build(deps): bump aws-sdk from 2.732.0 to 2.861.0 #181

dependabot · 2021-03-10T23:29:43Z

Bumps aws-sdk from 2.732.0 to 2.861.0.

Release notes

Release v2.861.0

See changelog for more information.

Release v2.860.0

See changelog for more information.

Release v2.859.0

See changelog for more information.

Release v2.858.0

See changelog for more information.

Release v2.857.0

See changelog for more information.

Release v2.856.0

See changelog for more information.

Release v2.855.0

See changelog for more information.

Release v2.854.0

See changelog for more information.

Release v2.853.0

See changelog for more information.

Release v2.852.0

See changelog for more information.

Release v2.851.0

See changelog for more information.

Release v2.850.0

See changelog for more information.

Release v2.849.0

See changelog for more information.

Release v2.848.0

See changelog for more information.

Release v2.847.0

See changelog for more information.

Release v2.846.0

See changelog for more information.

Release v2.845.0

See changelog for more information.

... (truncated)

Changelog

Sourced from aws-sdk's changelog.

2.861.0

feature: AccessAnalyzer: This release adds support to preview IAM Access Analyzer findings for a resource before deploying resource permission changes.

feature: Backup: Added support for enabling continuous backups.

feature: S3: Adding ID element to the CORSRule schema

feature: SSM: Systems Manager support for tagging OpsMetadata.

2.860.0

feature: AutoScaling: EC2 Auto Scaling now supports setting a local time zone for cron expressions in scheduled actions, removing the need to adjust for Daylight Saving Time (DST)

feature: CodeGuruProfiler: Update documentation to include Python. Add ConflictException for DeleteProfilingGroup. Add FrameMetricValue.

feature: EFS: AWS EFS is introducing one-zone file systems.

feature: IoTWireless: Add max value to Seq in SendDataToWirelessDevice API"

feature: RDS: This release adds support for Amazon RDS Proxy endpoints.

2.859.0

feature: EMR: Amazon EMR customers can now specify how EC2 On-Demand Capacity Reservations are used in their EMR clusters with instance fleets using allocation strategy.

feature: KinesisVideoArchivedMedia: Increase the maximum HLS and MPEG-DASH manifest size from 1,000 to 5,000 fragments.

feature: Lambda: Documentation updates for Lambda. Constraint updates to AddLayerVersionPermission's Action and OrganizationId parameters, and AddPermission's Principal and SourceAccount parameters.

2.858.0

feature: Athena: Adds APIs to create, list, update, and delete prepared SQL statements that have optional placeholder parameters. A prepared statement can use different values for these parameters each time it is run.

feature: CodePipeline: Updated the parameters to make actionType required for UpdateActionType

feature: EC2: Expands EC2/Spot Fleet capacity-optimized allocation strategy to allow users to prioritize instance pools. Fleet attempts to fulfill priorities on a best-effort basis but optimizes for capacity first.

feature: LicenseManager: License Manager Automated Discovery now supports Exclusion Filters.

feature: MediaLive: Medialive now supports the ability to transfer AWS Elemental Link devices to another region.

feature: NetworkFirewall: Added a new UpdateToken output field to the PerObjectStatus as part of firewall sync state. This is added to track which version of the object the firewall is in sync or pending synchronization.

feature: Shield: Add support for tagging of Shield protection and protection group resources.

2.857.0

feature: CloudWatchEvents: Introducing support for EventBridge Api Destinations - any HTTP APIs as Targets, with managed authorization via EventBridge Connections.

feature: EventBridge: Introducing support for EventBridge Api Destinations - any HTTP APIs as Targets, with managed authorization via EventBridge Connections.

feature: MWAA: This release introduces a new MinWorker parameter to the CreateEnvironment and UpdateEnvironment APIs. MinWorker allows the users to set a minimum worker count for worker auto-scaling operations.

feature: SageMaker: This release adds the ResolvedOutputS3Uri to the DescribeFeatureGroup API to indicate the S3 prefix where offline data is stored in a feature group

feature: ServiceDiscovery: Supports creating API-only services under DNS namespace. Add namespace syntax validation.

