Update dependency serverless to v3 - autoclosed

[mend-for-github.aaakk.us.kg]

This PR contains the following updates:

Package	Type	Update	Change
serverless (source)	dependencies	major	^1.47.0 -> ^3.0.0

By merging this PR, the issue #20 will be automatically resolved and closed:

Severity	CVSS Score	CVE
High	9.8	CVE-2020-12265
High	9.8	CVE-2020-28472
High	9.8	CVE-2020-36632
High	9.8	CVE-2020-7788
High	9.8	CVE-2021-23440
High	9.8	CVE-2021-44906
High	9.8	CVE-2021-44906
High	9.8	CVE-2022-48285
High	9.1	CVE-2021-42581
High	7.8	CVE-2021-43138
High	7.5	CVE-2019-20149
High	7.5	CVE-2021-3795
High	7.5	CVE-2021-3807
High	7.5	CVE-2021-3807
High	7.5	CVE-2021-43307
High	7.5	CVE-2022-24785
High	7.5	CVE-2022-31129
High	7.5	CVE-2022-38900
High	7.5	WS-2019-0310
High	7.5	WS-2020-0044
High	7.3	CVE-2020-8116
High	7.2	CVE-2021-23337
Medium	6.5	CVE-2020-8244
Medium	6.1	CVE-2022-0235
Medium	6.1	CVE-2022-0235
Medium	5.6	CVE-2020-7598
Medium	5.6	CVE-2020-7598
Medium	5.3	CVE-2020-15168
Medium	5.3	CVE-2020-15168
Medium	5.3	CVE-2020-28500
Medium	5.3	CVE-2021-23413
Medium	5.3	CVE-2022-33987

---

Release Notes

serverless/serverless

v3.19.0

Compare Source

Features

• Console: Support new user settings format (#​11115) (21461b5) (Mariusz Nowak)
• Recognize Fn::Select in environment config schema (#​11114) (ed111e0) (John Minns)

Maintenance Improvements

• Improve CLI messages when onboarding into Console (#​11123) (cefb762) (Matthieu Napoli)

3.18.2 (2022-05-23)

Bug Fixes

• AWS Deploy: Ensure to only remove specific stage deploy artifacts (#​11100) (9eae965) (Ryan Hartkopf)

Maintenance Improvements

• Console: Upgrade @serverless/aws-lambda-otel-extension (#​11106) (5327b70) (Mariusz Nowak)
• Telemetry: Recognize isUsingCompose (#​11105) (007c294) (Piotr Grzesik)

3.18.1 (2022-05-20)

Bug Fixes

• CLI Onboarding:
  • Recognize Dashboard providers for deployment when Dashboard monitoring is turned off (#​11096) (38ff287) (Mariusz Nowak)
  • Support Dashboard providers with the Console enabled (#​11096) (8825e86) (Mariusz Nowak)

Maintenance Improvements

• Console: Improve user error message (#​11094) (6748642) (Mariusz Nowak)

v3.18.2

Compare Source

v3.18.1

Compare Source

v3.18.0

Compare Source

Features

• Console:
  • Switch to a new authentication system (#​11060) (d40866a) (Mariusz Nowak)
  • In uneven scenario let user decide whether intent is to login into the Dashboard or the Console(#​11045) (0f21362) (Mariusz Nowak)
  • Report org mismatch with a meaningful error (#​11060) (ecaeb1f) (Mariusz Nowak)
  • Support console.org setting (so different org settings can be used for the Dashboard and the Console) (#​11060) (3b3cfae) (Mariusz Nowak)
• AWS MSK: Add support for SASL/SCRAM authentication (#​11060) (184cb03) (Ariel Gordone)
• AWS S3: Support forceDeploy setting (#​11066) (5af44a4) (Simon Archer)
• AWS Lambda: Recognize all variants of supported log retention days (#​11076) (a4d0ad5) (Brian Celenza)

