Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency aws-cdk-lib to v2.80.0 #39

Closed
wants to merge 1 commit into from
Closed

Update dependency aws-cdk-lib to v2.80.0 #39

wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jun 21, 2023 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
aws-cdk-lib dependencies minor 2.45.0 -> 2.80.0

By merging this PR, the issue #24 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 8.8 CVE-2023-35165

Release Notes

aws/aws-cdk

v2.80.0

Compare Source

⚠ BREAKING CHANGES
  • eks: A masters role is no longer provisioned by default. Use the mastersRole property to explicitly pass a role that needs cluster access. In addition, the creation role no longer allows any identity (with the appropriate sts:AssumeRole permissions) to assume it.
Features
Bug Fixes

Alpha modules (2.80.0-alpha.0)

v2.79.1

Compare Source

Bug Fixes
  • bootstrap: bootstrap doesn't work in non-aws partitions anymore (revert security hub finding fix) (#​25272) (4c4014e)

Alpha modules (2.79.1-alpha.0)

v2.79.0

Compare Source

Features
Bug Fixes

Alpha modules (2.79.0-alpha.0)

Bug Fixes
  • servicecatalogappregistry: Revert deprecated method to keep deprecated method in alpha version (b20b123)
  • batch: JobDefinition's ContainerDefinition's Image is synthesized with [Object object] (#​25250) (b3d0d57)

v2.78.0

Compare Source

Features
Bug Fixes

Alpha modules (2.78.0-alpha.0)

v2.77.0

Compare Source

Features
Bug Fixes

Alpha modules (2.77.0-alpha.0)

v2.76.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: this change will deprecated associateStack and associateAttributeGroup in Application Construct.
    The user who are using these two method need to update to use alternative method.
    For associateStack, the alternative method is associateApplicationWithStack
    For associateAttributeGroup, the alternative method is AttributeGroup.associateWith

The user who are using these two method need to update to use alternative method. For associateStack, the alternative method is associateApplicationWithStack For associateAttributeGroup, the alternative method is AttributeGroup.associateWith

Purpose of this PR:

we need to remove deprecated resource before we moving into stable version The method that we remove is: associateStack and associateAttributeGroup

CHANGES:

  1. in lib/application.ts, we remove these two methods and update their corresponding interface
  2. in test/ application.test.ts & test/integ.application.ts, we update application.test.ts and integ.application.ts to remove these two methods' related test

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Features
Bug Fixes

Alpha modules (2.76.0-alpha.0)

v2.75.1

Compare Source

Reverts
  • "fix(core): Add stage prefix to stack name shortening process #​24443

Alpha modules (2.75.1-alpha.0)

v2.75.0

Compare Source

Features
  • aws-lambda: Add AWS Lambda runtime python3.10 (08fb3cd)

Alpha modules (2.75.0-alpha.0)

v2.74.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • batch: ComputeEnvironment has been removed and replaced by ManagedEc2EcsComputeEnvironment, ManagedEc2EksComputeEnvironment, and UnmanagedComputeEnvironment.

JobDefinition has been removed and replaced by EcsJobDefinition, EksJobDefinition, and MultiNodeJobDefinition

Features
Bug Fixes

Alpha modules (2.74.0-alpha.0)

v2.73.0

Compare Source

Features
Bug Fixes

Alpha modules (2.73.0-alpha.0)

v2.72.1

Compare Source

Alpha modules (2.72.1-alpha.0)

v2.72.0

Compare Source

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • cdk-lib: The return type of aws-cdk-lib.aws_ec2.SecurityGroup.determineRuleScope was changed from a tuple ([SecurityGroupBase, string]) to a struct with the same values, because tuple types are not supported over the jsii interoperability layer, but jsii@v1 was incorrectly allowing this to be represented as the JSON primitive type. This made the API unusable in non-JS languages. The type of the metadata property of aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps was changed from an index-only struct to an inline map, because jsii@v1 silently ignored the index signature (which is otherwise un-supported), resulting in an empty object in non-JS/TS languages. As a consequence, the values of that map can no longer be undefined (as jsii does not currently support nullable elements in collections).
Features
Bug Fixes
Miscellaneous Chores

