Merge pull request #40 from sanjay-reddy-kandi/main

Release 1.8.11
aws-solutions · Aug 16, 2024 · 83e6eef · 83e6eef
2 parents 2e79c65 + 0533cc3
commit 83e6eef
Show file tree

Hide file tree

Showing 12 changed files with 42 additions and 35 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.8.11] - 2024-08-16
+### Changed
+- Upgraded axios to mitigate CVE-2024-39338
+
 ## [1.8.10] - 2024-08-07
 ### Changed
 - Upgraded fast-xml-parser to mitigate CVE-2024-41818

diff --git a/solution-manifest.yaml b/solution-manifest.yaml
@@ -2,7 +2,7 @@
 id: SO0143 # Solution Id
 name: devops-monitoring-dashboard-on-aws # trademarked name
 opensource_archive: aws-devops-monitoring-dashboard.zip
-version: v1.8.10 # current version of the solution. Used to verify template headers
+version: v1.8.11 # current version of the solution. Used to verify template headers
 cloudformation_templates: # This list should match with AWS CloudFormation templates section of IG
   - template: aws-devops-monitoring-dashboard.template
     main_template: true

diff --git a/source/lambda/multi_account_custom_resources/npm-shrinkwrap.json b/source/lambda/multi_account_custom_resources/npm-shrinkwrap.json
diff --git a/source/lambda/multi_account_custom_resources/package.json b/source/lambda/multi_account_custom_resources/package.json
@@ -9,7 +9,7 @@
     "license": "Apache-2.0",
     "dependencies": {
         "async": "^3.2.4",
-        "axios": "^1.6.2",
+        "axios": "^1.7.4",
         "uuid": "^9.0.0"
     },
     "devDependencies": {

diff --git a/source/lambda/query_runner/npm-shrinkwrap.json b/source/lambda/query_runner/npm-shrinkwrap.json
diff --git a/source/lambda/query_runner/package.json b/source/lambda/query_runner/package.json
@@ -9,7 +9,7 @@
     "license": "Apache-2.0",
     "dependencies": {
         "async": "^3.2.4",
-        "axios": "^1.6.2",
+        "axios": "^1.7.4",
         "uuid": "^9.0.0"
     },
     "devDependencies": {

diff --git a/source/lambda/tag_query/npm-shrinkwrap.json b/source/lambda/tag_query/npm-shrinkwrap.json
diff --git a/source/lambda/tag_query/package.json b/source/lambda/tag_query/package.json
@@ -8,7 +8,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "axios": "^1.6.2"
+    "axios": "^1.7.4"
   },
   "devDependencies": {
     "@aws-sdk/client-resource-groups-tagging-api": "^3.451.0",

diff --git a/source/npm-shrinkwrap.json b/source/npm-shrinkwrap.json
diff --git a/source/package.json b/source/package.json
@@ -1,7 +1,7 @@
 {
     "name": "aws_devops_monitoring_dashboard",
     "description": "CDK app to provision AWS resources for the solution",
-    "version": "1.8.10",
+    "version": "1.8.11",
     "bin": {
         "aws_devops_monitoring_dashboard": "bin/aws_devops_monitoring_dashboard.js"
     },

diff --git a/source/test/__snapshots__/aws_devops_monitoring_dashboard_stack.test.ts.snap b/source/test/__snapshots__/aws_devops_monitoring_dashboard_stack.test.ts.snap
@@ -447,7 +447,7 @@ exports[`Snapshot test for primary devopsDashboardStack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "1c5ebab0200a0dfa0fce2de4d1bacdc859692a8e4d909e125b93845a9a77b662.zip",
+          "S3Key": "f4fd05151c560d0c6b8364b4a2add5e75600534d0dfbc0679ea1efe5aa7f7f63.zip",
         },
         "Description": "DevOps Monitoring Dashboard on AWS solution - This function runs on a daily schedule and adds a new partition to Amazon Athena table",
         "Environment": {
@@ -3445,7 +3445,7 @@ exports[`Snapshot test for primary devopsDashboardStack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "1c5ebab0200a0dfa0fce2de4d1bacdc859692a8e4d909e125b93845a9a77b662.zip",
+          "S3Key": "f4fd05151c560d0c6b8364b4a2add5e75600534d0dfbc0679ea1efe5aa7f7f63.zip",
         },
         "Description": "DevOps Monitoring Dashboard on AWS solution - This function runs Amazon Athena queries and creates views.",
         "Environment": {
@@ -3745,7 +3745,7 @@ exports[`Snapshot test for primary devopsDashboardStack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "36d76be94eb3ea0942000ff5c85649a81dc4108f4d38873eea5e1eeed51f9b05.zip",
+          "S3Key": "73200f82b93cc5a96e7fc16ecd98bc88acad5a2451553b152228fdcab5f8ac2a.zip",
         },
         "Description": "DevOps Monitoring Dashboard on AWS solution - This function queries CodeCommit, CodeBuild, and CodePipeline resources for tag information.",
         "Environment": {
@@ -4362,7 +4362,7 @@ exports[`Snapshot test for primary devopsDashboardStack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "b404e24280e6982a4258a224453b8ab186e036785b4ee7219839006574024def.zip",
+          "S3Key": "2efb257d6185920b53ab436d195b557aaf741c2b1cfe9bb88e0de8bd4a2cc41b.zip",
         },
         "Description": "DevOps Monitoring Dashboard on AWS solution - This function manages permissions in the central monitoring account that are required for processing metrics sent by other accounts.",
         "Environment": {

diff --git a/source/test/__snapshots__/sharing_account_stack.test.ts.snap b/source/test/__snapshots__/sharing_account_stack.test.ts.snap
@@ -1204,7 +1204,7 @@ exports[`Snapshot test for primary SharingAccountStack 1`] = `
           "S3Bucket": {
             "Fn::Sub": "cdk-hnb659fds-assets-\${AWS::AccountId}-\${AWS::Region}",
           },
-          "S3Key": "36d76be94eb3ea0942000ff5c85649a81dc4108f4d38873eea5e1eeed51f9b05.zip",
+          "S3Key": "73200f82b93cc5a96e7fc16ecd98bc88acad5a2451553b152228fdcab5f8ac2a.zip",
         },
         "Description": "DevOps Monitoring Dashboard on AWS solution - This function queries CodeCommit, CodeBuild, and CodePipeline resources for tag information.",
         "Environment": {