    For list of updated packages, view updated-packages.md in assets-3.621.0.zip

  • 3.620.1 - 2024-07-29

    3.620.1(2024-07-29)

    Chores
    • release accountId-endpoints config and codegen changes (#6313) (de8d4a6b)
    • release accountId-endpoints credential-provider changes (d5011a5f)
    Documentation Changes
    • client-memorydb: Renaming full service name as it appears in developer documentation. (c94ecdde)
    • client-elasticache: Renaming full service name as it appears in developer documentation. (b5146baa)
    New Features
    • clients: update client endpoints as of 2024-07-29 (78129a70)

    For list of updated packages, view updated-packages.md in assets-3.620.1.zip

  • 3.620.0 - 2024-07-25

    3.620.0(2024-07-25)

    Chores
    • clients: codegen sync for eventstream header fix (#6310) (ff30a3e8)
    Documentation Changes
    • mention addition of web-streams-polyfill for react-native (#6302) (456a5fe3)
    New Features
    • client-network-firewall: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging. (ab0e00ec)
    • client-outposts: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses (2e676982)
    • client-application-auto-scaling: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics. (961af9b2)
    • client-eks: This release adds support for EKS cluster to manage extended support. (45cb022d)
    • client-codecommit: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository. (9195ee76)
    • client-ec2: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types. (88cbe697)
    • client-sfn: This release adds support to customer managed KMS key encryption in AWS Step Functions. (895cc687)
    • client-bedrock-runtime: Provides ServiceUnavailableException error message (690bc7f8)
    • client-datazone: Introduces GetEnvironmentCredentials operation to SDK (2156a876)
    • client-ecr: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template. (83e5411c)
    • client-application-signals: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability. (ef30775d)
    • client-elastic-load-balancing-v2: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager. (4a753d9e)
    Bug Fixes
    • eventstream-handler-node: start streaming without waiting for response (#6311) (0072f426)
    Tests

