Update to v1.5.11 open-source release (#230)

aws-solutions · Oct 30, 2024 · a6d9195 · a6d9195
1 parent 0012334
commit a6d9195
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 15 deletions.
diff --git a/.viperlightignore b/.viperlightignore
@@ -1,5 +1,6 @@
 ^dist/
 CODE_OF_CONDUCT.md:4
+SECURITY.md:10
 CONTRIBUTING.md:50
 .github/workflows/nightly-workflow.yml:19
 .github/workflows/nightly-workflow.yml:18

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.5.11] - 2024-10-29
+### Security: 
+- Bump http-proxy-middleware to `2.0.7` to resolve [cve-2024-21536](https://github.com/advisories/GHSA-c7qv-q95q-8v27)
+- Bump cookie to `0.7.0` to resolve CVE [ CVE-2024-47764](https://github.com/advisories/GHSA-pxg6-pf52-xh8x)  
+
 ## [1.5.10] - 2024-09-20
 ### Security: 
 - Bump webpack to `5.94.0` to resolve [CVE-2024-43788](https://github.com/advisories/GHSA-4vvj-4cpr-p986)

diff --git a/source/web/package-lock.json b/source/web/package-lock.json
diff --git a/source/web/package.json b/source/web/package.json
@@ -55,11 +55,13 @@
   "overrides": {
     "fast-xml-parser": "4.4.1",
     "postcss": "8.4.31",
-    "axios": "0.28.0"
+    "axios": "0.28.0",
+    "cookie": "0.7.0"
   },
   "resolutions": {
     "fast-xml-parser": "4.4.1",
     "postcss": "8.4.31",
-    "axios": "0.28.0"
+    "axios": "0.28.0",
+    "cookie": "0.7.0"
   }
 }