Merge pull request #344 from aws-solutions/feature/v2.4.6

Update to version v2.4.6

Author: jangidms

CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.4.6] - 2025-12-15
+
+### Security
+
+- Updated node-forge package to address [CVE-2025-12816](https://avd.aquasec.com/nvd/2025/cve-2025-12816)
+- Updated express package to address [CVE-2024-51999](https://avd.aquasec.com/nvd/2024/cve-2024-51999)
+- Updated werkzeug package to address [CVE-2025-66221](https://avd.aquasec.com/nvd/2025/cve-2025-66221)
+- Updated urllib3 package to address [CVE-2025-66418](https://avd.aquasec.com/nvd/2025/cve-2025-66418) and [CVE-2025-66471](https://avd.aquasec.com/nvd/2025/cve-2025-66471)
+- Updated CloudFront HTTP Strict Transport Security max-age from 600 seconds to 47304000 seconds
+
 ## [2.4.5] - 2025-11-20
 
 ### Added

deployment/ecr/clo-s3-list-objects/Dockerfile

@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12.2025.11.20.16 AS builder
+FROM public.ecr.aws/lambda/python:3.12.2025.12.05.08 AS builder
 
 WORKDIR /build
 
@@ -14,7 +14,7 @@ RUN python -m venv .venv && \
     cd common-lib && \
     poetry build
 
-FROM public.ecr.aws/lambda/python:3.12.2025.11.20.16
+FROM public.ecr.aws/lambda/python:3.12.2025.12.05.08
 
 WORKDIR /ws