Upgrading dependencies to address vulnerabilities (#38)

Co-authored-by: srkandi <[email protected]>
aws-solutions · Jul 10, 2024 · 39c2c51 · 39c2c51
1 parent 42e9846
commit 39c2c51
Show file tree

Hide file tree

Showing 12 changed files with 94 additions and 89 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.8.9] - 2024-07-10
+### Changed
+- Upgraded braces to mitigate CVE-2024-4068
+- Upgraded requests to mitigate CVE-2024-35195
+
 ## [1.8.8] - 2024-03-11
 ### Changed
 - Upgraded synthetics canary runtime to v6.2

diff --git a/solution-manifest.yaml b/solution-manifest.yaml
@@ -1,7 +1,7 @@
 ---
 id: SO0143 # Solution Id
 name: devops-monitoring-dashboard-on-aws # trademarked name
-version: v1.8.6 # current version of the solution. Used to verify template headers
+version: v1.8.9 # current version of the solution. Used to verify template headers
 cloudformation_templates: # This list should match with AWS CloudFormation templates section of IG
   - template: aws-devops-monitoring-dashboard.template
     main_template: true

diff --git a/source/lambda/event_parser/npm-shrinkwrap.json b/source/lambda/event_parser/npm-shrinkwrap.json
diff --git a/source/lambda/multi_account_custom_resources/npm-shrinkwrap.json b/source/lambda/multi_account_custom_resources/npm-shrinkwrap.json
diff --git a/source/lambda/query_runner/npm-shrinkwrap.json b/source/lambda/query_runner/npm-shrinkwrap.json
diff --git a/source/lambda/quicksight-custom-resources/requirements.txt b/source/lambda/quicksight-custom-resources/requirements.txt
@@ -1,6 +1,6 @@
 crhelper==2.0.11
 PyYAML==6.0
-requests==2.31.0
+requests==2.32.3
 tenacity~=8.2.2
 urllib3<2
 
diff --git a/source/lambda/solution_helper/requirements.txt b/source/lambda/solution_helper/requirements.txt
@@ -1,4 +1,4 @@
 crhelper==2.0.11
-requests==2.31.0
+requests==2.32.3
 urllib3<2
 
diff --git a/source/lambda/tag_query/npm-shrinkwrap.json b/source/lambda/tag_query/npm-shrinkwrap.json
diff --git a/source/npm-shrinkwrap.json b/source/npm-shrinkwrap.json
diff --git a/source/package.json b/source/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws_devops_monitoring_dashboard",
     "description": "CDK app to provision AWS resources for the solution",
-    "version": "1.8.6",
+    "version": "1.8.9",
     "bin": {
         "aws_devops_monitoring_dashboard": "bin/aws_devops_monitoring_dashboard.js"
     },
@@ -54,5 +54,5 @@
     },
     "overrides": {
         "semver": "~7.5.2"
-      }
+    }
 }