Bug Fixes

• AWS Lambda: Fix support for lambdas with provisioned concurrency on with url: true (#​11045) (2107aec) (Piotr Grzesik)
• CLI: Fix CLI command validation when using custom providers (#​11080) (5004fb1) (Mariusz Nowak)
• Variables: Fix reporting of unresolved sources (#​11080) (77e21f9) (Mariusz Nowak)

Maintenance Improvements

• Console:
  • Rely on generic apiRequest for ingestion tokens rotation (#​11060) (#​11060) (0cecae7) (Mariusz Nowak)
  • Separate Dashboard & Console login logic (#​11060) (443fa4b) (Mariusz Nowak)
• CLI Onboarding: Generalize isConsole resolution (#​11060) (caaa3c8) (Mariusz Nowak)

v3.17.0

Compare Source

Features

• AWS Lambda: Add support for nodejs16.x runtime (#​11049) (719766b) (Hibanka)
• AWS Websocket: Allow propagating tags to Websocket APIGW (#​10931) (22e4842) (tjurdzinski)

v3.16.0

Compare Source

Features

• AWS Deploy: New option to deploy with CloudFormation without using changesets, which is faster. Learn more in the documentation. (#​11016) (efa3a28) (Piotr Grzesik)

Bug Fixes

• CLI: Do not run compose for non-service commands (#​11017) (e56bc4b) (Piotr Grzesik)
• Allow S3 event rule prefix and suffix to use CF functions (#​11018) (0279e1e) (Matthew Crouch)
• Ensure to attempt minimal config resolution for plugin commands (#​11005) (af9a238) (Piotr Grzesik)
• Ensure to not add double entries during plugin install (#​11005) (c4ca97d) (Piotr Grzesik)

Maintenance Improvements

• AWS Local Invocation: Rely on observable spawn (#​11002) (6d97496) (Mariusz Nowak)
• Console:
  • Configure login as standalone command (#​11003) (fffaf9c) (Mariusz Nowak)
  • Configure logout as standalone command (#​11003) (70ca359) (Mariusz Nowak)

3.15.2 (2022-04-22)

Maintenance Improvements

• Console: Report requests and responses to server (#​10999) (fa8243f) (Mariusz Nowak)

3.15.1 (2022-04-22)

Maintenance Improvements

• Console:
  • Propagate disableLogsCollection to extension user settings (#​10995) (4521eb7) (Mariusz Nowak)
  • Support disableRequestResponseMonitoring setting (#​10995) (e5c088f) (Mariusz Nowak)
• Telemetry:
  • Fix Console org reporting (#​10995) (c0aabb4) (Mariusz Nowak)
  • Debug log for telemetry payload (#​10995) (db67962) (Mariusz Nowak)

3.15.0 (2022-04-20)

Features

• Introduce Serverless Framework Compose, a new feature that enables deploying multiple services in one command, in parallel, or ordered by dependencies

Maintenance Improvements

• Handle @serverless/compose install in non-interactive environments (#​10984) (75885cb) (Piotr Grzesik)
• Support custom error message for variables resolution (#​10985) (f7ffb19) (Piotr Grzesik)

v3.15.2

Compare Source

v3.15.1

Compare Source

v3.15.0

Compare Source

v3.14.0

Compare Source

Features

• AWS Websocket: Add ability to configure log format and types (#​10956) (82ce1c8) (Ariette)

Maintenance Improvements

• Enable triage process to run @serverless/compose (#​10950) (401c721) (Piotr Grzesik)

v3.13.0

Compare Source

Features

• Variables: Ensure support for promise properties at file source (#​10949) (8dae213) (Mariusz Nowak)

Bug Fixes

• AWS API Gateway: Correctly construct resource name for schema (#​10940) (0a0f6c6) (Piotr Grzesik)
• AWS Local Invocation: Ensure environment variables resolution for docker invoke (#​10962) (1a8e7d9) (Sergii Dolgushev)
• CLI: Do not attempt to resolve full config for login (#​10942) (9b62d14) (Piotr Grzesik)
• Standalone: Ensure proper npm bundling (#​10941) (cf482f0) (Piotr Grzesik)

