v1.23.0

Bedrock Engineer v1.23.0

New Feature

• feat: run executeCommand without a shell and harden confirmation flow (7018226)
• feat: require user confirmation for executeCommand and restrict shell syntax (967c6a6)
• feat: add Claude Sonnet 4 and Claude Opus 4 model support (791e76a)

Fix

• fix: reject unresolvable executables before spawning on Windows (51ccc42)

Other

• chore: update version to 1.23.0 (826125c)
• Merge pull request #361 from aws-samples/fix/execute-command-hardening (57f76c6)
• Merge pull request #339 from aws-samples/claude-opus47 (f05c8de)
• style: fix code formatting and type safety issues (06abe76)
• chore: update AWS SDK to v3.1030.0 and remove legacy Claude models (08f4904)
• Merge pull request #320 from aws-samples/dependabot/npm_and_yarn/socket.io-parser-4.2.6 (c2a1d4e)
• Merge pull request #321 from aws-samples/dependabot/npm_and_yarn/flatted-3.4.2 (b42363f)
• Merge pull request #323 from aws-samples/dependabot/npm_and_yarn/multi-bf05dc1ecf (ab1e68e)
• Merge pull request #324 from aws-samples/dependabot/npm_and_yarn/yaml-2.8.3 (127a4ae)
• Merge pull request #325 from aws-samples/dependabot/npm_and_yarn/multi-4dd8502de9 (310daa7)
• Merge pull request #326 from aws-samples/dependabot/npm_and_yarn/brace-expansion-1.1.13 (296a78c)
• Merge pull request #327 from aws-samples/dependabot/npm_and_yarn/xmldom/xmldom-0.8.12 (e674b04)
• chore(deps): bump @xmldom/xmldom from 0.8.10 to 0.8.12 (43e4046)
• chore(deps-dev): bump brace-expansion from 1.1.12 to 1.1.13 (b04f225)
• chore(deps): bump path-to-regexp (ad8312b)
• chore(deps): bump yaml from 2.8.0 to 2.8.3 (da67dba)
• chore(deps): bump picomatch (8edc1b2)
• chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (1708a80)
• chore(deps): bump socket.io-parser from 4.2.4 to 4.2.6 (945fdfa)

Platform

• macOS (Universal)
• Windows