Merge pull request #61 from aws-solutions/release/v1.0.7

Updated to version v1.0.7
aws-solutions · Aug 19, 2024 · c97c499 · c97c499
2 parents f1ac12c + c789f1e
commit c97c499
Show file tree

Hide file tree

Showing 11 changed files with 2,336 additions and 1,863 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.7] - 2024-08
+
+- Upgrade `axios` to mitigate [CVE-2024-39338](https://nvd.nist.gov/vuln/detail/CVE-2024-39338)
+
 ## [1.0.6] - 2024-07-26
 
 ### Security

diff --git a/source/custom-resources/package-lock.json b/source/custom-resources/package-lock.json
diff --git a/source/custom-resources/package.json b/source/custom-resources/package.json
@@ -6,10 +6,10 @@
     "url": "https://aws.amazon.com/solutions"
   },
   "license": "Apache-2.0",
-  "version": "1.0.2",
+  "version": "1.0.7",
   "private": true,
   "dependencies": {
-    "axios": "^0.21.1",
+    "axios": "^1.7.4",
     "uuid": "^8.1.0"
   },
   "devDependencies": {
@@ -22,6 +22,9 @@
     "axios-mock-adapter": "^1.19.0",
     "jest": "^29.7.0"
   },
+  "overrides": {
+    "fast-xml-parser": ">=4.4.1"
+  },
   "scripts": {
     "clean": "rm -rf dist/ node_modules/ coverage/",
     "test": "jest test/*.spec.js --coverage --silent",

diff --git a/source/utils/package-lock.json b/source/utils/package-lock.json
diff --git a/source/utils/package.json b/source/utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "utils",
-  "version": "1.0.2",
+  "version": "1.0.7",
   "description": "Custom Resource Helper functions",
   "scripts": {
     "clean": "rm -rf dist/ node_modules/ coverage/",

diff --git a/source/workflow-common/package-lock.json b/source/workflow-common/package-lock.json
diff --git a/source/workflow-common/package.json b/source/workflow-common/package.json
@@ -1,6 +1,6 @@
 {
   "name": "workflow-common",
-  "version": "1.0.2",
+  "version": "1.0.7",
   "description": "Common functionality for all Step Functions Workflows",
   "author": {
     "name": "Amazon Web Services",
@@ -25,6 +25,9 @@
     "package": "npm run clean && npm install --production && npm run package:dist && npm run package:zip",
     "build": "npm run clean && npm install"
   },
+  "overrides": {
+    "fast-xml-parser": ">=4.4.1"
+  },
   "bundledDependencies": [],
   "bundleDependencies": []
 }
diff --git a/source/workflow-export/package-lock.json b/source/workflow-export/package-lock.json
diff --git a/source/workflow-export/package.json b/source/workflow-export/package.json
@@ -6,7 +6,7 @@
     "url": "https://aws.amazon.com/solutions"
   },
   "license": "Apache-2.0",
-  "version": "1.0.2",
+  "version": "1.0.7",
   "private": true,
   "dependencies": {
     "uuid": "^8.3.0"
@@ -19,6 +19,9 @@
     "aws-sdk-client-mock": "^3.0.0",
     "jest": "^29.7.0"
   },
+  "overrides": {
+    "fast-xml-parser": ">=4.4.1"
+  },
   "scripts": {
     "clean": "rm -rf dist/ node_modules/ coverage/",
     "test": "jest test/*.spec.js --coverage --silent",