2.856.0

feature: ACM: Adds 2 new APIs to add and retrieve account configuration in AWS Certificate Manager.

feature: CloudWatchEvents: Adds TraceHeader to PutEventsRequestEntry to support AWS X-Ray trace-ids on events generated using the PutEvents operation.

feature: CodeBuild: AWS CodeBuild now supports Session Manager debugging for batch builds.

feature: ES: AWS ElasticSearch Feature : Support for adding tags in elastic search domain during domain creation

feature: ForecastService: Added new StopResource operation that stops Amazon Forecast resource jobs that are in progress.

feature: SecretsManager: Added support for multi-Region secrets APIs ReplicateSecretToRegions, RemoveRegionsFromReplication, and StopReplicationToReplica

feature: WellArchitected: This release supports tagging on AWS Well-Architected workloads.

2.855.0

feature: DataSync: Additional API Support to update NFS/SMB/ObjectStorage locations

feature: EventBridge: Adds TraceHeader to PutEventsRequestEntry to support AWS X-Ray trace-ids on events generated using the PutEvents operation.

feature: IoTWireless: Add ARN & Tags for PartnerAccount related APIs and WirelessGatewayTaskDefinition related APIs

2.854.0

feature: AlexaForBusiness: Added support for optional tags in CreateAddressBook, CreateConferenceProvider, CreateContact, CreateGatewayGroup, CreateNetworkProfile and RegisterAVSDevice APIs.

... (truncated)

Commits

309d053 Updates SDK to v2.861.0
bfc7c14 Updates SDK to v2.860.0
e6a72f3 Updates SDK to v2.859.0
a8e023d Updates SDK to v2.858.0
b1d9fbe Updates SDK to v2.857.0
54b9649 Updates SDK to v2.856.0
438670c Updates SDK to v2.855.0
b26bcf2 Updates SDK to v2.854.0
7654c4c Updates SDK to v2.853.0
a2e71ca fix(s3): bugfixing the s3 endpoint parser (#3650)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aws-sdk](https://github.com/aws/aws-sdk-js) from 2.732.0 to 2.861.0. - [Release notes](https://github.com/aws/aws-sdk-js/releases) - [Changelog](https://github.com/aws/aws-sdk-js/blob/master/CHANGELOG.md) - [Commits](aws/aws-sdk-js@v2.732.0...v2.861.0) Signed-off-by: dependabot[bot] <[email protected]>

sonarqubecloud · 2021-03-10T23:32:32Z

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information

guardrails · 2021-03-10T23:40:42Z

⚠️ We detected security issues in this pull request:
Mode: paranoid | Total findings: 833 | Considered vulnerability: 0

Hard-Coded Secrets (38)

desktop/app/app-info.ts

Line 10 in f36315b

const devClientSecret = '22c34d87789a365981ed921352a7b9a8c3f69d54'

desktop/app/src/lib/api.ts

Line 64 in f36315b

const ClientSecret = process.env.TEST_ENV ? '' : __OAUTH_SECRET__

desktop/app/src/lib/api.ts

Line 1260 in f36315b

client_secret: ClientSecret,

desktop/app/src/ui/sign-in/sign-in.tsx

Line 48 in f36315b

password: '',

desktop/app/src/ui/sign-in/sign-in.tsx

Line 148 in f36315b

const validPassword = this.state.password.length > 0

desktop/script/build.ts

Line 449 in f36315b

const appleIdPassword = process.env.APPLE_ID_PASSWORD

desktop/script/build.ts

Line 450 in f36315b

if (appleId === undefined || appleIdPassword === undefined) {

desktop/app/test/fixtures/merge-parser/desktop/merge-experimental-ssh-setup-into-offline-mode-y-u-no-work.txt

Line 2988 in f36315b

+-----BEGIN RSA PRIVATE KEY-----

desktop/app/test/fixtures/merge-parser/desktop/merge-experimental-ssh-setup-into-offline-mode-y-u-no-work.txt

Line 2995 in f36315b

+-----BEGIN RSA PRIVATE KEY-----

https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/app/test/fixtures/merge-parser/electron/merge-rename-atom-to-electron-into-master.txt#L39283
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/app/test/fixtures/merge-parser/electron/merge-rename-atom-to-electron-into-master.txt#L81059

More info on how to fix Hard-Coded Secrets in General.