    For list of updated packages, view updated-packages.md in assets-3.620.0.zip

  • 3.616.0 - 2024-07-18
  • 3.614.0 - 2024-07-10
  • 3.613.0 - 2024-07-09
  • 3.609.0 - 2024-07-02
  • 3.606.0 - 2024-06-28
  • 3.600.0 - 2024-06-18
  • 3.598.0 - 2024-06-14
  • 3.596.0 - 2024-06-12
  • 3.592.0 - 2024-06-06
  • 3.590.0 - 2024-06-04
  • 3.588.0 - 2024-05-31
  • 3.587.0 - 2024-05-30
  • 3.583.0 - 2024-05-23
  • 3.582.0 - 2024-05-22
  • 3.577.0 - 2024-05-15
  • 3.576.0 - 2024-05-14
  • 3.575.0 - 2024-05-13
  • 3.574.0 - 2024-05-10
  • 3.572.0 - 2024-05-08
  • 3.569.0 - 2024-05-03
  • 3.568.0 - 2024-05-02
  • 3.567.0 - 2024-05-01
  • 3.565.0 - 2024-04-29
  • 3.564.0 - 2024-04-26
  • 3.563.0 - 2024-04-25
  • 3.556.0 - 2024-04-16
  • 3.554.0 - 2024-04-11
  • 3.552.0 - 2024-04-09
  • 3.549.0 - 2024-04-04
  • 3.540.0 - 2024-03-22
  • 3.535.0 - 2024-03-15
  • 3.533.0 - 2024-03-13
  • 3.529.1 - 2024-03-08
  • 3.529.0 - 2024-03-07
  • 3.525.0 - 2024-02-29
  • 3.523.0 - 2024-02-27
  • 3.521.0 - 2024-02-23
  • 3.515.0 - 2024-02-15
  • 3.514.0 - 2024-02-14
  • 3.513.0 - 2024-02-13
  • 3.511.0 - 2024-02-09
  • 3.509.0 - 2024-02-07
  • 3.507.0 - 2024-02-05
  • 3.504.0 - 2024-01-31
  • 3.503.1 - 2024-01-30
  • 3.503.0 - 2024-01-30
  • 3.502.0 - 2024-01-29
  • 3.501.0 - 2024-01-26
  • 3.499.0 - 2024-01-24
  • 3.498.0 - 2024-01-23
  • 3.496.0 - 2024-01-19
  • 3.495.0 - 2024-01-18
  • 3.490.0 - 2024-01-11
  • 3.489.0 - 2024-01-10
  • 3.485.0 - 2024-01-03
  • 3.484.0 - 2023-12-29
  • 3.481.0 - 2023-12-26
  • 3.478.0 - 2023-12-20
  • 3.477.0 - 2023-12-19
  • 3.476.0 - 2023-12-18
  • 3.474.0 - 2023-12-14
  • 3.473.0 - 2023-12-13
  • 3.470.0 - 2023-12-08
  • 3.468.0 - 2023-12-06
  • 3.465.0 - 2023-12-01
  • 3.462.0 - 2023-11-29
  • 3.461.0 - 2023-11-28
  • 3.460.0 - 2023-11-28
  • 3.458.0 - 2023-11-27
  • 3.454.0 - 2023-11-17
  • 3.451.0 - 2023-11-14
  • 3.450.0 - 2023-11-13
  • 3.449.0 - 2023-11-10
  • 3.445.0 - 2023-11-07
  • 3.444.0 - 2023-11-06
  • 3.441.0 - 2023-11-01
  • 3.438.0 - 2023-10-27
  • 3.437.0 - 2023-10-26
  • 3.436.0 - 2023-10-25
  • 3.435.0 - 2023-10-24
  • 3.433.0 - 2023-10-20
  • 3.431.0 - 2023-10-18
  • 3.430.0 - 2023-10-17
  • 3.429.0 - 2023-10-16
  • 3.428.0 - 2023-10-12
  • 3.427.0 - 2023-10-06
  • 3.425.0 - 2023-10-04
  • 3.423.0 - 2023-10-02
  • 3.421.0 - 2023-09-27
  • 3.418.0 - 2023-09-22
  • 3.414.0 - 2023-09-15
  • 3.413.0 - 2023-09-14
  • 3.410.0 - 2023-09-11
  • 3.409.0 - 2023-09-08
  • 3.408.0 - 2023-09-07
  • 3.405.0 - 2023-09-01
  • 3.398.0 - 2023-08-23
  • 3.397.0 - 2023-08-22
  • 3.395.0 - 2023-08-18
  • 3.391.0 - 2023-08-14
  • 3.388.0 - 2023-08-09
  • 3.387.0 - 2023-08-08
  • 3.386.0 - 2023-08-07
  • 3.385.0 - 2023-08-04
  • 3.382.0 - 2023-08-01
  • 3.379.1 - 2023-07-28
  • 3.378.0 - 2023-07-26
  • 3.377.0 - 2023-07-25
  • 3.370.0 - 2023-07-13
  • 3.369.0 - 2023-07-11
  • 3.363.0 - 2023-06-29
  • 3.362.0 - 2023-06-28
  • 3.360.0 - 2023-06-26
  • 3.359.0 - 2023-06-23
  • 3.358.0 - 2023-06-22
  • 3.357.0 - 2023-06-21
  • 3.354.0 - 2023-06-16
  • 3.353.0 - 2023-06-15
  • 3.352.0 - 2023-06-13
  • 3.350.0 - 2023-06-09
  • 3.348.0 - 2023-06-07
  • 3.347.1 - 2023-06-07
  • 3.347.0 - 2023-06-06
  • 3.345.0 - 2023-06-02
  • 3.344.0 - 2023-06-01
  • 3.342.0 - 2023-05-30
  • 3.341.0 - 2023-05-26
  • 3.338.0 - 2023-05-23
  • 3.337.0 - 2023-05-22
  • 3.335.0 - 2023-05-18
  • 3.332.0 - 2023-05-11
  • 3.329.0 - 2023-05-08
  • 3.328.0 - 2023-05-05
  • 3.327.0 - 2023-05-04
  • 3.326.0 - 2023-05-03
  • 3.325.0 - 2023-05-02
  • 3.321.1 - 2023-04-27
  • 3.319.0 - 2023-04-24
  • 3.316.0 - 2023-04-19
  • 3.315.0 - 2023-04-17
  • 3.312.0 - 2023-04-12
  • 3.310.0 - 2023-04-10
  • 3.309.0 - 2023-04-07
  • 3.306.0 - 2023-04-04
  • 3.303.0 - 2023-03-30
  • 3.301.0 - 2023-03-28
  • 3.300.0 - 2023-03-27
  • 3.299.0 - 2023-03-24
  • 3.298.0 - 2023-03-23
  • 3.297.0 - 2023-03-22
  • 3.296.0 - 2023-03-21
  • 3.295.0 - 2023-03-20
  • 3.294.0 - 2023-03-17
  • 3.293.0 - 2023-03-16
  • 3.292.0 - 2023-03-15
  • 3.291.0 - 2023-03-14
  • 3.290.0 - 2023-03-13
  • 3.289.0 - 2023-03-10
  • 3.288.0 - 2023-03-09
  • 3.287.0 - 2023-03-08
  • 3.282.0 - 2023-03-01
  • 3.281.0 - 2023-02-28
  • 3.279.0 - 2023-02-24
  • 3.278.0 - 2023-02-23
  • 3.276.0 - 2023-02-21
  • 3.272.0 - 2023-02-15
  • 3.271.0 - 2023-02-14
  • 3.267.0 - 2023-02-08
  • 3.266.1 - 2023-02-07
  • 3.266.0 - 2023-02-06
  • 3.264.0 - 2023-02-02
  • 3.263.0 - 2023-02-01
  • 3.262.0 - 2023-01-31
  • 3.261.0 - 2023-01-30
  • 3.259.0 - 2023-01-26
  • 3.258.0 - 2023-01-25
from @aws-sdk/client-cognito-identity GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade @aws-sdk/client-cognito-identity from 3.258.0 to 3.623.0
61d8a9d 
Snyk has created this PR to upgrade @aws-sdk/client-cognito-identity from 3.258.0 to 3.623.0.

See this package in npm:
@aws-sdk/client-cognito-identity

See this project in Snyk:
https://app.snyk.io/org/bibiefart/project/0e109c1f-c2c2-4e70-b4e3-703a969c8b70?utm_source=github&utm_medium=referral&page=upgrade-pr
@bibiefrat bibiefrat mentioned this pull request Oct 11, 2024
Open
@bibiefrat bibiefrat mentioned this pull request Oct 18, 2024
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@bibiefrat @snyk-bot