aws-solutions · tabdunabi · Oct 14, 2025 · Oct 14, 2025 · Oct 14, 2025
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.0.6] - 2025-10-14
+
+### Changed
+
+- Upgraded langchain-core to `0.3.74`
+- Upgraded langchain-aws to `0.2.31`
+- Upgraded aws-lambda-powertools to `3.19.0`
+- Upgraded botocore to `1.40.15`
+- Upgraded boto3 to `1.40.15`
+
+### Security
+
+- Upgraded langchain to `0.3.27` to mitigate [CVE-2025-6985](https://avd.aquasec.com/nvd/2025/cve-2025-6985/)
+
 ## [3.0.5] - 2025-09-18
 
 ### Security

diff --git a/NOTICE.txt b/NOTICE.txt
@@ -1310,7 +1310,7 @@ make-error under the ISC license.
 makeerror under the BSD-3-Clause license.
 map-obj under the MIT license.
 markdown-table under the MIT license.
-markupsafe under the 0BSD license.
+markupsafe under the BSD-3-Clause license.
 marky under the Apache-2.0 license.
 math-intrinsics under the MIT license.
 mdast-util-find-and-replace under the MIT license.

diff --git a/source/infrastructure/cdk.json b/source/infrastructure/cdk.json
@@ -64,7 +64,7 @@
     "@custom-bundler/unit-test": false,
     "solution_id": "SO0276",
     "solution_name": "generative-ai-application-builder-on-aws",
-    "solution_version": "v3.0.5",
+    "solution_version": "v3.0.6",
     "app_registry_name": "GAAB",
     "application_type": "AWS-Solutions",
     "application_trademark_name": "Generative AI Application Builder on AWS",

diff --git a/source/infrastructure/package-lock.json b/source/infrastructure/package-lock.json
diff --git a/source/infrastructure/package.json b/source/infrastructure/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/gen-ai-app-builder-on-aws-infrastructure",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "bin": {
     "infrastructure": "bin/gen-ai-app-builder.js"
   },

diff --git a/source/infrastructure/test/mock-lambda-func/node-lambda/package-lock.json b/source/infrastructure/test/mock-lambda-func/node-lambda/package-lock.json
diff --git a/source/infrastructure/test/mock-lambda-func/node-lambda/package.json b/source/infrastructure/test/mock-lambda-func/node-lambda/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/node-lambda",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "A mock lambda implementation for CDK infrastructure unit",
   "main": "index.js",
   "scripts": {

diff --git a/source/infrastructure/test/mock-lambda-func/python-lambda/pyproject.toml b/source/infrastructure/test/mock-lambda-func/python-lambda/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "mock-lambda-function"
-version = "3.0.5"
+version = "3.0.6"
 authors = [ "Amazon Web Services" ]
 description = "Mock lambda implementation to unit test infrastructure code"
 packages = [

diff --git a/source/infrastructure/test/mock-lambda-func/typescript-lambda/package-lock.json b/source/infrastructure/test/mock-lambda-func/typescript-lambda/package-lock.json
diff --git a/source/infrastructure/test/mock-lambda-func/typescript-lambda/package.json b/source/infrastructure/test/mock-lambda-func/typescript-lambda/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/mock-typescript-lambda",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "A mock lambda implementation for CDK infrastructure unit",
   "main": "index.ts",
   "scripts": {

diff --git a/source/infrastructure/test/mock-ui/package-lock.json b/source/infrastructure/test/mock-ui/package-lock.json
diff --git a/source/infrastructure/test/mock-ui/package.json b/source/infrastructure/test/mock-ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/mock-react-app",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "Mock Reactjs app used for unit testing constructs",
   "devDependencies": {
     "@babel/plugin-proposal-private-property-in-object": "^7.21.11",

diff --git a/source/lambda/chat/poetry.lock b/source/lambda/chat/poetry.lock
diff --git a/source/lambda/chat/pyproject.toml b/source/lambda/chat/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "llm-chat-lambda"
-version = "3.0.5"
+version = "3.0.6"
 authors = [ "Amazon Web Services" ]
 description = "Lambda implementation for chat feature"
 packages = [

diff --git a/source/lambda/custom-authorizer/package-lock.json b/source/lambda/custom-authorizer/package-lock.json
diff --git a/source/lambda/custom-authorizer/package.json b/source/lambda/custom-authorizer/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@amzn/custom-authorizer",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "This lambda function is used as a custom REQUEST authorizer for APIs",
   "main": "rest-handler.ts",
   "scripts": {