Merge pull request #753 from aws-solutions/feature/v6.0.3

Update to version v6.0.3

CHANGELOG.md

@@ -5,7 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [6.0.2] - 2024-07-22
+## [6.0.3] - 2024-08-06
+
+### Security
+- Patched fast-xml-parser vulnerability
+
+ ## [6.0.2] - 2024-07-22
 
 ### Added
 - Added a migration [documentation](./source/docs/update_or_migrate_deployment/README.md) for Migrating QnABot configurations and data from existing deployment to new deployment

README.md

@@ -325,6 +325,7 @@ As QnABot evolves over the years, it makes use of various services and functiona
 _Note: **Deployable solution versions** refers to the ability to deploy the version of QnABot in their AWS accounts. **Actively supported versions** for QnABot is only available for the latest version of QnABot._
 
 ### Deployable Versions
+- [v6.0.3](https://github.com/aws-solutions/qnabot-on-aws/releases/tag/v6.0.3) - [Public](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.3/qnabot-on-aws-main.template)/[VPC](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.3/qnabot-on-aws-vpc.template)
 - [v6.0.2](https://github.com/aws-solutions/qnabot-on-aws/releases/tag/v6.0.2) - [Public](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.2/qnabot-on-aws-main.template)/[VPC](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.2/qnabot-on-aws-vpc.template)
 - [v6.0.1](https://github.com/aws-solutions/qnabot-on-aws/releases/tag/v6.0.1) - [Public](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.1/qnabot-on-aws-main.template)/[VPC](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.1/qnabot-on-aws-vpc.template)
 - [v6.0.0](https://github.com/aws-solutions/qnabot-on-aws/releases/tag/v6.0.0) - [Public](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.0/qnabot-on-aws-main.template)/[VPC](https://solutions-reference.s3.amazonaws.com/qnabot-on-aws/v6.0.0/qnabot-on-aws-vpc.template)

source/cli/aws_solutions/qnabot/cli/qnabot_cli.py

@@ -23,7 +23,7 @@
 @click.pass_context
 def cli(ctx) -> None:
     os.environ["SOLUTION_ID"] = "SO0189"
-    os.environ["SOLUTION_VERSION"] = "v6.0.2"
+    os.environ["SOLUTION_VERSION"] = "v6.0.3"
 
 
 @cli.command("import")

source/config.json

@@ -2,7 +2,7 @@
   "region": "us-east-1",
   "profile": "default",
   "publicBucket": "solutions",
-  "publicPrefix": "qnabot-on-aws/v6.0.2",
+  "publicPrefix": "qnabot-on-aws/v6.0.3",
   "devEmail": "",
   "ApprovedDomain": "NONE",
   "Username": "Admin",

source/lambda/aws-sdk-layer/package.json

@@ -1,6 +1,6 @@
 {
     "name": "aws-layer",
-    "version": "6.0.2",
+    "version": "6.0.3",
     "description": "QnABot Lambda aws-sdk-layer",
     "main": "index.js",
     "scripts": {
@@ -12,12 +12,12 @@
     },
     "license": "Apache-2.0",
     "dependencies": {
-        "@aws-sdk/client-bedrock-agent-runtime": "3.511.0",
-        "@aws-sdk/client-bedrock-runtime": "3.511.0",
-        "@aws-sdk/client-comprehend": "3.511.0",
-        "@aws-sdk/client-kendra": "3.511.0",
-        "@aws-sdk/client-lambda": "3.511.0",
-        "@aws-sdk/client-s3": "3.511.0",
-        "@aws-sdk/client-translate": "3.511.0"
+        "@aws-sdk/client-bedrock-agent-runtime": "^3.622.0",
+        "@aws-sdk/client-bedrock-runtime": "^3.622.0",
+        "@aws-sdk/client-comprehend": "^3.621.0",
+        "@aws-sdk/client-kendra": "^3.621.0",
+        "@aws-sdk/client-lambda": "^3.621.0",
+        "@aws-sdk/client-s3": "^3.621.0",
+        "@aws-sdk/client-translate": "^3.621.0"
     }
 }

source/lambda/cfn-lambda-layer/package.json

@@ -1,6 +1,6 @@
 {
     "name": "cfn-lambda-layer",
-    "version": "6.0.2",
+    "version": "6.0.3",
     "description": "QnABot Cfn Lambda Layer",
     "main": "index.js",
     "scripts": {

source/lambda/cfn/package.json

@@ -1,6 +1,6 @@
 {
     "name": "cfn",
-    "version": "6.0.2",
+    "version": "6.0.3",
     "description": "QnABot Cfn Lambda",
     "main": "index.js",
     "scripts": {
@@ -18,15 +18,15 @@
     },
     "license": "Apache-2.0",
     "dependencies": {
-        "@aws-sdk/client-api-gateway": "3.511.0",
-        "@aws-sdk/client-cognito-identity": "3.511.0",
-        "@aws-sdk/client-cognito-identity-provider": "3.511.0",
-        "@aws-sdk/client-iam": "3.511.0",
-        "@aws-sdk/client-lambda": "3.511.0",
-        "@aws-sdk/client-lex-model-building-service": "3.511.0",
-        "@aws-sdk/client-opensearch": "3.511.0",
-        "@aws-sdk/client-s3": "3.511.0",
-        "@aws-sdk/credential-providers": "3.511.0",
+        "@aws-sdk/client-api-gateway": "^3.621.0",
+        "@aws-sdk/client-cognito-identity": "^3.621.0",
+        "@aws-sdk/client-cognito-identity-provider": "^3.621.0",
+        "@aws-sdk/client-iam": "^3.621.0",
+        "@aws-sdk/client-lambda": "^3.621.0",
+        "@aws-sdk/client-lex-model-building-service": "^3.621.0",
+        "@aws-sdk/client-opensearch": "^3.621.0",
+        "@aws-sdk/client-s3": "^3.621.0",
+        "@aws-sdk/credential-providers": "^3.621.0",
         "aws-sdk": "^2.1555.0",
         "body-parser": "^1.20.2",
         "cfn-lambda": "^5.1.0",