Skip to content

[Snyk] Upgrade @aws-sdk/client-s3 from 3.190.0 to 3.363.0 #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

tructran273
Copy link

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @aws-sdk/client-s3 from 3.190.0 to 3.363.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 104 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2023-06-29.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-FASTXMLPARSER-3325616
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858
696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @aws-sdk/client-s3
  • 3.363.0 - 2023-06-29

    3.363.0(2023-06-29)

    New Features
    • client-chime: The Amazon Chime SDK APIs in the Chime namespace are no longer supported. Customers should use APIs in the dedicated Amazon Chime SDK namespaces: ChimeSDKIdentity, ChimeSDKMediaPipelines, ChimeSDKMeetings, ChimeSDKMessaging, and ChimeSDKVoice. (a6ff65fa)
    • client-appstream: This release introduces app block builder, allowing customers to provision a resource to package applications into an app block (8c61b346)
    • client-sagemaker: Adding support for timeseries forecasting in the CreateAutoMLJobV2 API. (1c2f6f07)
    • client-cleanrooms: This release adds support for the OR operator in RSQL join match conditions and the ability to control which operators (AND, OR) are allowed in a join match condition. (03a2f9ac)
    • client-glue: This release adds support for AWS Glue Crawler with Iceberg Tables, allowing Crawlers to discover Iceberg Tables in S3 and register them in Glue Data Catalog for query engines to query against. (2a11fd8a)
    • client-dynamodb: This release adds ReturnValuesOnConditionCheckFailure parameter to PutItem, UpdateItem, DeleteItem, ExecuteStatement, BatchExecuteStatement and ExecuteTransaction APIs. When set to ALL_OLD, API returns a copy of the item as it was when a conditional write failed (cef0845a)
    • client-gamelift: Amazon GameLift now supports game builds that use the Amazon Linux 2023 (AL2023) operating system. (ce985baa)
    • clients: use migrated @ smithy packages (#4873) (d036e2e4)
  • 3.362.0 - 2023-06-28

    3.362.0(2023-06-28)

    Documentation Changes
    • api-reference: deprecation message on TypeDoc api reference (#4894) (2b5a3e46)
    New Features
    • client-lambda: Surface ResourceConflictException in DeleteEventSourceMapping (9aafa260)
    • client-internetmonitor: This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to set custom thresholds, for performance and availability drops, for triggering when to create a health event. (fb478aae)
    • client-rds: Amazon Relational Database Service (RDS) now supports joining a RDS for SQL Server instance to a self-managed Active Directory. (a3ee38fa)
    • client-sagemaker: This release adds support for Model Cards Model Registry integration. (75339d28)
    • client-kinesis-analytics-v2: Support for new runtime environment in Kinesis Data Analytics Studio: Zeppelin-0.10, Apache Flink-1.15 (bb74957c)
    • client-s3: The S3 LISTObjects, ListObjectsV2 and ListObjectVersions API now supports a new optional header x-amz-optional-object-attributes. If header contains RestoreStatus as the value, then S3 will include Glacier restore status i.e. isRestoreInProgress and RestoreExpiryDate in List response. (54577854)
    • client-omics: Add Common Workflow Language (CWL) as a supported language for Omics workflows (3cb41fa7)
    Bug Fixes
    • util-retry: correct attempts count on StandardRetryStrategy (#4891) (63c3e60c)
  • 3.360.0 - 2023-06-26

    3.360.0(2023-06-26)

    New Features
    • client-guardduty: Add support for user.extra.sessionName in Kubernetes Audit Logs Findings. (bdf8f40b)
    • client-glue: Timestamp Starting Position For Kinesis and Kafka Data Sources in a Glue Streaming Job (b441cefc)
    • client-connect: This release provides a way to search for existing tags within an instance. Before tagging a resource, ensure consistency by searching for pre-existing key:value pairs. (fff346b4)
    • client-pinpoint: Added time zone estimation support for journeys (cd5ca74b)
    • client-iam: Support for a new API "GetMFADevice" to present MFA device metadata such as device certifications (46a60093)
    Bug Fixes
    • node-http-handler: rejoin on error in writeRequestBody (#4880) (6c8730a9)
  • 3.359.0 - 2023-06-23

    3.359.0(2023-06-23)

    Chores
    Documentation Changes
    • client-verifiedpermissions: Added improved descriptions and new code samples to SDK documentation. (2eb1c550)
    • client-fsx: Update to Amazon FSx documentation. (daf0eeaa)
    • client-rds: Documentation improvements for create, describe, and modify DB clusters and DB instances. (8e56fb35)
    New Features
    • client-devops-guru: This release adds support for encryption via customer managed keys. (89734786)
  • 3.358.0 - 2023-06-22

    3.358.0(2023-06-22)