Maintenance Improvements

• Console: Document --console with a link to documentation (#​10951) (23a5ea3) (Mariusz Nowak)
• Telemetry: Ensure to pass unique id with events (#​10966) (3bcff79) (Piotr Grzesik)

v3.12.0

Compare Source

Features

• AWS Lambda: Add support for function URLs (#​10936) (d215517) (Piotr Grzesik)

Maintenance Improvements

• CLI: Fix typos in create CLI messages (#​10933) (26f79aa) (Petri Partio)

v3.11.0

Compare Source

Features

• AWS RabbitMQ: Support virtualHost (#​10814) (e21fb75) (Rudolf Nel)
• CLI Onboarding: Support all runtimes for dashboard (with limited functionality) (#​10922) (0ca0cff) (Piotr Grzesik)

3.10.2 (2022-03-31)

Maintenance Improvements

• Console: Report logs with opt out option (#​10919) (ababd90) (Mariusz Nowak)

3.10.1 (2022-03-30)

Bug Fixes

• AWS Deploy: Apply stack policy after executing change sets (#​10903) (2d2cb3e) (Mark Tse)
• AWS Local Invocation:
  • Ensure proper artifact permissions for rust functions (#​10891) (11dd77e) (Sergii Dolgushev)
  • Ensure package before resolving runtime (#​10888) (80b3e1a) (Sergii Dolgushev)

Maintenance Improvements

• AWS Deploy: Ensure no internal dependency on console (#​10908) (2a8ef3e) (Mariusz Nowak)
• Telemetry: Send more frequently to avoid too big payloads (#​10909) (889e1b6) (Piotr Grzesik)

v3.10.2

Compare Source

v3.10.1

Compare Source

v3.10.0

Compare Source

Features

• AWS Lambda: Support ephemeralStorageSize (#​10901) (d317cff) (Piotr Grzesik)

v3.9.0

Compare Source

Features

• AWS Lambda: Support Ref for destinations properties (#​10845) (9e0ca03) (ALOHACREPES345)

Bug Fixes

• AWS Deploy:
  • Fix handling of state file in check for changes logic (#​10885) (12d95dc) (Mariusz Nowak)
  • Recognize otel extension in check for changes logic (#​10885) (6da0b65) (Mariusz Nowak)
• Console: Ensure single layer attachment with package.individually (#​10895) (fac8a73) (Mariusz Nowak)

Maintenance Improvements

• AWS Deploy:
  • Debug logs for check for changes logic (#​10885) (9f76f19) (Mariusz Nowak)
  • Debug logs for logs subscription check (#​10885) (895f320) (Mariusz Nowak)
  • Improve internal resolution of hashes (#​10885) (711b643) (Mariusz Nowak)
  • Refactor getMostRecentObjects to async/await (#​10885) (1461860) (Mariusz Nowak)
  • Refactor to async/await (#​10885) (8bb306b) (Mariusz Nowak)
  • Refactor to native promises (#​10885) (c5970e7) (Mariusz Nowak)
• Console:
  • Do not disable dashboard with console (#​10895) (e6cdc9d) (Mariusz Nowak)
  • Ensure to list extension layer in layers output (#​10895) (14109e8) (Mariusz Nowak)
  • Improve error reporting when layer cannot be added (#​10895) (ba71dd9) (Mariusz Nowak)

v3.8.0

Compare Source

Features

• AWS Lambda:
  • Recognize Fn::If for properties of vpc (#​10877) (6a86ed7) (ALOHACREPES345)
  • Support logRetentionInDays per function (#​10878) (4c25184) (ALOHACREPES345)

3.7.9 (2022-03-18)

Bug Fixes

• CLI Onboarding: Ensure to process fully resolved service config (#​10873) (6a1f083) (Mariusz Nowak)
• CLI Onboarding: Improve fix for initial variables resolution (#​10873) (1f12b19) (Mariusz Nowak)
• Console: Prevent AWS region mismatch (#​10873) (43480ee) (Mariusz Nowak)
• Fix internal unrecognized command error processing (#​10873) (a89e36a) (Mariusz Nowak)