Alpha modules (2.72.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit involves share replacement during the deployment of ApplicationAssociator due to share construct id update. After this change, frequent share replacements due to structural change in Application construct should be avoided. Application.shareApplication starts to require construct id (first argument) and share name (added in ShareOption) as input.
  • ivs: Renamed ChannelProps.name to ChannelProps.channelName
  • Renamed PlaybackKeyPairProps.name to PlaybackKeyPairProps.playbackKeyPairName
  • Channel now generates a physical name if one is not provided
  • PlaybackKeyPair now generates a physical name if one is not provided
Bug Fixes
  • integ-runner: update workflow doesn't support resource replacement (#​24720) (07d3aa7)
  • ivs: Not a standard physical name pattern (#​24706) (7d17fe3)
  • servicecatalogappregistry: RAM Share is replaced on every change to Application (#​24760) (8977d0d)

v2.71.0

Compare Source

Features
Bug Fixes

Alpha modules (2.71.0-alpha.0)

v2.70.0

Compare Source

Features
Bug Fixes

Alpha modules (2.70.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
    Since the application RAM share name is calculated by the application construct, where one method is added. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.
Features
  • servicecatalogappregistry: add attribute groups to an application (#​24672) (7baffa2)

v2.69.0

Compare Source

Features
Bug Fixes

Alpha modules (2.69.0-alpha.0)

Features

v2.68.0

Compare Source

Bug Fixes

Alpha modules (2.68.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
  • servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
    Since the application RAM share name is calculated by the application construct, where one property is removed. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.
Features

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 21, 2023
@codecov
Copy link

codecov bot commented Jun 21, 2023 •
edited
Loading

Codecov Report

Merging #39 (472f734) into main (29f9a23) will not change coverage.
Report is 1 commits behind head on main.
The diff coverage is 100.00%.

@@           Coverage Diff           @@
##             main      #39   +/-   ##
=======================================
  Coverage   78.22%   78.22%           
=======================================
  Files           6        6           
  Lines         418      418           
  Branches      125      125           
=======================================
  Hits          327      327           
  Misses         91       91
Files Changed Coverage Δ
lib/infra/infra-stack.ts 90.62% <100.00%> (ø)

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from 25fd6e1 to c327e9d Compare June 26, 2023 17:11
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch 2 times, most recently from 21cc0a1 to e424ec3 Compare July 31, 2023 11:06
@mend-for-github-com mend-for-github-com bot changed the title Update dependency aws-cdk-lib to v2.80.0 Update dependency aws-cdk-lib to v2.88.0 Jul 31, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from e424ec3 to 498b070 Compare August 1, 2023 15:32
@mend-for-github-com mend-for-github-com bot changed the title Update dependency aws-cdk-lib to v2.88.0 Update dependency aws-cdk-lib to v2.80.0 Aug 1, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from 498b070 to 2d60d09 Compare August 1, 2023 22:28
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from 2d60d09 to 54edb89 Compare August 30, 2023 03:06
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch 2 times, most recently from 330cffc to 0b00cba Compare September 7, 2023 03:02
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/aws-cdk-lib-2.x branch from 0b00cba to 472f734 Compare September 9, 2023 03:19
@gaiksaya
Copy link
Member

gaiksaya commented Sep 9, 2023 •
edited
Loading

From CVE details:

If you are using the eks.Cluster or eks.FargateCluster construct we need you to take action. Other users are not affected and can stop reading.

This code does not use any hence closing it. @rishabh6788 Please review and reopen if required.

@gaiksaya gaiksaya closed this Sep 9, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/aws-cdk-lib-2.x branch September 9, 2023 04:05
@gaiksaya gaiksaya restored the whitesource-remediate/aws-cdk-lib-2.x branch September 9, 2023 04:05
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/aws-cdk-lib-2.x branch September 10, 2023 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@peterzhuamazon peterzhuamazon Awaiting requested review from peterzhuamazon peterzhuamazon is a code owner

@bbarani bbarani Awaiting requested review from bbarani

@gaiksaya gaiksaya Awaiting requested review from gaiksaya gaiksaya is a code owner

@rishabh6788 rishabh6788 Awaiting requested review from rishabh6788 rishabh6788 is a code owner

@zelinh zelinh Awaiting requested review from zelinh zelinh is a code owner

@jordarlu jordarlu Awaiting requested review from jordarlu

@prudhvigodithi prudhvigodithi Awaiting requested review from prudhvigodithi prudhvigodithi is a code owner

@Divyaasm Divyaasm Awaiting requested review from Divyaasm Divyaasm is a code owner

Assignees
No one assigned
Labels
security fix Security fix generated by Mend
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@gaiksaya