From 44e9a20dc09461379d149e70a21fb8645a67100a Mon Sep 17 00:00:00 2001 From: Morris Estepa Date: Wed, 4 Dec 2024 14:35:01 -0600 Subject: [PATCH] Update to version v1.9.6 --- CHANGELOG.md | 6 ++++++ deployment/build-s3-dist.sh | 2 +- source/kinesis/kda-flink-ml/pom.xml | 3 +-- source/kinesis/kpl-demo/pom.xml | 16 +++++++++++++-- .../kds-lambda-consumer/package-lock.json | 20 +++++++++---------- .../msk-lambda-consumer/package-lock.json | 20 +++++++++---------- .../lambda/msk-lambda-kdf/package-lock.json | 6 +++--- .../taxi-fare-endpoint/package-lock.json | 20 +++++++++---------- source/package-lock.json | 6 +++--- 9 files changed, 58 insertions(+), 41 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 00b183a..03ae58f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [1.9.6] - 2024-12-05 + +### Security + + - Patched 3rd party security vulnerabilities + ## [1.9.5] - 2024-10-17 ### Security diff --git a/deployment/build-s3-dist.sh b/deployment/build-s3-dist.sh index 88a6f8d..b334ef9 100755 --- a/deployment/build-s3-dist.sh +++ b/deployment/build-s3-dist.sh @@ -129,7 +129,7 @@ cd $source_dir/kinesis application_name=amazon-kinesis-replay application_version=0.1.0 -wget https://github.com/aws-samples/$application_name/archive/refs/tags/release-$application_version.zip +wget https://github.com/aws-samples/$application_name/archive/refs/heads/release-$application_version.zip unzip -q release-$application_version.zip cd $application_name-release-$application_version diff --git a/source/kinesis/kda-flink-ml/pom.xml b/source/kinesis/kda-flink-ml/pom.xml index 5904bcf..5edd3f6 100644 --- a/source/kinesis/kda-flink-ml/pom.xml +++ b/source/kinesis/kda-flink-ml/pom.xml @@ -15,8 +15,7 @@ 1.11 2.0.0 1.2.0 - 2.25.58 - + 2.29.12 3.8.1 3.2.4 diff --git a/source/kinesis/kpl-demo/pom.xml b/source/kinesis/kpl-demo/pom.xml index 4ad94db..16eaf8a 100644 --- a/source/kinesis/kpl-demo/pom.xml +++ b/source/kinesis/kpl-demo/pom.xml @@ -29,7 +29,7 @@ com.amazonaws amazon-kinesis-producer - 0.15.11 + 0.15.12 com.google.protobuf @@ -46,7 +46,7 @@ software.amazon.awssdk netty-nio-client - 2.25.58 + 2.29.12 @@ -90,6 +90,18 @@ avro 1.12.0 + + + software.amazon.glue + schema-registry-serde + 1.1.22 + + + + org.apache.kafka + kafka-clients + 3.9.0 + diff --git a/source/lambda/kds-lambda-consumer/package-lock.json b/source/lambda/kds-lambda-consumer/package-lock.json index effda47..2b83c69 100644 --- a/source/lambda/kds-lambda-consumer/package-lock.json +++ b/source/lambda/kds-lambda-consumer/package-lock.json @@ -1505,9 +1505,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", @@ -4047,7 +4047,7 @@ "jest-util": "^29.7.0", "jest-validate": "^29.7.0", "jest-watcher": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "strip-ansi": "^6.0.0" @@ -4203,7 +4203,7 @@ "jest-haste-map": "^29.7.0", "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pirates": "^4.0.4", "slash": "^3.0.0", "write-file-atomic": "^4.0.2" @@ -4708,9 +4708,9 @@ } }, "cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "requires": { "path-key": "^3.1.0", @@ -5284,7 +5284,7 @@ "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", "jest-worker": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "walker": "^1.0.8" } }, @@ -5321,7 +5321,7 @@ "@types/stack-utils": "^2.0.0", "chalk": "^4.0.0", "graceful-fs": "^4.2.9", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "stack-utils": "^2.0.3" diff --git a/source/lambda/msk-lambda-consumer/package-lock.json b/source/lambda/msk-lambda-consumer/package-lock.json index d76f9b8..57830bb 100644 --- a/source/lambda/msk-lambda-consumer/package-lock.json +++ b/source/lambda/msk-lambda-consumer/package-lock.json @@ -1505,9 +1505,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", @@ -4047,7 +4047,7 @@ "jest-util": "^29.7.0", "jest-validate": "^29.7.0", "jest-watcher": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "strip-ansi": "^6.0.0" @@ -4203,7 +4203,7 @@ "jest-haste-map": "^29.7.0", "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pirates": "^4.0.4", "slash": "^3.0.0", "write-file-atomic": "^4.0.2" @@ -4708,9 +4708,9 @@ } }, "cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "requires": { "path-key": "^3.1.0", @@ -5284,7 +5284,7 @@ "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", "jest-worker": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "walker": "^1.0.8" } }, @@ -5321,7 +5321,7 @@ "@types/stack-utils": "^2.0.0", "chalk": "^4.0.0", "graceful-fs": "^4.2.9", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "stack-utils": "^2.0.3" diff --git a/source/lambda/msk-lambda-kdf/package-lock.json b/source/lambda/msk-lambda-kdf/package-lock.json index 2e8e5f7..b6a1d04 100644 --- a/source/lambda/msk-lambda-kdf/package-lock.json +++ b/source/lambda/msk-lambda-kdf/package-lock.json @@ -2597,9 +2597,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", diff --git a/source/lambda/taxi-fare-endpoint/package-lock.json b/source/lambda/taxi-fare-endpoint/package-lock.json index 56eb821..a850325 100644 --- a/source/lambda/taxi-fare-endpoint/package-lock.json +++ b/source/lambda/taxi-fare-endpoint/package-lock.json @@ -1505,9 +1505,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0", @@ -4047,7 +4047,7 @@ "jest-util": "^29.7.0", "jest-validate": "^29.7.0", "jest-watcher": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "strip-ansi": "^6.0.0" @@ -4203,7 +4203,7 @@ "jest-haste-map": "^29.7.0", "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pirates": "^4.0.4", "slash": "^3.0.0", "write-file-atomic": "^4.0.2" @@ -4708,9 +4708,9 @@ } }, "cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "requires": { "path-key": "^3.1.0", @@ -5284,7 +5284,7 @@ "jest-regex-util": "^29.6.3", "jest-util": "^29.7.0", "jest-worker": "^29.7.0", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "walker": "^1.0.8" } }, @@ -5321,7 +5321,7 @@ "@types/stack-utils": "^2.0.0", "chalk": "^4.0.0", "graceful-fs": "^4.2.9", - "micromatch": "^4.0.4", + "micromatch": "^4.0.8", "pretty-format": "^29.7.0", "slash": "^3.0.0", "stack-utils": "^2.0.3" diff --git a/source/package-lock.json b/source/package-lock.json index a6cf0c3..1686895 100644 --- a/source/package-lock.json +++ b/source/package-lock.json @@ -2967,9 +2967,9 @@ "dev": true }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "dependencies": { "path-key": "^3.1.0",