    New Features
    • client-chime-sdk-identity: AppInstanceBots can be configured to be invoked or not using the Target or the CHIME.mentions attribute for ChannelMessages (b77d9856)
    • client-sfn: Adds support for Versions and Aliases. Adds 8 operations: PublishStateMachineVersion, DeleteStateMachineVersion, ListStateMachineVersions, CreateStateMachineAlias, DescribeStateMachineAlias, UpdateStateMachineAlias, DeleteStateMachineAlias, ListStateMachineAliases (71c4f39e)
    • client-kendra: Introducing Amazon Kendra Retrieve API that can be used to retrieve relevant passages or text excerpts given an input query. (151720c0)
    • client-chime-sdk-messaging: ChannelMessages can be made visible to sender and intended recipient rather than all channel members with the target attribute. For example, a user can send messages to a bot and receive messages back in a group channel without other members seeing them. (a9169d35)
    Tests
    • util-stream: switch lambda test from e2e to integration (#4864) (7c50810c)
  • 3.357.0 - 2023-06-21
  • 3.354.0 - 2023-06-16
  • 3.353.0 - 2023-06-15
  • 3.352.0 - 2023-06-13
  • 3.350.0 - 2023-06-09
  • 3.348.0 - 2023-06-07
  • 3.347.1 - 2023-06-07
  • 3.347.0 - 2023-06-06
  • 3.345.0 - 2023-06-02
  • 3.344.0 - 2023-06-01
  • 3.342.0 - 2023-05-30
  • 3.341.0 - 2023-05-26
  • 3.338.0 - 2023-05-23
  • 3.337.0 - 2023-05-22
  • 3.335.0 - 2023-05-18
  • 3.332.0 - 2023-05-11
  • 3.331.0 - 2023-05-10
  • 3.329.0 - 2023-05-08
  • 3.328.0 - 2023-05-05
  • 3.327.0 - 2023-05-04
  • 3.326.0 - 2023-05-03
  • 3.325.0 - 2023-05-02
  • 3.321.1 - 2023-04-27
  • 3.319.0 - 2023-04-24
  • 3.317.0 - 2023-04-20
  • 3.316.0 - 2023-04-19
  • 3.315.0 - 2023-04-17
  • 3.312.0 - 2023-04-12
  • 3.310.0 - 2023-04-10
  • 3.309.0 - 2023-04-07
  • 3.306.0 - 2023-04-04
  • 3.305.0 - 2023-04-03
  • 3.304.0 - 2023-03-31
  • 3.303.0 - 2023-03-30
  • 3.301.0 - 2023-03-28
  • 3.300.0 - 2023-03-27
  • 3.299.0 - 2023-03-24
  • 3.298.0 - 2023-03-23
  • 3.297.0 - 2023-03-22
  • 3.296.0 - 2023-03-21
  • 3.295.0 - 2023-03-20
  • 3.294.0 - 2023-03-17
  • 3.293.0 - 2023-03-16
  • 3.292.0 - 2023-03-15
  • 3.290.0 - 2023-03-13
  • 3.289.0 - 2023-03-10
  • 3.288.0 - 2023-03-09
  • 3.287.0 - 2023-03-08
  • 3.282.0 - 2023-03-01
  • 3.281.0 - 2023-02-28
  • 3.279.0 - 2023-02-24
  • 3.278.0 - 2023-02-23
  • 3.276.0 - 2023-02-21
  • 3.272.0 - 2023-02-15
  • 3.271.0 - 2023-02-14
  • 3.267.0 - 2023-02-08
  • 3.266.1 - 2023-02-07
  • 3.266.0 - 2023-02-06
  • 3.264.0 - 2023-02-02
  • 3.262.0 - 2023-01-31
  • 3.261.0 - 2023-01-30
  • 3.259.0 - 2023-01-26
  • 3.258.0 - 2023-01-25
  • 3.257.0 - 2023-01-24
  • 3.256.0 - 2023-01-23
  • 3.254.0 - 2023-01-19
  • 3.252.0 - 2023-01-17
  • 3.245.0 - 2023-01-05
  • 3.241.0 - 2022-12-29
  • 3.238.0 - 2022-12-23
  • 3.236.0 - 2022-12-21
  • 3.235.0 - 2022-12-20
  • 3.234.0 - 2022-12-19
  • 3.231.0 - 2022-12-14
  • 3.229.0 - 2022-12-12
  • 3.226.0 - 2022-12-07
  • 3.224.0 - 2022-12-05
  • 3.223.0 - 2022-12-02
  • 3.222.0 - 2022-12-01
  • 3.218.0 - 2022-11-28
  • 3.216.0 - 2022-11-22
  • 3.215.0 - 2022-11-21
  • 3.213.0 - 2022-11-17
  • 3.212.0 - 2022-11-16
  • 3.211.0 - 2022-11-15
  • 3.210.0 - 2022-11-14
  • 3.209.0 - 2022-11-11
  • 3.208.0 - 2022-11-10
  • 3.204.0 - 2022-11-04
  • 3.202.0 - 2022-11-02
  • 3.201.0 - 2022-11-01
  • 3.200.0 - 2022-10-31
  • 3.199.0 - 2022-10-28
  • 3.198.0 - 2022-10-27
  • 3.197.0 - 2022-10-26
  • 3.196.0 - 2022-10-25
  • 3.194.0 - 2022-10-21
  • 3.193.0 - 2022-10-20
  • 3.192.0 - 2022-10-19
  • 3.190.0 - 2022-10-17
from @aws-sdk/client-s3 GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

haolekatalon added a commit that referenced this pull request Oct 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants