[Snyk] Upgrade @aws-sdk/client-s3 from 3.504.0 to 3.621.0

[WesleyR10]

Snyk has created this PR to upgrade @aws-sdk/client-s3 from 3.504.0 to 3.621.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 53 versions ahead of your current version.

• The recommended version was released on 22 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-7573289	631	No Known Exploit

Release notes

Package name: @aws-sdk/client-s3

• 3.621.0 - 2024-07-30
  

  3.621.0(2024-07-30)

  Chores

  • codegen:
    • remove fast-xml-parser from AwsDependency (#6328) (197bc7d8)
    • bump smithy package versions (#6329) (8dd7fb63)
  • deps: bump fast-xml-parser from 4.2.5 to 4.4.1 (#6330) (c547e234)

  Documentation Changes

  • client-elasticache: Doc only update for changes to deletion API. (3cf46f19)
  • client-workspaces: Removing multi-session as it isn't supported for pools (01552b00)

  New Features

  • clients: update client endpoints as of 2024-07-30 (ecc97a25)
  • client-lex-models-v2: This release adds new capabilities to the AMAZON.QnAIntent: Custom prompting, Guardrails integration and ExactResponse support for Bedrock Knowledge Base. (4d9c7a12)
  • client-eventbridge: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (65290c81)
  • client-rolesanywhere: IAM RolesAnywhere now supports custom role session name on the CreateSession. This release adds the acceptRoleSessionName option to a profile to control whether a role session name will be accepted in a session request with a given profile. (5bc30087)
  • client-cloudwatch-logs: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (88b6a41c)
  • client-codepipeline: AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements. (5e8b92d3)
  • client-elastic-load-balancing: Add v2 smoke tests and smithy smokeTests trait for SDK testing. (6cbe7bf6)
  • client-tnb: This release adds Network Service Update, through which customers will be able to update their instantiated networks to a new network package. See the documentation for limitations. The release also enhances the Get network operation API to return parameter overrides used during the operation. (cee6948a)
  • client-auto-scaling: Increase the length limit for VPCZoneIdentifier from 2047 to 5000 (23471630)
  • client-appstream: Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0 (bbb4450b)

  Bug Fixes

  • package.json homepage links to use the main branch (#6336) (e3322302)
  • polly-request-presigner: override middleware name to allow concurrent presigning (#6335) (54990fa2)

  ---

  For list of updated packages, view updated-packages.md in assets-3.621.0.zip

• 3.620.1 - 2024-07-29
  

  3.620.1(2024-07-29)

  Chores

  • release accountId-endpoints config and codegen changes (#6313) (de8d4a6b)
  • release accountId-endpoints credential-provider changes (d5011a5f)

  Documentation Changes

  • client-memorydb: Renaming full service name as it appears in developer documentation. (c94ecdde)
  • client-elasticache: Renaming full service name as it appears in developer documentation. (b5146baa)

  New Features

  • clients: update client endpoints as of 2024-07-29 (78129a70)

  ---

  For list of updated packages, view updated-packages.md in assets-3.620.1.zip

• 3.620.0 - 2024-07-25
  

  3.620.0(2024-07-25)

  Chores

  • clients: codegen sync for eventstream header fix (#6310) (ff30a3e8)

  Documentation Changes

  • mention addition of web-streams-polyfill for react-native (#6302) (456a5fe3)

  New Features

  • client-network-firewall: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging. (ab0e00ec)
  • client-outposts: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses (2e676982)
  • client-application-auto-scaling: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics. (961af9b2)
  • client-eks: This release adds support for EKS cluster to manage extended support. (45cb022d)
  • client-codecommit: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository. (9195ee76)
  • client-ec2: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types. (88cbe697)
  • client-sfn: This release adds support to customer managed KMS key encryption in AWS Step Functions. (895cc687)
  • client-bedrock-runtime: Provides ServiceUnavailableException error message (690bc7f8)
  • client-datazone: Introduces GetEnvironmentCredentials operation to SDK (2156a876)
  • client-ecr: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template. (83e5411c)
  • client-application-signals: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability. (ef30775d)
  • client-elastic-load-balancing-v2: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager. (4a753d9e)

  Bug Fixes

  • eventstream-handler-node: start streaming without waiting for response (#6311) (0072f426)

  Tests

  • client-cloudsearch: remove feature tests (#6314) (daacfd62)

  ---

  For list of updated packages, view updated-packages.md in assets-3.620.0.zip

• 3.617.0 - 2024-07-22
  

  3.617.0(2024-07-22)

  Chores

  • client-mobile: deprecate AWS Mobilehub (#6291) (cada4c39)

  New Features

  • clients: update client endpoints as of 2024-07-22 (1597efaf)
  • client-ivs: Documentation update for IVS Low Latency API Reference. (e9a221e5)
  • client-neptune-graph: Amazon Neptune Analytics provides new options for customers to start with smaller graphs at a lower cost. CreateGraph, CreaateGraphImportTask, UpdateGraph and StartImportTask APIs will now allow 32 and 64 for provisioned-memory (c35926b0)
  • client-datazone: This release adds 1/ support of register S3 locations of assets in AWS Lake Formation hybrid access mode for DefaultDataLake blueprint. 2/ support of CRUD operations for Asset Filters. (caa77502)
  • client-redshift-serverless: Adds dualstack support for Redshift Serverless workgroup. (b6495b09)

  Bug Fixes

  • middleware-sdk-s3: fix error with partially-read Node.js streams (#6294) (e11de230)

  Tests

  • credential-providers: integration test for 'read config files from paths relative to homedir' (#6210) (2db465ae)

  ---

  For list of updated packages, view updated-packages.md in assets-3.617.0.zip

• 3.616.0 - 2024-07-18
  

  3.616.0(2024-07-18)

  Chores

  • middleware-sdk-s3: update s3 status 200 error handling (#6232) (9119ae6c)
  • credential-provider-node: emit warning when AWS_PROFILE is set alongside ENV credentials (#6277) (d1105e3a)
  • codegen: codegen sync for stream utils (#6279) (2687058e)

  Documentation Changes

  • client-workspaces-thin-client: Documentation update for WorkSpaces Thin Client. (c43a0909)
  • client-secrets-manager: Doc only update for Secrets Manager (3f9a4c4f)
  • client-timestream-query: Doc-only update for TimestreamQuery. Added guidance about the accepted valid value for the QueryPricingModel parameter. (e17e8ba7)
  • client-rds: Updates Amazon RDS documentation to specify an eventual consistency model for DescribePendingMaintenanceActions. (39182686)
  • client-ivschat: Documentation update for IVS Chat API Reference. (71e6e590)
  • credential-providers: update fromNodeProviderChain.ts docblock (#6086) (497105f4)
  • fix typos (#6286) (e9703768)

  New Features

  • clients: update client endpoints as of 2024-07-18 (ac3e31bd)
  • client-ec2: Amazon VPC IP Address Manager (IPAM) now supports Bring-Your-Own-IP (BYOIP) for IP addresses registered with any Internet Registry. This feature uses DNS TXT records to validate ownership of a public IP address range. (337c43d0)
  • client-sagemaker: SageMaker Training supports R5, T3 and R5D instances family. And SageMaker Processing supports G5 and R5D instances family. (709db608)
  • client-medialive: AWS Elemental MediaLive now supports the SRT protocol via the new SRT Caller input type. (91134dfb)
  • client-taxsettings: Set default endpoint for aws partition. Requests from all regions in aws partition will be forward to us-east-1 endpoint. (7927892a)
  • client-acm-pca: Fix broken waiters for the acm-pca client. Waiters broke in version 1.13.144 of the Boto3 SDK. (a867f6e9)
  • client-firehose: This release 1) Add configurable buffering hints for Snowflake as destination. 2) Add ReadFromTimestamp for MSK As Source. Firehose will start reading data from MSK Cluster using offset associated with this timestamp. 3) Gated public beta release to add Apache Iceberg tables as destination. (9a36c7ed)
  • client-connect: Amazon Connect expands search API coverage for additional resources. Search for hierarchy groups by name, ID, tag, or other criteria (new endpoint). Search for agent statuses by name, ID, tag, or other criteria (new endpoint). Search for users by their assigned proficiencies (enhanced endpoint) (226e9c6f)

  Bug Fixes

  • middleware-sdk-s3: set consistent dependency versions (#6287) (207cd845)
  • lib-storage: location in upload result should include custom port (#6282) (9d3cbb6d)

  Tests

  • credential-provider-node: fix tests related to defaultProvider chain (#6285) (9ca8baeb)

  ---

  For list of updated packages, view updated-packages.md in assets-3.616.0.zip

• 3.614.0 - 2024-07-10
  

  3.614.0(2024-07-10)

  Chores

  • clients: read config files from paths relative to homedir (#6265) (fa3b6030)

  Documentation Changes

  • client-groundstation: Documentation update specifying OEM ephemeris units of measurement (37f74944)

  New Features

  • clients: update client endpoints as of 2024-07-10 (3a748e58)
  • client-bedrock-agent: Introduces new data sources and chunking strategies for Knowledge bases, advanced parsing logic using FMs, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources. (6d701b12)
  • client-bedrock-agent-runtime: Introduces query decomposition, enhanced Agents integration with Knowledge bases, session summary generation, and code interpretation (preview) for Claude V3 Sonnet and Haiku models. Also introduces Prompt Flows (preview) to link prompts, foundational models, and resources for end-to-end solutions. (f2f40c1e)
  • client-mediaconnect: AWS Elemental MediaConnect introduces the ability to disable outputs. Disabling an output allows you to keep the output attached to the flow, but stop streaming to the output destination. A disabled output does not incur data transfer costs. (427a732c)
  • client-glue: Add recipe step support for recipe node (c9d85d8e)
  • client-license-manager-linux-subscriptions: Add support for third party subscription providers, starting with RHEL subscriptions through Red Hat Subscription Manager (RHSM). Additionally, add support for tagging subscription provider resources, and detect when an instance has more than one Linux subscription and notify the customer. (e4903347)
  • client-bedrock: Add support for contextual grounding check for Guardrails for Amazon Bedrock. (f8cc6bdd)
  • client-bedrock-runtime: Add support for contextual grounding check and ApplyGuardrail API for Guardrails for Amazon Bedrock. (8863b77e)
  • client-batch: This feature allows AWS Batch Jobs with EKS container orchestration type to be run as Multi-Node Parallel Jobs. (bda616d0)
  • client-ec2: Add parameters to enable provisioning IPAM BYOIPv4 space at a Local Zone Network Border Group level (d835dbb9)

  Bug Fixes

  • util-dynamodb: perform global interface check in NativeAttributeBinary union (#6261) (e116b4c2)

  Tests

  • client-s3: dot segment in URI Label (#6262) (992c63a0)

  ---

  For list of updated packages, view updated-packages.md in assets-3.614.0.zip

• 3.613.0 - 2024-07-09
  

  3.613.0(2024-07-09)

  Chores

  • clients: add automatic id tokens for header values (#6260) (2697d89a)

  New Features

  • clients: update client endpoints as of 2024-07-09 (d5e32c24)
  • client-sagemaker: This release 1/ enables optimization jobs that allows customers to perform Ahead-of-time compilation and quantization. 2/ allows customers to control access to Amazon Q integration in SageMaker Studio. 3/ enables AdditionalModelDataSources for CreateModel action. (ec13654a)
  • client-fsx: Adds support for FSx for NetApp ONTAP 2nd Generation file systems, and FSx for OpenZFS Single AZ HA file systems. (cd5cd966)
  • client-datazone: This release deprecates dataProductItem field from SearchInventoryResultItem, along with some unused DataProduct shapes (5d3596b7)
  • client-opensearch: This release adds support for enabling or disabling Natural Language Query Processing feature for Amazon OpenSearch Service domains, and provides visibility into the current state of the setup or tear-down. (069e2475)

  Bug Fixes

  • middleware-eventstream: lowercase headers more consistently (#6259) (1965eb04)

  ---

  For list of updated packages, view updated-packages.md in assets-3.613.0.zip

• 3.609.0 - 2024-07-02
• 3.608.0 - 2024-07-01
• 3.606.0 - 2024-06-28
• 3.600.0 - 2024-06-18
• 3.598.0 - 2024-06-14
• 3.596.0 - 2024-06-12
• 3.592.0 - 2024-06-06
• 3.591.0 - 2024-06-05
• 3.590.0 - 2024-06-04
• 3.588.0 - 2024-05-31
• 3.587.0 - 2024-05-30
• 3.583.0 - 2024-05-23
• 3.582.0 - 2024-05-22
• 3.577.0 - 2024-05-15
• 3.576.0 - 2024-05-14
• 3.575.0 - 2024-05-13
• 3.574.0 - 2024-05-10
• 3.572.0 - 2024-05-08
• 3.569.0 - 2024-05-03
• 3.568.0 - 2024-05-02
• 3.567.0 - 2024-05-01
• 3.565.0 - 2024-04-29
• 3.564.0 - 2024-04-26
• 3.563.0 - 2024-04-25
• 3.556.0 - 2024-04-16
• 3.554.0 - 2024-04-11
• 3.552.0 - 2024-04-09
• 3.550.0 - 2024-04-05
• 3.549.0 - 2024-04-04
• 3.540.0 - 2024-03-22
• 3.537.0 - 2024-03-19
• 3.536.0 - 2024-03-18
• 3.535.0 - 2024-03-15
• 3.534.0 - 2024-03-14
• 3.533.0 - 2024-03-13
• 3.529.1 - 2024-03-08
• 3.529.0 - 2024-03-07
• 3.525.0 - 2024-02-29
• 3.523.0 - 2024-02-27
• 3.521.0 - 2024-02-23
• 3.515.0 - 2024-02-15
• 3.514.0 - 2024-02-14
• 3.513.0 - 2024-02-13
• 3.511.0 - 2024-02-09
• 3.509.0 - 2024-02-07
• 3.507.0 - 2024-02-05
• 3.504.0 - 2024-01-31

from @aws-sdk/client-s3 GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs