Merge pull request #232 from aws-solutions/release/v3.2.4

Updated to version v3.2.4

CHANGELOG.md

@@ -3,6 +3,10 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.2.4] - 2023-02-06
+### Changed
+- Upgraded pytest to mitigate CVE-2022-42969
+- Upgraded requests and subsequently certifi to mitigate CVE-2022-23491
 ## [3.2.3] - 2022-12-13
 ### Changed
 - Add region as prefix to application attribute group name to avoid conflict with name starting with AWS.

source/access_handler/requirements.txt

@@ -1,2 +1,2 @@
-requests>=2.22.0
-backoff>=1.8.0
+requests>=2.28.2
+backoff>=2.2.1

source/custom_resource/requirements.txt

@@ -1,2 +1,2 @@
-requests>=2.22.0
-backoff>=1.8.0
+requests>=2.28.2
+backoff>=2.2.1

source/helper/requirements.txt

@@ -1,2 +1,2 @@
-backoff>=1.8.0
-requests>=2.22.0
+backoff>=2.2.1
+requests>=2.28.2

source/ip_retention_handler/requirements.txt

@@ -1,2 +1,2 @@
-requests>=2.22.0
-backoff>=1.8.0
+requests>=2.28.2
+backoff>=2.2.1

source/ip_retention_handler/testing_requirements.txt

@@ -1,12 +1,12 @@
 botocore>=1.12.99
 boto3>=1.9.99
-mock>=2.0.0
-moto>=1.3.8
-pytest>=4.4.1
-pytest-mock>=1.10.4
-pytest-runner>=2.11.1
+mock>=5.0.0
+moto>=4.0.13
+pytest>=7.2.0
+pytest-mock>=3.10.0
+pytest-runner>=6.0.0
 uuid>=1.30
-backoff>=1.8.0
-freezegun>=0.3.15
+backoff>=2.2.1
+freezegun>=1.2.2
 pytest-cov
 pytest-env

source/log_parser/requirements.txt

@@ -1,2 +1,2 @@
-backoff>=1.8.0
-requests>=2.22.0
+backoff>=2.2.1
+requests>=2.28.2

source/log_parser/testing_requirements.txt

@@ -1,12 +1,12 @@
 botocore>=1.12.99
 boto3>=1.9.99
-mock>=2.0.0
-moto>=1.3.8
-pytest>=4.4.1
-pytest-mock>=1.10.4
-pytest-runner>=2.11.1
+mock>=5.0.0
+moto>=4.0.13
+pytest>=7.2.0
+pytest-mock>=3.10.0
+pytest-runner>=6.0.0
 uuid>=1.30
-backoff>=1.8.0
-freezegun>=0.3.15
+backoff>=2.2.1
+freezegun>=1.2.2
 pytest-cov
 pytest-env

source/reputation_lists_parser/requirements.txt

@@ -1,2 +1,2 @@
-requests>=2.22.0
-backoff>=1.8.0
+requests>=2.28.2
+backoff>=2.2.1