Merge pull request #149 from aws-solutions/feature/v2.3.2

Update to version v2.3.2

Author: fhoueto-amz

.gitignore

@@ -274,3 +274,13 @@ source/lambda/wf_publish_topic_model/test/fixtures/output/doc-topics.csv
 source/lambda/wf_publish_topic_model/test/fixtures/output/topic-terms.csv
 
 .idea/
+
+# 3rd party libraries
+source/lambda/ingestion-youtube/proto/
+source/lambda/ingestion-youtube/proto_plus-1.24.0.dist-info/
+source/lambda/layers/python_lambda_layer/bin/
+source/lambda/layers/python_lambda_layer/certifi/
+source/lambda/layers/python_lambda_layer/charset_normalizer/
+source/lambda/layers/python_lambda_layer/idna/
+source/lambda/layers/python_lambda_layer/requests/
+source/lambda/layers/python_lambda_layer/urllib3/

CHANGELOG.md

@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.3.2] - 2024-08-06
+
+### Security
+- Patched fast-xml-parser vulnerability
+
 ## [2.3.1] - 2024-07-02
 
 ### Security

source/lambda/firehose-text-proxy/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "firehose-text-proxy",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "Lambda proxy to write to Firehose to generate Glue tables through S3",
   "main": "index.js",
   "scripts": {
@@ -22,5 +22,8 @@
     "chai": "^4.3.7",
     "jest": "^29.7.0",
     "sinon": "^17.0.1"
+  },
+  "overrides": {
+    "fast-xml-parser": "^4.4.1"
   }
 }

source/lambda/firehose-text-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ingestion-consumer",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "The consumer of the Kinesis stream to receive social media feed",
   "main": "index.js",
   "scripts": {
@@ -21,5 +21,8 @@
   },
   "dependencies": {
     "@aws-sdk/client-sfn": "^3.369.0"
+  },
+  "overrides": {
+    "fast-xml-parser": "^4.4.1"
   }
 }

source/lambda/ingestion-consumer/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "ingestion-producer",
-  "version": "2.3.1",
+  "version": "2.3.2",
   "description": "This function pulls data from the twitter stream and pushes it to Kinesis Stream.",
   "main": "feed-producer.js",
   "scripts": {
@@ -26,5 +26,8 @@
     "chai": "^4.3.7",
     "jest": "^29.7.0",
     "sinon": "^17.0.1"
+  },
+  "overrides": {
+    "fast-xml-parser": "^4.4.1"
   }
 }

source/lambda/ingestion-consumer/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ingestion-publish-subreddit",
-    "version": "2.3.1",
+    "version": "2.3.2",
     "description": "This function publishes the events for subreddits to ingest information from",
     "main": "index.js",
     "scripts": {
@@ -21,5 +21,8 @@
         "aws-sdk-client-mock": "^3.0.1",
         "chai": "^4.3.7",
         "jest": "^29.7.0"
+    },
+    "overrides": {
+      "fast-xml-parser": "^4.4.1"
     }
 }