Updated to version v1.0.4

Updated to version v1.0.4

Author: abhirpat

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.4] - 2026-02-13
+
+### Security
+
+- Update dependencies to mitigate [CVE-2026-25639](https://nvd.nist.gov/vuln/detail/CVE-2026-25639) and [CVE-2026-25990](https://avd.aquasec.com/nvd/cve-2026-25990).
+
 ## [1.0.3] - 2026-02-09
 
 ### Security

solution-manifest.yaml

@@ -1,6 +1,6 @@
 id: SO0310
 name: deepracer-on-aws
-version: v1.0.3
+version: v1.0.4
 cloudformation_templates:
   - template: deepracer-on-aws.template
     main_template: true

source/apps/infra/lib/constructs/observability/dashboard.ts

@@ -95,7 +95,7 @@ export class MonitoringDashboard extends Construct {
           markdown:
             '## Training Instance Usage\n\n' +
             'Current ml.c5.4xlarge training job usage. ' +
-            '[View quota limits and utilization →](https://console.aws.amazon.com/servicequotas/home/services/sagemaker/quotas/L-E7898792)',
+            '[View quota limits and utilization](https://console.aws.amazon.com/servicequotas/home/services/sagemaker/quotas/L-E7898792)',
           width: 24,
           height: 2,
         }),

source/libs/lambda/src/workflow/handlers/__tests__/jobFinalizer.spec.ts

@@ -175,8 +175,8 @@ describe('JobFinalizer', () => {
       .mockImplementation(() => Promise.resolve(TEST_ACCOUNT_RESOURCE_USAGE_NORMAL));
     updateProfileSpy = vi.spyOn(profileDao, 'update');
     vi.spyOn(metricsLogger, 'logDeepRacerJob').mockImplementation(() => undefined);
-    vi.spyOn(metrics, 'addMetric').mockImplementation(() => undefined);
-    vi.spyOn(metrics, 'addDimension').mockImplementation(() => undefined);
+    vi.spyOn(metrics, 'addMetric').mockImplementation(() => metrics);
+    vi.spyOn(metrics, 'addDimension').mockImplementation(() => metrics);
   });
 
   describe('handler()', () => {

source/libs/reward-function-validation/Dockerfile

@@ -12,5 +12,8 @@ RUN pip install --no-cache-dir -r requirements.txt
 # Remove unused aws-lambda-rie to fix CVE-2025-61726
 RUN rm -f /usr/local/bin/aws-lambda-rie
 
+# Upgrade Pillow to fix CVE-2026-25990
+RUN pip install --no-cache-dir --upgrade pillow==12.1.1
+
 # Pass the name of the function handler as an argument to the runtime
 CMD [ "lambda_function.lambda_handler" ]

source/package.json

@@ -97,6 +97,7 @@
       "qs@<6.14.1": ">=6.14.1",
       "react-hook-form": "7.54.2",
       "fast-xml-parser": ">=5.3.4",
+      "axios@1.13.4": ">=1.13.5",
       "npm": "npm:empty-npm-package@1.0.0"
     }
   }