diff --git a/CHANGELOG.md b/CHANGELOG.md index d73acc64..b99adc29 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). +## [6.1.8] - 2024-08-22 + +### Security + +- Security updates for npm packages + ## [6.1.7] - 2024-08-09 ### Security diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..5a24f157 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,11 @@ +# Reporting Security Issues + +We take all security reports seriously. +When we receive such reports, +we will investigate and subsequently address +any potential vulnerabilities as quickly as possible. +If you discover a potential security issue in this project, +please notify AWS/Amazon Security via our +[vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/) +or directly via email to [AWS Security](mailto:aws-security@amazon.com). +Please do *not* create a public GitHub issue in this project. diff --git a/solution-manifest.yaml b/solution-manifest.yaml index a1252ac8..8246095d 100644 --- a/solution-manifest.yaml +++ b/solution-manifest.yaml @@ -1,6 +1,6 @@ id: SO0021 name: video-on-demand-on-aws -version: v6.1.7 +version: v6.1.8 cloudformation_templates: - template: video-on-demand-on-aws.template main_template: true diff --git a/source/cdk/package-lock.json b/source/cdk/package-lock.json index 47b25c26..6423862c 100644 --- a/source/cdk/package-lock.json +++ b/source/cdk/package-lock.json @@ -1,12 +1,12 @@ { "name": "video-on-demand-on-aws", - "version": "6.1.7", + "version": "6.1.8", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "video-on-demand-on-aws", - "version": "6.1.7", + "version": "6.1.8", "license": "Apache-2.0", "dependencies": { "@aws-cdk/aws-servicecatalogappregistry-alpha": "^2.93.0-alpha.0", diff --git a/source/cdk/package.json b/source/cdk/package.json index 487eb457..1ea4d79f 100644 --- a/source/cdk/package.json +++ b/source/cdk/package.json @@ -2,7 +2,7 @@ "name": "video-on-demand-on-aws", "description": "Synthesize templates for Video on Demand on AWS using AWS Cloud Development Kit (CDK).", "license": "Apache-2.0", - "version": "6.1.7", + "version": "6.1.8", "bin": { "cdk": "bin/vod.js" }, diff --git a/source/custom-resource/package-lock.json b/source/custom-resource/package-lock.json index 5bd0a48a..785b187b 100644 --- a/source/custom-resource/package-lock.json +++ b/source/custom-resource/package-lock.json @@ -9,7 +9,7 @@ "version": "1.0.0", "license": "Apache-2.0", "dependencies": { - "axios": "^1.7.2", + "axios": "^1.7.4", "uuid": "^9.0.0" }, "devDependencies": { @@ -3114,9 +3114,9 @@ } }, "node_modules/axios": { - "version": "1.7.2", - "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.2.tgz", - "integrity": "sha512-2A8QhOMrbomlDuiLeK9XibIBzuHeRcqqNOHp0Cyp5EoJ1IFDh+XZH3A6BkXtv0K4gFGCI0Y4BM7B1wOEi0Rmgw==", + "version": "1.7.4", + "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz", + "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==", "dependencies": { "follow-redirects": "^1.15.6", "form-data": "^4.0.0", diff --git a/source/custom-resource/package.json b/source/custom-resource/package.json index 84a9d5c2..89eecf03 100644 --- a/source/custom-resource/package.json +++ b/source/custom-resource/package.json @@ -11,7 +11,7 @@ "test": "jest --coverage" }, "dependencies": { - "axios": "^1.7.2", + "axios": "^1.7.4", "uuid": "^9.0.0" }, "devDependencies": {