ZeusCloud icon indicating copy to clipboard operation
ZeusCloud copied to clipboard

[Snyk] Upgrade @aws-sdk/client-secrets-manager from 3.329.0 to 3.360.0

Open vishjain opened this issue 1 year ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @aws-sdk/client-secrets-manager from 3.329.0 to 3.360.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user. :sparkles: Snyk has automatically assigned this pull request, set who gets assigned.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 20 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2023-06-26.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-5668858
589/1000
Why? Has a fix available, CVSS 7.5
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @aws-sdk/client-secrets-manager
  • 3.360.0 - 2023-06-26

    3.360.0(2023-06-26)

    New Features
    • client-guardduty: Add support for user.extra.sessionName in Kubernetes Audit Logs Findings. (bdf8f40b)
    • client-glue: Timestamp Starting Position For Kinesis and Kafka Data Sources in a Glue Streaming Job (b441cefc)
    • client-connect: This release provides a way to search for existing tags within an instance. Before tagging a resource, ensure consistency by searching for pre-existing key:value pairs. (fff346b4)
    • client-pinpoint: Added time zone estimation support for journeys (cd5ca74b)
    • client-iam: Support for a new API "GetMFADevice" to present MFA device metadata such as device certifications (46a60093)
    Bug Fixes
    • node-http-handler: rejoin on error in writeRequestBody (#4880) (6c8730a9)
  • 3.359.0 - 2023-06-23

    3.359.0(2023-06-23)

    Chores
    Documentation Changes
    • client-verifiedpermissions: Added improved descriptions and new code samples to SDK documentation. (2eb1c550)
    • client-fsx: Update to Amazon FSx documentation. (daf0eeaa)
    • client-rds: Documentation improvements for create, describe, and modify DB clusters and DB instances. (8e56fb35)
    New Features
    • client-devops-guru: This release adds support for encryption via customer managed keys. (89734786)
  • 3.358.0 - 2023-06-22

    3.358.0(2023-06-22)

    New Features
    • client-chime-sdk-identity: AppInstanceBots can be configured to be invoked or not using the Target or the CHIME.mentions attribute for ChannelMessages (b77d9856)
    • client-sfn: Adds support for Versions and Aliases. Adds 8 operations: PublishStateMachineVersion, DeleteStateMachineVersion, ListStateMachineVersions, CreateStateMachineAlias, DescribeStateMachineAlias, UpdateStateMachineAlias, DeleteStateMachineAlias, ListStateMachineAliases (71c4f39e)
    • client-kendra: Introducing Amazon Kendra Retrieve API that can be used to retrieve relevant passages or text excerpts given an input query. (151720c0)
    • client-chime-sdk-messaging: ChannelMessages can be made visible to sender and intended recipient rather than all channel members with the target attribute. For example, a user can send messages to a bot and receive messages back in a group channel without other members seeing them. (a9169d35)
    Tests
    • util-stream: switch lambda test from e2e to integration (#4864) (7c50810c)
  • 3.357.0 - 2023-06-21

    3.357.0(2023-06-21)

    Documentation Changes
    • client-dynamodb: Documentation updates for DynamoDB (5463a95a)
    New Features
    • client-mq: The Cross Region Disaster Recovery feature allows to replicate a brokers state from one region to another in order to provide customers with multi-region resiliency in the event of a regional outage. (983be322)
    • client-sagemaker: This release provides support in SageMaker for output files in training jobs to be uploaded without compression and enable customer to deploy uncompressed model from S3 to real-time inference Endpoints. In addition, ml.trn1n.32xlarge is added to supported instance type list in training job. (f0ede901)
    • client-mediaconvert: This release introduces the bandwidth reduction filter for the HEVC encoder, increases the limits of outputs per job, and updates support for the Nagra SDK to version 1.14.7. (dd88e3f4)
    • client-inspector2: This release adds support for Software Bill of Materials (SBOM) export and the general availability of code scanning for AWS Lambda functions. (d57a444d)
    • client-transfer: This release adds a new parameter StructuredLogDestinations to CreateServer, UpdateServer APIs. (8f0033bb)
    • client-emr: This release introduces a new Amazon EMR EPI called ListSupportedInstanceTypes that returns a list of all instance types supported by a given EMR release. (9875d036)
    • clients: automatic blob type conversions (#4836) (60ec921c)
    Tests
    • stub credentialDefaultProvider in test-http-handler (#4781) (20391b1c)
    • util-stream: skip test for CI (22bb15d0)
  • 3.354.0 - 2023-06-16

    3.354.0(2023-06-16)

    Chores
    Documentation Changes
    • client-iam: Documentation updates for AWS Identity and Access Management (IAM). (8d894a17)
    New Features
    • client-s3: This release adds SDK support for request-payer request header and request-charged response header in the "GetBucketAccelerateConfiguration", "ListMultipartUploads", "ListObjects", "ListObjectsV2" and "ListObjectVersions" S3 APIs. (20bc94f4)
    • client-application-discovery-service: Add Amazon EC2 instance recommendations export (9df6e881)
    • client-account: Improve pagination support for ListRegions (2d430633)
    • client-connect: Updates the *InstanceStorageConfig APIs to support a new ResourceType: SCREEN_RECORDINGS to enable screen recording and specify the storage configurations for publishing the recordings. Also updates DescribeInstance and ListInstances APIs to include InstanceAccessUrl attribute in the API response. (fa804c54)
  • 3.353.0 - 2023-06-15

    3.353.0(2023-06-15)

    Chores
    Documentation Changes
    • client-guardduty: Updated descriptions for some APIs. (3d115304)
    • client-efs: Documentation updates for EFS. (13d4dc2f)
    New Features
    • clients: update client endpoints as of 2023-06-15 (f6dd6a74)
    • client-auditmanager: This release introduces 2 Audit Manager features: CSV exports and new manual evidence options. You can now export your evidence finder results in CSV format. In addition, you can now add manual evidence to a control by entering free-form text or uploading a file from your browser. (2c787644)
    • client-location: Amazon Location Service adds categories to places, including filtering on those categories in searches. Also, you can now add metadata properties to your geofences. (a7c47aba)
    Bug Fixes
    • property-provider: avoid generating default rejected promise when chaining (#4843) (ecc9b5fd)
    • util-dynamodb: reorder marshall function overload signatures (#4829) (cb4a0e30)
    Tests
    • credential-provider-imds:
    • client-cognito-identity: increase process kill timeout to 5000ms (#4839) (77364162)

    For list of updated packages, view updated-packages.md in assets-3.353.0.zip

  • 3.352.0 - 2023-06-13
  • 3.350.0 - 2023-06-09
  • 3.348.0 - 2023-06-07
  • 3.347.1 - 2023-06-07
  • 3.347.0 - 2023-06-06
  • 3.345.0 - 2023-06-02
  • 3.344.0 - 2023-06-01
  • 3.342.0 - 2023-05-30
  • 3.341.0 - 2023-05-26
  • 3.338.0 - 2023-05-23
  • 3.337.0 - 2023-05-22
  • 3.335.0 - 2023-05-18
  • 3.334.0 - 2023-05-16
  • 3.332.0 - 2023-05-11
  • 3.329.0 - 2023-05-08
from @aws-sdk/client-secrets-manager GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

vishjain avatar Jul 19 '23 06:07 vishjain

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
@aws-sdk/client-secrets-manager 3.329.0...3.360.0 None +24/-22 2.49 MB aws-sdk-bot

socket-security[bot] avatar Jul 19 '23 06:07 socket-security[bot]