Skip to content

refactor: Upgrade @aws-sdk/s3-request-presigner from 3.787.0 to 3.820.0 #293

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jun 21, 2025

Conversation

parseplatformorg
Copy link
Contributor

@parseplatformorg parseplatformorg commented Jun 20, 2025

snyk-top-banner

Snyk has created this PR to upgrade @aws-sdk/s3-request-presigner from 3.787.0 to 3.820.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 16 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Release notes
Package name: @aws-sdk/s3-request-presigner
  • 3.820.0 - 2025-05-29

    3.820.0(2025-05-29)

    New Features
    • client-auto-scaling: Add support for "apple" CpuManufacturer in ABIS (5d8aaf7a)
    • client-dataexchange: This release adds Tag support for Event Action resource, through which customers can create event actions with Tags and retrieve event actions with Tags. (0e347c5c)
    • client-cloudtrail: CloudTrail Feature Release: Support for Enriched Events with Configurable Context for Event Data Store (cd1e9a08)
    • client-mwaa: Amazon MWAA now lets you choose a worker replacement strategy when updating an environment. This release adds two worker replacement strategies: FORCED (default), which stops workers immediately, and GRACEFUL, which allows workers to finish current tasks before shutting down. (3ccfc39e)
    • client-s3: Adding checksum support for S3 PutBucketOwnershipControls API. (542663c4)
    • client-amplify: Add support for customizable build instance sizes. CreateApp and UpdateApp operations now accept a new JobConfig parameter composed of BuildComputeType. (092c9529)
    • client-connect: Amazon Connect Service Feature: Email Recipient Limit Increase (f3932ee0)
    • client-fsx: FSx API changes to support the public launch of new Intelligent Tiering storage class on Amazon FSx for Lustre (92e6ce03)
    • client-bcm-pricing-calculator: Add AFTER_DISCOUNTS_AND_COMMITMENTS to Workload Estimate Rate Type. Set ListWorkLoadEstimateUsage maxResults range to minimum of 0 and maximum of 300. (1e8cdb0c)
    • client-ivs-realtime: IVS Real-Time now offers customers the participant replication that allow customers to copy a participant from one stage to another. (ae076622)
    • client-datasync: AgentArns field is made optional for Object Storage and Azure Blob location create requests. Location credentials are now managed via Secrets Manager, and may be encrypted with service managed or customer managed keys. Authentication is now optional for Azure Blob locations. (2e6785ce)
    • client-sagemaker: Add maintenance status field to DescribeMlflowTrackingServer API response (3ed9c129)

    For list of updated packages, view updated-packages.md in assets-3.820.0.zip

  • 3.817.0 - 2025-05-23

    3.817.0(2025-05-23)

    Chores
    New Features
    • clients: update client endpoints as of 2025-05-23 (8775c8f6)
    • client-security-ir: Update PrincipalId pattern documentation to reflect what user should receive back from the API call (24515931)
    • client-ec2: This release adds support for the C7i-flex, M7i-flex, I7i, I7ie, I8g, P6-b200, Trn2, C8gd, M8gd and R8gd instances (b99e6ed0)

    For list of updated packages, view updated-packages.md in assets-3.817.0.zip

  • 3.816.0 - 2025-05-22

    3.816.0(2025-05-22)

    Chores
    • token-providers: add provider to retrieve token from env var (#7097) (6c961b60)
    New Features
    • client-amp: Add QueryLoggingConfiguration APIs for Amazon Managed Prometheus (b889c42b)
    • client-auditmanager: With this release, the AssessmentControl description field has been deprecated, as of May 19, 2025. Additionally, the UpdateAssessment API can now return a ServiceQuotaExceededException when applicable service quotas are exceeded. (4d7233a5)
    • client-glue: This release supports additional ConversionSpec parameter as part of IntegrationPartition Structure in CreateIntegrationTableProperty API. This parameter is referred to apply appropriate column transformation for columns that are used for timestamp based partitioning (eeecd100)
    • client-dsql: Features: support for customer managed encryption keys (f5e3e093)

    For list of updated packages, view updated-packages.md in assets-3.816.0.zip

  • 3.815.0 - 2025-05-21

    3.815.0(2025-05-21)

    Documentation Changes
    • client-application-auto-scaling: Doc only update that addresses a customer reported issue. (1076a5e6)
    New Features
    • clients: update client endpoints as of 2025-05-21 (153ceba3)
    • client-bedrock-agent-runtime: Amazon Bedrock introduces asynchronous flows (in preview), which let you run flows for longer durations and yield control so that your application can perform other tasks and you don't have to actively monitor the flow's progress. (9128be8e)
    • client-cloudwatch: Adds support for setting up Contributor Insight rules on logs transformed via Logs Transformation feature. (0eed8726)
    • client-ec2: Release of Dualstack and Ipv6-only EC2 Public DNS hostnames (b9f691a5)
    • client-partnercentral-selling: Modified validation to allow expectedCustomerSpend array with zero elements in Partner Opportunity operations. (ed51782d)
    Tests
    • middleware-flexible-checksums: increase hook timeout to 60s for middleware-md5-fallback.e2e (#7095) (c57206a4)

    For list of updated packages, view updated-packages.md in assets-3.815.0.zip

  • 3.812.0 - 2025-05-16

    3.812.0(2025-05-16)