Maintenance Improvements

• CLI: Configure processing flow debug logs (#​10873) (7af0c8c) (Mariusz Nowak)
• Console: Present url to console UI (#​10873) (0d9f866) (Mariusz Nowak)
• Upgrade to async/await (#​10873) (8c7731d) (Mariusz Nowak)

3.7.8 (2022-03-17)

Bug Fixes

• Console:
  • Fix reference to bucket name in CF template (#​10869) (fcaa9c2) (Mariusz Nowak)
  • Fix upload of extension to S3 bucket (#​10869) (23719d8) (Mariusz Nowak)

3.7.7 (2022-03-17)

Bug Fixes

• Console: Respect custom deployment bucket configuration (#​10867) (4d705cc) (Mariusz Nowak)

Maintenance Improvements

• Console:
  • Generalize internal bucketName resolution (#​10867) (103fc55) (Mariusz Nowak)
  • Report used layer extension version to telemetry (#​10867) (db89f20) (Mariusz Nowak)
• CLI: Support internally a temporary SLS_DISABLE_AUTO_UPDATE env var (c939457) (Piotr Grzesik)

3.7.6 (2022-03-17)

Bug Fixes

• Standalone: Ensure error in China upload don't break GitHub upload (#​10853) (2b8afac) (Mariusz Nowak)
• Console: Ensure to package extension without errors (#​10860) (64ee4a5) (Mariusz Nowak)

Maintenance Improvements

• Console: Upgrade to rely on v0.2 version of extension (#​10837) (3ccfec1) (Mariusz Nowak)

3.7.5 (2022-03-14)

Bug Fixes

• AWS Kafka: Allow usage of Server Root CA without client TLS auth (#​10837) (6a6417c) (Fabian Desoye)
• CLI: Ensure proper resolution of options for service commands (#​10846) (dd421cc) (Piotr Grzesik)

Maintenance Improvements

• Console: Dynamically resolve latest version of the extension (#​10842) (c28c48c) (Mariusz Nowak)

3.7.4 (2022-03-10)

Bug Fixes

• AWS Local Invocation: Remove log4j dependency from java wrapper (#​10832) (8b17338) (Yuji Yamano)

Maintenance Improvements

• Console: Communicate new token implications with verbose mode (#​10835) (7e56aa1) (Mariusz Nowak)

v3.7.9

Compare Source

v3.7.8

Compare Source

v3.7.7

Compare Source

v3.7.6

Compare Source

v3.7.5

Compare Source

v3.7.4

Compare Source

v3.7.3

Compare Source

Bug Fixes

• CLI Onboarding:
  • Enable Console in config, only with --console (#​10825) (b173d90) (Mariusz Nowak)
  • Ensure to enable Console when commented out (#​10825) (f0bff74) (Mariusz Nowak)
  • Fix initialContext.isDashboardEnabled resolution (#​10825) (10c24f6) (Mariusz Nowak)
  • Fix isConsole resolution in login step (#​10825) (688bfcf) (Mariusz Nowak)
  • Fix resolution of onboarding message (#​10825) (624536f) (Mariusz Nowak)
  • Leave app intact with also enabled Dashboard (#​10825) (a043624) (Mariusz Nowak)
  • Prevent side-effects of not supported app option (#​10825) (0c65663) (Mariusz Nowak)
  • Setup app when Console and Dashboard enabled (#​10825) (bffbfe3) (Mariusz Nowak)
  • With Console always favor console messaging (#​10825) (f0d441e) (Mariusz Nowak)

