Skip to content

v5.26

Choose a tag to compare

@anilkvasamsetti anilkvasamsetti released this 29 Jun 21:09
96579b7

v5.26

Security

  • Python 3.12 runtime (from 3.10)
  • urllib3 upgraded to 2.x (CVE-2026-21441)
  • Log injection prevention across all Lambda functions (CWE-117)
  • IAM least-privilege: Connect and S3 actions scoped from * to resource-level ARNs
  • New SalesforceExecuteAWSServiceUser parameter to restrict sfExecuteAWSService Lambda invocation

Improvements

  • Contact Lens: regex-based redacted recording path construction replaces S3 pagination
  • Contact Lens: narrowed S3 paginator prefix to reduce timeouts
  • Historical reporting: multi-region support via Region__c field
  • Historical reporting: case-insensitive Salesforce field handling
  • Historical reporting: field validation prevents failures from unsupported metrics