Merge pull request #63 from aws-solutions/release/v1.0.8

Update to version v1.0.8
aws-solutions · Nov 27, 2024 · 3274521 · 3274521
2 parents 0a2d1b3 + b78199c
commit 3274521
Show file tree

Hide file tree

Showing 12 changed files with 120 additions and 110 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.8] - 2024-11-27
+
+### Changed
+
+- Updated dependencies to address cross-spawn CVE-2024-21538
+
 ## [1.0.7] - 2024-08
 
 - Upgrade `axios` to mitigate [CVE-2024-39338](https://nvd.nist.gov/vuln/detail/CVE-2024-39338)

diff --git a/README.md b/README.md
@@ -1,7 +1,6 @@
 ⚠️🚨⚠️ __Cognito User Profiles Export Reference Architecture will no longer be supported starting on March 1, 2025 and will not receive any additional features.__ ⚠️🚨⚠️
 
 # Cognito User Profiles Export Reference Architecture
-
 This solution uses an [AWS Step Functions](https://aws.amazon.com/step-functions/) workflow (`ExportWorkflow`) to periodically export user profiles, groups, and group membership details from your user pool to an [Amazon DynamoDB global table](https://aws.amazon.com/dynamodb/global-tables/) with automatic, asynchronous replication to a backup Region for added resiliency. This solution is designed to provide a framework for exporting user profile and group information from your user pool, allowing you to focus on extending the solution’s functionality rather than managing the underlying infrastructure operation. 
 
 This solution’s `ImportWorkflow` Step Functions workflow can be used to populate a new, empty user pool with data from the global table, allowing you to easily recover user profiles, groups, and group memberships. The `ImportWorkflow` Step Functions workflow can be run in either the primary or backup Region.

diff --git a/source/custom-resources/package-lock.json b/source/custom-resources/package-lock.json
diff --git a/source/custom-resources/package.json b/source/custom-resources/package.json
@@ -6,7 +6,7 @@
     "url": "https://aws.amazon.com/solutions"
   },
   "license": "Apache-2.0",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "private": true,
   "dependencies": {
     "axios": "^1.7.4",

diff --git a/source/utils/package-lock.json b/source/utils/package-lock.json
diff --git a/source/utils/package.json b/source/utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "utils",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Custom Resource Helper functions",
   "scripts": {
     "clean": "rm -rf dist/ node_modules/ coverage/",

diff --git a/source/workflow-common/package-lock.json b/source/workflow-common/package-lock.json
diff --git a/source/workflow-common/package.json b/source/workflow-common/package.json
@@ -1,6 +1,6 @@
 {
   "name": "workflow-common",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "Common functionality for all Step Functions Workflows",
   "author": {
     "name": "Amazon Web Services",