Merge pull request #24 from aws-solutions/release/v1.0.3

v1.0.3 release

Author: abewub

.gitignore

@@ -8,6 +8,8 @@ node_modules/
 dist
 bom.json
 .env
+git-info
+build
 
 # CDK asset staging directory
 .cdk.staging

CHANGELOG.md

@@ -5,6 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.3] - 2025-07-25
+
+### Security
+
+- Upgraded `form-data` to mitigate [CVE-2025-7783](https://nvd.nist.gov/vuln/detail/CVE-2025-7783)
+- Upgraded `@node-saml/passport-saml` to mitigate [CVE-2025-54369](https://nvd.nist.gov/vuln/detail/CVE-2025-54369)
+
+### Removed
+
+- Removed unused dependency `axios`
+
 ## [1.0.2] - 2025-06-25
 
 ### Fixed

NOTICE

@@ -149,7 +149,6 @@ react-router under the MIT license.
 @aws-crypto/supports-web-crypto under the Apache-2.0 license.
 @aws-sdk/util-locate-window under the Apache-2.0 license.
 @aws-sdk/core under the Apache-2.0 license.
-@aws-sdk/xml-builder under the Apache-2.0 license.
 @smithy/core under the Apache-2.0 license.
 @smithy/middleware-serde under the Apache-2.0 license.
 @smithy/protocol-http under the Apache-2.0 license.
@@ -605,27 +604,6 @@ to-fast-properties under the MIT license.
 @types/babel__template under the MIT license.
 @types/babel__traverse under the MIT license.
 react-refresh under the MIT license.
-axios under the MIT license.
-follow-redirects under the MIT license.
-form-data under the MIT license.
-asynckit under the MIT license.
-combined-stream under the MIT license.
-delayed-stream under the MIT license.
-es-set-tostringtag under the MIT license.
-es-errors under the MIT license.
-get-intrinsic under the MIT license.
-call-bind-apply-helpers under the MIT license.
-function-bind under the MIT license.
-es-define-property under the MIT license.
-es-object-atoms under the MIT license.
-get-proto under the MIT license.
-dunder-proto under the MIT license.
-gopd under the MIT license.
-has-symbols under the MIT license.
-hasown under the MIT license.
-math-intrinsics under the MIT license.
-has-tostringtag under the MIT license.
-proxy-from-env under the MIT license.
 eslint-config-prettier under the MIT license.
 eslint-plugin-prettier under the MIT license.
 prettier under the MIT license.
@@ -636,6 +614,18 @@ synckit under the MIT license.
 eslint-plugin-react under the MIT license.
 array-includes under the MIT license.
 call-bind under the MIT license.
+call-bind-apply-helpers under the MIT license.
+es-errors under the MIT license.
+function-bind under the MIT license.
+es-define-property under the MIT license.
+get-intrinsic under the MIT license.
+es-object-atoms under the MIT license.
+get-proto under the MIT license.
+dunder-proto under the MIT license.
+gopd under the MIT license.
+has-symbols under the MIT license.
+hasown under the MIT license.
+math-intrinsics under the MIT license.
 set-function-length under the MIT license.
 define-data-property under the MIT license.
 has-property-descriptors under the MIT license.
@@ -654,8 +644,10 @@ is-typed-array under the MIT license.
 which-typed-array under the MIT license.
 for-each under the MIT license.
 is-callable under the MIT license.
+has-tostringtag under the MIT license.
 data-view-byte-length under the MIT license.
 data-view-byte-offset under the MIT license.
+es-set-tostringtag under the MIT license.
 es-to-primitive under the MIT license.
 is-date-object under the MIT license.
 is-symbol under the MIT license.
@@ -739,6 +731,10 @@ rrweb-cssom under the MIT license.
 @csstools/color-helpers under the MIT-0 license.
 data-urls under the MIT license.
 whatwg-mimetype under the MIT license.
+form-data under the MIT license.
+asynckit under the MIT license.
+combined-stream under the MIT license.
+delayed-stream under the MIT license.
 html-encoding-sniffer under the MIT license.
 whatwg-encoding under the MIT license.
 iconv-lite under the MIT license.
@@ -950,6 +946,7 @@ shimmer under the BSD-2-Clause license.
 @aws-crypto/crc32c under the Apache-2.0 license.
 @aws-sdk/middleware-location-constraint under the Apache-2.0 license.
 @aws-sdk/middleware-ssec under the Apache-2.0 license.
+@aws-sdk/xml-builder under the Apache-2.0 license.
 @smithy/hash-blob-browser under the Apache-2.0 license.
 @smithy/chunked-blob-reader under the Apache-2.0 license.
 @smithy/chunked-blob-reader-native under the Apache-2.0 license.
@@ -1008,6 +1005,7 @@ passport-strategy under the MIT license.
 pause under the MIT license.
 utils-merge under the MIT license.
 body-parser under the MIT license.
+qs under the BSD-3-Clause license.
 bytes under the MIT license.
 content-type under the MIT license.
 depd under the MIT license.
@@ -1017,7 +1015,6 @@ setprototypeof under the ISC license.
 toidentifier under the MIT license.
 on-finished under the MIT license.
 ee-first under the MIT license.
-qs under the BSD-3-Clause license.
 raw-body under the MIT license.
 unpipe under the MIT license.
 type-is under the MIT license.
@@ -1114,7 +1111,6 @@ estree-walker under the MIT license.
 magic-string under the MIT license.
 @vitest/runner under the MIT license.
 pathe under the MIT license.
-strip-literal under the MIT license.
 @vitest/snapshot under the MIT license.
 expect-type under the Apache-2.0 license.
 std-env under the MIT license.

docs/openapi/innovation-sandbox-api.yaml

@@ -2,7 +2,7 @@ openapi: 3.0.0
 info:
   title: Innovation Sandbox on AWS
   description: API documentation for the Innovation Sandbox on AWS solution.
-  version: 1.0.2
+  version: 1.0.3
   license:
     name: Apache 2.0
     url: "http://www.apache.org/licenses/LICENSE-2.0.html"