Merge pull request #37 from aws-solutions/release/v1.0.15

Release v1.0.15

Author: tbelmega

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.15] - 2024-10
+
+### Changed
+
+- Updated dependencies to mitigate CVE-2024-21536
+- Add poetry.lock to pin dependency versions for Python code
+- Adapt build scripts to use Poetry for dependency management
+
 ## [1.0.14] - 2024-10
 
 ### Changed

deployment/build-s3-dist.sh

@@ -39,7 +39,7 @@ normal="$(tput sgr0)"
 # SETTINGS
 #------------------------------------------------------------------------------
 # Important: CDK global version number
-cdk_version="2.158.0"
+cdk_version="2.163.1"
 run_helper="true"
 
 #------------------------------------------------------------------------------

source/lambda/poetry.lock

@@ -4,11 +4,11 @@ package-mode = false
 
 [tool.poetry.dependencies]
 python = "^3.12"
-aws-lambda-powertools = "~3.1.0"
+aws-lambda-powertools = "~3.2.0"
 aws-xray-sdk = "~2.14.0"
-botocore = "~1.35.41"
-boto3 = "~1.35.41"
-boto3-stubs = { extras = ["essential", "sts", "organizations", "stepfunctions", "s3", "glacier", "iam", "sns", "sqs", "lambda", "efs", "secretsmanager", "iot", "kms", "apigateway", "events", "sesv2", "ecr", "config", "ssm-incidents", "opensearch", "cloudformation", "glue", "serverlessrepo", "backup", "codeartifact", "codebuild", "mediastore", "ec2"], version = "~1.35.41" }
+botocore = "~1.35.46"
+boto3 = "~1.35.46"
+boto3-stubs = { extras = ["essential", "sts", "organizations", "stepfunctions", "s3", "glacier", "iam", "sns", "sqs", "lambda", "efs", "secretsmanager", "iot", "kms", "apigateway", "events", "sesv2", "ecr", "config", "ssm-incidents", "opensearch", "cloudformation", "glue", "serverlessrepo", "backup", "codeartifact", "codebuild", "mediastore", "ec2"], version = "~1.35.46" }
 cfnresponse = "~1.1.5"
 requests = "~2.32.3"
 pyparsing = "~3.2.0"
@@ -17,8 +17,8 @@ pydantic = "~2.9.2"
 [tool.poetry.group.dev.dependencies]
 python = "^3.12"
 mock = "~5.1.0"
-boto3-stubs = { extras = ["essential"], version = "~1.35.41" }
-moto = {extras = ["sts", "organizations", "stepfunctions", "s3", "glacier", "iam", "sns", "sqs", "lambda", "efs", "secretsmanager", "iot", "kms", "apigateway", "events", "sesv2", "ecr", "config", "ssm-incidents", "opensearch", "cloudformation", "glue", "serverlessrepo", "backup", "codeartifact", "codebuild", "mediastore", "ec2"], version = "~5.0.17"}
+boto3-stubs = { extras = ["essential"], version = "~1.35.46" }
+moto = {extras = ["sts", "organizations", "stepfunctions", "s3", "glacier", "iam", "sns", "sqs", "lambda", "efs", "secretsmanager", "iot", "kms", "apigateway", "events", "sesv2", "ecr", "config", "ssm-incidents", "opensearch", "cloudformation", "glue", "serverlessrepo", "backup", "codeartifact", "codebuild", "mediastore", "ec2"], version = "~5.0.18"}
 pytest = "~8.3.3"
 pytest-mock = "~3.14.0"
 pytest-runner = "~6.0.1"