Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency aws-cdk-lib to v2.80.0 #139

Closed
wants to merge 1 commit into from
Closed

Update dependency aws-cdk-lib to v2.80.0 #139

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jan 24, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
aws-cdk-lib (source) dependencies minor 2.45.0 -> 2.80.0

By merging this PR, the issue #138 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 8.8 CVE-2023-35165

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.80.0

Compare Source

⚠ BREAKING CHANGES
  • eks: A masters role is no longer provisioned by default. Use the mastersRole property to explicitly pass a role that needs cluster access. In addition, the creation role no longer allows any identity (with the appropriate sts:AssumeRole permissions) to assume it.
Features
Bug Fixes

Alpha modules (2.80.0-alpha.0)

v2.79.1

Compare Source

Bug Fixes
  • bootstrap: bootstrap doesn't work in non-aws partitions anymore (revert security hub finding fix) (#​25272) (4c4014e)

Alpha modules (2.79.1-alpha.0)

v2.79.0

Compare Source

Features
Bug Fixes

Alpha modules (2.79.0-alpha.0)

Bug Fixes
  • servicecatalogappregistry: Revert deprecated method to keep deprecated method in alpha version (b20b123)
  • batch: JobDefinition's ContainerDefinition's Image is synthesized with [Object object] (#​25250) (b3d0d57)

v2.78.0

Compare Source

Features
Bug Fixes

Alpha modules (2.78.0-alpha.0)

v2.77.0

Compare Source

Features
Bug Fixes

Alpha modules (2.77.0-alpha.0)

v2.76.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: this change will deprecated associateStack and associateAttributeGroup in Application Construct.
    The user who are using these two method need to update to use alternative method.
    For associateStack, the alternative method is associateApplicationWithStack
    For associateAttributeGroup, the alternative method is AttributeGroup.associateWith

The user who are using these two method need to update to use alternative method. For associateStack, the alternative method is associateApplicationWithStack For associateAttributeGroup, the alternative method is AttributeGroup.associateWith

Purpose of this PR:

we need to remove deprecated resource before we moving into stable version The method that we remove is: associateStack and associateAttributeGroup

CHANGES:

  1. in lib/application.ts, we remove these two methods and update their corresponding interface
  2. in test/ application.test.ts & test/integ.application.ts, we update application.test.ts and integ.application.ts to remove these two methods' related test

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Features
Bug Fixes

Alpha modules (2.76.0-alpha.0)

v2.75.1

Compare Source

Reverts
  • "fix(core): Add stage prefix to stack name shortening process #​24443

Alpha modules (2.75.1-alpha.0)

v2.75.0

Compare Source

Features
  • aws-lambda: Add AWS Lambda runtime python3.10 (08fb3cd)

Alpha modules (2.75.0-alpha.0)

v2.74.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • batch: ComputeEnvironment has been removed and replaced by ManagedEc2EcsComputeEnvironment, ManagedEc2EksComputeEnvironment, and UnmanagedComputeEnvironment.

JobDefinition has been removed and replaced by EcsJobDefinition, EksJobDefinition, and MultiNodeJobDefinition

Features
Bug Fixes

Alpha modules (2.74.0-alpha.0)

v2.73.0

Compare Source

Features
Bug Fixes

Alpha modules (2.73.0-alpha.0)

v2.72.1

Compare Source

Alpha modules (2.72.1-alpha.0)

v2.72.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cdk-lib: The return type of aws-cdk-lib.aws_ec2.SecurityGroup.determineRuleScope was changed from a tuple ([SecurityGroupBase, string]) to a struct with the same values, because tuple types are not supported over the jsii interoperability layer, but jsii@v1 was incorrectly allowing this to be represented as the JSON primitive type. This made the API unusable in non-JS languages. The type of the metadata property of aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps was changed from an index-only struct to an inline map, because jsii@v1 silently ignored the index signature (which is otherwise un-supported), resulting in an empty object in non-JS/TS languages. As a consequence, the values of that map can no longer be undefined (as jsii does not currently support nullable elements in collections).
Features
Bug Fixes
Miscellaneous Chores

Alpha modules (2.72.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit involves share replacement during the deployment of ApplicationAssociator due to share construct id update. After this change, frequent share replacements due to structural change in Application construct should be avoided. Application.shareApplication starts to require construct id (first argument) and share name (added in ShareOption) as input.
  • ivs: Renamed ChannelProps.name to ChannelProps.channelName
  • Renamed PlaybackKeyPairProps.name to PlaybackKeyPairProps.playbackKeyPairName
  • Channel now generates a physical name if one is not provided
  • PlaybackKeyPair now generates a physical name if one is not provided
Bug Fixes
  • integ-runner: update workflow doesn't support resource replacement (#​24720) (07d3aa7)
  • ivs: Not a standard physical name pattern (#​24706) (7d17fe3)
  • servicecatalogappregistry: RAM Share is replaced on every change to Application (#​24760) (8977d0d)

v2.71.0

Compare Source

Features
Bug Fixes

Alpha modules (2.71.0-alpha.0)

v2.70.0

Compare Source

Features
Bug Fixes

Alpha modules (2.70.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
    Since the application RAM share name is calculated by the application construct, where one method is added. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.
Features
  • servicecatalogappregistry: add attribute groups to an application (#​24672) (7baffa2)

v2.69.0

Compare Source

Features
Bug Fixes

Alpha modules (2.69.0-alpha.0)

Features

v2.68.0

Compare Source

Bug Fixes

Alpha modules (2.68.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
    Since the application RAM share name is calculated by the application construct, where one property is removed. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.
Features

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jan 24, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from 8b0e986 to c7a6f89 Compare August 16, 2024 22:53
@mend-for-github-com mend-for-github-com bot changed the title Update dependency aws-cdk-lib to v2.88.0 Update dependency aws-cdk-lib to v2.80.0 Aug 16, 2024
@gaiksaya
Copy link
Member

We are not using EKS or fargate. Hence do not need to upgrade for given CVE

@gaiksaya gaiksaya closed this Aug 23, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/aws-cdk-lib-2.x branch August 23, 2024 23:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@bbarani bbarani Awaiting requested review from bbarani

@TheAlgo TheAlgo Awaiting requested review from TheAlgo TheAlgo is a code owner

@DandyDeveloper DandyDeveloper Awaiting requested review from DandyDeveloper DandyDeveloper is a code owner

@peterzhuamazon peterzhuamazon Awaiting requested review from peterzhuamazon peterzhuamazon is a code owner

@prudhvigodithi prudhvigodithi Awaiting requested review from prudhvigodithi prudhvigodithi is a code owner

@gaiksaya gaiksaya Awaiting requested review from gaiksaya gaiksaya is a code owner

Assignees
No one assigned
Labels
security fix Security fix generated by Mend
Projects
Engineering Effectiveness Board
Status: ✅ Done
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@gaiksaya