Insecure File Management (355)

desktop/app/app-info.ts

Line 16 in f36315b

// eslint-disable-next-line no-sync

desktop/script/build.ts

Line 253 in f36315b

fs.removeSync(destination)

desktop/script/build.ts

Line 262 in f36315b

const analysisSource = path.join(outRoot, rendererReport)

desktop/script/build.ts

Line 271 in f36315b

fs.copySync(analysisSource, destination, { overwrite: true })

desktop/script/build.ts

Line 317 in f36315b

desktop/script/build.ts

Line 369 in f36315b

try {

desktop/script/build.ts

Line 391 in f36315b

desktop/script/build.ts

Line 396 in f36315b

const fullPath = path.join(licensesDir, file)

desktop/script/build.ts

Line 419 in f36315b

const text = JSON.stringify(licenses)

desktop/script/build.ts

Line 429 in f36315b

desktop/script/build.ts

Line 438 in f36315b

desktop/script/generate-octicons.ts

Line 75 in f36315b

desktop/script/licenses/update-license-dump.ts

Line 46 in f36315b

const licenseSource = path.join(projectRoot, 'LICENSE')

desktop/script/licenses/update-license-dump.ts

Line 58 in f36315b

desktop/script/package.ts

Line 67 in f36315b

desktop/script/package.ts

Line 77 in f36315b

desktop/script/review-logs.ts

Line 35 in f36315b

const directory = path.join(getUserDataPath(), 'logs')

desktop/script/review-logs.ts

Line 39 in f36315b

desktop/script/test-review.ts

Line 8 in f36315b

console.log(`opening ${file}:`)

desktop/script/test-setup.ts

Line 26 in f36315b

console.log(`deleting ${file}`)

desktop/script/validate-sass/validate-file.ts

Line 16 in f36315b

const lineReader = readline.createInterface({

More info on how to fix Insecure File Management in Javascript and Typescript.

Insecure Use of Regular Expressions (109)

desktop/app/git-info.ts

Line 28 in f36315b

// we need to build up the regex on the fly using the ref

desktop/app/src/highlighter/index.ts

Line 444 in f36315b

if (contents.startsWith('#!')) {

desktop/app/src/lib/diff-parser.ts

Line 20 in f36315b

// in which case s defaults to 1

desktop/app/src/lib/git/diff.ts

Line 482 in f36315b

desktop/app/src/lib/git/reflog.ts

Line 11 in f36315b

// of control when there's ginormous reflogs around (as in e.g. github/github).

desktop/app/src/lib/git/reflog.ts

Line 83 in f36315b

//regexr.com/46n1v

desktop/app/src/lib/remote-parsing.ts

Line 29 in f36315b

protocol: 'https',

desktop/app/src/ui/add-repository/licenses.ts

Line 55 in f36315b

// replacements.

desktop/app/src/ui/add-repository/licenses.ts

Line 58 in f36315b

desktop/app/src/ui/add-repository/sanitized-repository-name.ts

Line 5 in f36315b

]

More info on how to fix Insecure Use of Regular Expressions in Javascript and Typescript.

Insecure Use of Dangerous Function (14)

desktop/app/src/cli/load-commands.ts

Line 35 in f36315b

function loadModule(name: string): ICommandModule {

desktop/script/build.ts

Line 277 in f36315b

// eslint-disable-next-line import/no-dynamic-require

desktop/script/draft-release/run.ts

Line 128 in f36315b

More info on how to fix Insecure Use of Dangerous Function in Javascript and Typescript.

Insecure Use of Language/Framework API (8)

https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L80862
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L88686
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L107981
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L108093
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L108144
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L108158
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L108176
https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L115394

More info on how to fix Insecure Use of Language/Framework API in Javascript.

Insecure Use of Crypto (57)

https://github.com/turkdevops/desktop/blob/f36315b6a5fc337bef3d17a6709c7842f3776c20/vendor/yarn-1.21.1.js#L145412

desktop/app/src/lib/2fa.ts

Line 22 in f36315b

export function getWelcomeMessage(type: AuthenticationMode): string {

desktop/app/src/lib/api.ts

Line 1069 in f36315b

response.status === 403 &&

desktop/app/src/lib/api.ts

Line 1089 in f36315b

} else if (

desktop/app/src/lib/api.ts

Line 1137 in f36315b

const result = await parsedResponse<IServerMetadata>(response)

desktop/app/src/lib/api.ts

Line 1196 in f36315b

// We need to normalize them.

desktop/app/src/lib/api.ts

Line 1272 in f36315b

function getOAuthScopesForEndpoint(endpoint: string) {

desktop/app/src/lib/email.ts

Line 56 in f36315b

function getStealthEmailHostForEndpoint(endpoint: string) {

desktop/app/src/lib/find-account.ts

Line 83 in f36315b

const sortedAccounts = Array.from(allAccounts).sort((a1, a2) => {

desktop/app/src/lib/find-account.ts

Line 85 in f36315b

return a1.token.length ? -1 : 1

desktop/app/src/lib/friendly-endpoint-name.ts

Line 12 in f36315b

export function friendlyEndpointName(account: Account) {

desktop/app/src/lib/git/core.ts

Line 416 in f36315b

desktop/app/src/lib/git/environment.ts

Line 30 in f36315b

// A GitHub.com Account will have api.github.com as its endpoint

desktop/app/src/lib/git/interpret-trailers.ts

Line 19 in f36315b

export function isCoAuthoredByTrailer(trailer: ITrailer) {

desktop/app/src/lib/oauth.ts

Line 47 in f36315b

): Promise<Account | null | undefined> {

desktop/app/src/lib/stats/stats-store.ts

Line 254 in f36315b

const gitHubAccount = accounts.find(

desktop/app/src/lib/stats/stats-store.ts

Line 533 in f36315b

const dotComAccount = !!accounts.find(

desktop/app/src/lib/stats/stats-store.ts

Line 536 in f36315b

const enterpriseAccount = !!accounts.find(

desktop/app/src/lib/stats/stats-store.ts

Line 827 in f36315b

await this.recordPushToGenericRemote(options)

desktop/app/src/lib/stores/app-store.ts

Line 1962 in f36315b

newSelectedRepository &&

desktop/app/src/lib/stores/app-store.ts

Line 2513 in f36315b

if (account !== null) {

desktop/app/src/lib/stores/github-user-store.ts

Line 54 in f36315b

desktop/app/src/lib/stores/helpers/create-tutorial-repository.ts

Line 39 in f36315b

) {

desktop/app/src/lib/stores/sign-in-store.ts

Line 287 in f36315b

desktop/app/src/lib/stores/sign-in-store.ts

Line 327 in f36315b

desktop/app/src/lib/stores/sign-in-store.ts

Line 334 in f36315b

Vulnerable Libraries (252)

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

dependabot · 2021-03-11T23:22:25Z

Superseded by #182.

dependabot bot added the dependencies Pull requests that update a dependency file label Mar 10, 2021

auto-add-label bot added the build label Mar 10, 2021

dependabot bot mentioned this pull request Mar 10, 2021

build(deps): bump aws-sdk from 2.732.0 to 2.860.0 #180

Closed

dependabot bot closed this Mar 11, 2021

dependabot bot deleted the dependabot/npm_and_yarn/aws-sdk-2.861.0 branch March 11, 2021 23:22

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump aws-sdk from 2.732.0 to 2.861.0 #181

build(deps): bump aws-sdk from 2.732.0 to 2.861.0 #181

dependabot bot commented on behalf of github Mar 10, 2021

sonarqubecloud bot commented Mar 10, 2021

guardrails bot commented Mar 10, 2021

dependabot bot commented on behalf of github Mar 11, 2021

build(deps): bump aws-sdk from 2.732.0 to 2.861.0 #181

build(deps): bump aws-sdk from 2.732.0 to 2.861.0 #181

Conversation

dependabot bot commented on behalf of github Mar 10, 2021

Release v2.861.0

Release v2.860.0

Release v2.859.0

Release v2.858.0

Release v2.857.0

Release v2.856.0

Release v2.855.0

Release v2.854.0

Release v2.853.0

Release v2.852.0

Release v2.851.0

Release v2.850.0

Release v2.849.0

Release v2.848.0

Release v2.847.0

Release v2.846.0

Release v2.845.0

2.861.0

2.860.0

2.859.0

2.858.0

2.857.0

2.856.0

2.855.0

2.854.0

sonarqubecloud bot commented Mar 10, 2021

guardrails bot commented Mar 10, 2021

dependabot bot commented on behalf of github Mar 11, 2021