Maintenance Improvements

• CLI Onboarding:
  • Support joint Console (experimental) & Dashboard configurations (#​10825) (48609f7) (Mariusz Nowak)
  • Hide not supported templates with console (#​10825) (79e156f) (Mariusz Nowak)
  • Reorganize writeOrgAppAndConsole input (#​10825) (fc9dc1d) (Mariusz Nowak)
  • Reorganize internal variables (#​10825) (25d2e7a) (Mariusz Nowak)
  • Support future object notation for console (#​10825) (2f187a5) (Mariusz Nowak)
• Console: Unify headers resolution (#​10825) (494fb26) (Mariusz Nowak)
• Telemetry:
  • Expose initialContext.isConsoleEnabled (#​10825) (f580883) (Mariusz Nowak)
  • Ensure to not leak false as empty value (#​10825) (167a77e) (Mariusz Nowak)

3.7.2 (2022-03-08)

Bug Fixes

• Ensure to properly support moving directories across filesystems (#​10796) (d06b64d) (Piotr Grzesik)

Maintenance Improvements

• AWS Lambda: Support provisionedConcurrency set to 0 (#​10798) (e40ba43) (Dustin Fay)
• Standalone: Update Tencent CLI standalone download URL (#​10811) (e26625a) (Tim Qian)
• Telemetry: Ensure excluding shouldSendTelemetry from payload (#​10810) (9c6423b) (Piotr Grzesik)

3.7.1 (2022-03-02)

Bug Fixes

• CLI Onboarding: Ensure improved variables resolution for existing templates (#​10784) (17df292) (Piotr Grzesik)

Maintenance Improvements

• Telemetry: Rely on direct evaluation of isTtyTerminal (#​10786) (e29253f) (Piotr Grzesik)
• Recognize logout as service-aware command (#​10785) (21c783d) (Piotr Grzesik)

v3.7.2

Compare Source

v3.7.1

Compare Source

v3.7.0

Compare Source

Features

• CLI Onboarding: Support --console flag (#​10779) (a34d07a) (Piotr Grzesik)

v3.6.0

Compare Source

Features

• Variables: Add support for csj in file source (#​10776) (df08283) (Julian Grinblat)

Maintenance Improvements

• Console: Support login with Console (#​10777) (4ce1088) (Piotr Grzesik)

3.5.1 (2022-02-28)

Bug Fixes

• AWS Lambda: Properly format logs with missing init duration (#​10772) (0bb64e2) (Piotr Grzesik)

v3.5.1

Compare Source

v3.5.0

Compare Source

Features

• AWS Lambda: Simplify logs command output (#​10768) (d8f251c) (Piotr Grzesik)

Maintenance Improvements

• Console: Add missing OTEL_RESOURCE_ATTRIBUTES var (#​10762) (1f9458b) (Piotr Grzesik & Mariusz Nowak)
• Log environment details of error to stderr (#​10769) (f439201) (Piotr Grzesik)

v3.4.0

Compare Source

Features

• AWS Lambda: Add support for dotnet6 runtime (#​10757) (818dda2) (Martin Costello)
• Console: Initial (experimental) support (#​10752) (bdaf21e) (Mariusz Nowak)

Bug Fixes

• AWS API Gateway: Properly apply description to REST API (#​10746) (451def9) (ALOHACREPES345)

Maintenance Improvements

• AWS Deploy: Generalize uploadZipFile logic (#​10752) (26bc112) (Mariusz Nowak)
• AWS Deploy: Improve progress logs for rollback (#​10752) (24c45a0) (Mariusz Nowak)
• AWS Deploy: Refactor extendedValidate to async (#​10752) (e1d2b82) (Mariusz Nowak)
• AWS Deploy: Store resolved state on internal class (#​10752) (1c00eb2) (Mariusz Nowak)
• AWS Deploy: Upload state file to deployment bucket (#​10752) (5525a3e) (Mariusz Nowak)
• Expose isDashboardEnabled resolver (#​10752) (ba34c57) (Mariusz Nowak)
• Generalize S3 upload dirname handling (#​10752) (9223b79) (Mariusz Nowak)
• Introduce hooks tracking debug logs (#​10752) (efe1139) (Mariusz Nowak)
• Mark saveServiceState internal function as async (#​10752) (4f895a2) (Mariusz Nowak)

v3.3.0

Compare Source

Features

• Variables: Support for --param CLI options (#​10713) (964b883) ([Piotr Grzesik](http