    Documentation Changes
    • client-ecs: This is an Amazon ECs documentation only release to support the change of the container exit "reason" field from 255 characters to 1024 characters. (88cb2cfc)
    New Features
    • clients: update client endpoints as of 2025-05-16 (9a8d9b5d)
    • client-bedrock-data-automation: Add support for VIDEO modality to BlueprintType enum. (5657cb1e)
    • client-codepipeline: CodePipeline now supports new API ListDeployActionExecutionTargets that lists the deployment target details for deploy action executions. (eb51d8f6)
    • client-emr: Added APIs for managing Application UIs: Access Persistent (serverless) UIs via CreatePersistentAppUI DescribePersistentAppUI & GetPersistentAppUIPresignedURL, and Cluster-based UIs through GetOnClusterAppUIPresignedURL. Supports Yarn, Spark History, and TEZ interfaces. (f1f82e19)
    • client-neptune: This release adds Global Cluster Switchover capability which enables you to change your global cluster's primary AWS Region, the region that serves writes, while preserving the replication between all regions in the global cluster. (ab547b08)
    • client-glue: Changes include (1) Excel as S3 Source type and XML and Tableau's Hyper as S3 Sink types, (2) targeted number of partitions parameter in S3 sinks and (3) new compression types in CSV/JSON and Parquet S3 sinks. (a5f2aef9)
    • client-service-quotas: This release introduces CreateSupportCase operation to SDK. (611d06e0)
    • client-bedrock-data-automation-runtime: Add AssetProcessingConfiguration for video segment to InputConfiguration (bbf9999d)
    Bug Fixes
    • core/protocols: read error code case-insensitively (#7085) (c13a2a07)
    Tests

    For list of updated packages, view updated-packages.md in assets-3.812.0.zip

  • 3.810.0 - 2025-05-14
  • 3.808.0 - 2025-05-12
  • 3.806.0 - 2025-05-08
  • 3.804.0 - 2025-05-06
  • 3.803.0 - 2025-05-05
  • 3.802.0 - 2025-05-02
  • 3.800.0 - 2025-04-30
  • 3.799.0 - 2025-04-29
  • 3.798.0 - 2025-04-28
  • 3.797.0 - 2025-04-25
  • 3.796.0 - 2025-04-24
  • 3.787.0 - 2025-04-10
from @aws-sdk/s3-request-presigner GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Summary by CodeRabbit

  • Chores
    • Updated the "@aws-sdk/s3-request-presigner" dependency to version 3.820.0.

Snyk has created this PR to upgrade @aws-sdk/s3-request-presigner from 3.787.0 to 3.820.0.

See this package in npm:
@aws-sdk/s3-request-presigner

See this project in Snyk:
https://app.snyk.io/org/acinader/project/3364151b-9c9a-4458-9afd-809dc5309438?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Upgrade @aws-sdk/s3-request-presigner from 3.787.0 to 3.820.0 refactor: Upgrade @aws-sdk/s3-request-presigner from 3.787.0 to 3.820.0 Jun 20, 2025
Copy link

🚀 Thanks for opening this pull request!

Copy link

coderabbitai bot commented Jun 20, 2025

📝 Walkthrough

Walkthrough

The version of the "@aws-sdk/s3-request-presigner" dependency in the package.json file was updated from 3.787.0 to 3.820.0. No other files or configuration changes were made.

Changes

File(s) Change Summary
package.json Updated "@aws-sdk/s3-request-presigner" version only.

Possibly related PRs


📜 Recent review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 02c0cfb and 355c0f6.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json (1 hunks)
⏰ Context from checks skipped due to timeout of 90000ms (6)
  • GitHub Check: Parse Server 7, Node.js 22
  • GitHub Check: Parse Server 8, Node.js 20
  • GitHub Check: Parse Server 7, Node.js 20
  • GitHub Check: Parse Server 8, Node.js 22
  • GitHub Check: Parse Server 8, Node.js 18
  • GitHub Check: Parse Server 7, Node.js 18
🔇 Additional comments (1)
package.json (1)

23-23: Dependency Version Bump: Confirm compatibility

The update of "@aws-sdk/s3-request-presigner" from 3.787.0 → 3.820.0 aligns with Snyk’s recommendation and has no reported breaking changes. However, note that "@aws-sdk/client-s3" remains at 3.828.0—please verify that this minor version mismatch does not impact your S3 presigning workflows.

Ensure you run your integration tests (e.g., npm test) and validate any code paths using presigned URLs to catch any unforeseen issues.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share
🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>, please review it.
    • Explain this complex logic.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai explain this code block.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
    • @coderabbitai read src/utils.ts and explain its main purpose.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
  • @coderabbitai auto-generate unit tests to generate unit tests for this PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@parseplatformorg
Copy link
Contributor Author

🎉 Snyk checks have passed. No issues have been found so far.

security/snyk check is complete. No issues have been found. (View Details)

Copy link

codecov bot commented Jun 20, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.19%. Comparing base (02c0cfb) to head (355c0f6).
Report is 1 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #293   +/-   ##
=======================================
  Coverage   97.19%   97.19%           
=======================================
  Files           2        2           
  Lines         214      214           
=======================================
  Hits          208      208           
  Misses          6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@mtrezza mtrezza merged commit fee7826 into master Jun 21, 2025
13 checks passed
@mtrezza mtrezza deleted the snyk-upgrade-325511a38b2f5e7ddb7d3dddda99db45 branch June 21, 2025 02:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants