Update to version 6.2.7 (#568)

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.2.7] - 2024-08-19
+
+### Security 
+- Upgraded axios to v1.7.4 for vulnerability CVE-2024-39338
+
+
 ## [6.2.6] - 2024-06-27
 
 ### Added

SECURITY.md

@@ -0,0 +1,11 @@
+# Reporting Security Issues
+
+We take all security reports seriously.
+When we receive such reports,
+we will investigate and subsequently address
+any potential vulnerabilities as quickly as possible.
+If you discover a potential security issue in this project,
+please notify AWS/Amazon Security via our
+[vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/)
+or directly via email to [AWS Security](mailto:aws-security@amazon.com).
+Please do *not* create a public GitHub issue in this project.

VERSION.txt

@@ -1 +1 @@
-6.2.6
+6.2.7

source/constructs/cdk.json

@@ -2,7 +2,7 @@
   "app": "npx ts-node --prefer-ts-exts bin/constructs.ts",
   "context": {
     "solutionId": "SO0023",
-    "solutionVersion": "custom-v6.2.6",
+    "solutionVersion": "custom-v6.2.7",
     "solutionName": "serverless-image-handler"
   }
 }

source/constructs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "constructs",
-  "version": "6.2.6",
+  "version": "6.2.7",
   "description": "Serverless Image Handler Constructs",
   "license": "Apache-2.0",
   "author": {

source/constructs/test/__snapshots__/constructs.test.ts.snap

@@ -359,7 +359,7 @@ exports[`Serverless Image Handler Stack Snapshot 1`] = `
           "Solutions:ApplicationType": "AWS-Solutions",
           "Solutions:SolutionID": "S0ABC",
           "Solutions:SolutionName": "sih",
-          "Solutions:SolutionVersion": "v6.2.6",
+          "Solutions:SolutionVersion": "v6.2.7",
         },
       },
       "Type": "AWS::ServiceCatalogAppRegistry::Application",
@@ -1228,7 +1228,7 @@ exports[`Serverless Image Handler Stack Snapshot 1`] = `
           },
           "S3Key": "Omitted to remove snapshot dependency on hash",
         },
-        "Description": "sih (v6.2.6): Performs image edits and manipulations",
+        "Description": "sih (v6.2.7): Performs image edits and manipulations",
         "Environment": {
           "Variables": {
             "AUTO_WEBP": {
@@ -1262,7 +1262,7 @@ exports[`Serverless Image Handler Stack Snapshot 1`] = `
               "Ref": "SecretsManagerKeyParameter",
             },
             "SOLUTION_ID": "S0ABC",
-            "SOLUTION_VERSION": "v6.2.6",
+            "SOLUTION_VERSION": "v6.2.7",
             "SOURCE_BUCKETS": {
               "Ref": "SourceBucketsParameter",
             },
@@ -1497,13 +1497,13 @@ exports[`Serverless Image Handler Stack Snapshot 1`] = `
           },
           "S3Key": "Omitted to remove snapshot dependency on hash",
         },
-        "Description": "sih (v6.2.6): Custom resource",
+        "Description": "sih (v6.2.7): Custom resource",
         "Environment": {
           "Variables": {
             "AWS_NODEJS_CONNECTION_REUSE_ENABLED": "1",
             "RETRY_SECONDS": "5",
             "SOLUTION_ID": "S0ABC",
-            "SOLUTION_VERSION": "v6.2.6",
+            "SOLUTION_VERSION": "v6.2.7",
           },
         },
         "Handler": "index.handler",
@@ -2104,7 +2104,7 @@ exports[`Serverless Image Handler Stack Snapshot 1`] = `
           "applicationType": "AWS-Solutions",
           "solutionID": "S0ABC",
           "solutionName": "sih",
-          "version": "v6.2.6",
+          "version": "v6.2.7",
         },
         "Description": "Attribute group for solution information",
         "Name": {

source/constructs/test/constructs.test.ts

@@ -12,7 +12,7 @@ test("Serverless Image Handler Stack Snapshot", () => {
   const stack = new ServerlessImageHandlerStack(app, "TestStack", {
     solutionId: "S0ABC",
     solutionName: "sih",
-    solutionVersion: "v6.2.6",
+    solutionVersion: "v6.2.7",
   });
 
   const template = Template.fromStack(stack);

source/custom-resource/package.json

@@ -1,6 +1,6 @@
 {
   "name": "custom-resource",
-  "version": "6.2.6",
+  "version": "6.2.7",
   "private": true,
   "description": "Serverless Image Handler custom resource",
   "license": "Apache-2.0",
@@ -17,7 +17,7 @@
   },
   "dependencies": {
     "aws-sdk": "^2.1529.0",
-    "axios": "^1.6.5",
+    "axios": "^1.7.4",
     "moment": "^2.30.0",
     "uuid": "^9.0.1"
   },