Merge pull request #58 from aws-solutions/release/v1.1.0

 v1.1.0 release

Author: groverlalit

.env.example

@@ -31,10 +31,3 @@ ACCEPT_SOLUTION_TERMS_OF_USE="" # Must be set to "Accept" for the compute stack
 # commands in package.json use HUB_ACCOUNT_ID for the account hosting ECR
 # PRIVATE_ECR_REPO="example-repo-name" # The private ECR repo name for hosting the account cleaner image.
 # PRIVATE_ECR_REPO_REGION="us-east-1" # Region for the private ECR repo being used.
-
-# E2E Test Configs (only required to run E2E test suite) (Optional)
-# DATA_STACK="InnovationSandbox-Data" # Name of the deployed Data stack.
-# COMPUTE_STACK="InnovationSandbox-Compute" # Name of the deployed Compute stack.
-# SANDBOX_ACCOUNT_ID="000000000000" # AWS account id to use for testing the account cleaner.
-# SANDBOX_ACCOUNT_ADMIN_ROLE_NAME="Admin" # The name of the administrative role to use in the test account.
-# EMAIL_FROM="[email protected]" # The email address to use for notifications during the e2e tests.

.gitignore

@@ -10,6 +10,7 @@ bom.json
 .env
 git-info
 build
+*.tsbuildinfo
 
 # CDK asset staging directory
 .cdk.staging

CHANGELOG.md

@@ -5,6 +5,39 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.0] - 2025-10-29
+
+### Added
+
+- Lease unfreezing capability allowing users to reinstate frozen leases ([#42](https://github.com/aws-solutions/innovation-sandbox-on-aws/issues/42))
+- Cost reporting groups feature for tracking and reporting costs by organizational groups ([#43](https://github.com/aws-solutions/innovation-sandbox-on-aws/issues/43))
+- Lease assignment functionality allowing administrators and managers to assign leases to other users([#44](https://github.com/aws-solutions/innovation-sandbox-on-aws/issues/44))
+- Prioritization of accounts that have been used less recently when selecting an account to use in a lease
+- Visibility configuration to set lease templates as PUBLIC or PRIVATE - PUBLIC templates are visible to all users, while PRIVATE templates are only accessible to Admin and Manager roles, enabling administrators to create restricted templates for specific use cases
+
+### Fixed
+
+- IP allow list configuration issues ([#35](https://github.com/aws-solutions/innovation-sandbox-on-aws/pull/35)) (@maniryu)
+- Filtered out Credit and Refund entries from cost explorer queries for more accurate reporting ([#36](https://github.com/aws-solutions/innovation-sandbox-on-aws/pull/47)) (@RuidiH)
+- Permission issue preventing deployment of IDC stack in delegated admin account
+- Execution does not exist bug in account cleaner step function
+
+### Security
+
+- Upgraded `aws-nuke` to mitigate:
+  - [CVE-2025-47906](https://nvd.nist.gov/vuln/detail/CVE-2025-47906)
+  - [CVE-2025-47907](https://nvd.nist.gov/vuln/detail/CVE-2025-47907)
+- Upgraded `vite` to mitigate [CVE-2025-62522](https://nvd.nist.gov/vuln/detail/CVE-2025-62522)
+- Upgraded `python3-pip` to mitigate [CVE-2025-8869](https://nvd.nist.gov/vuln/detail/CVE-2025-8869)
+- Upgraded `python3-pip-wheel` to mitigate [CVE-2025-8869](https://nvd.nist.gov/vuln/detail/CVE-2025-8869)
+- Upgraded `openssl-libs` to mitigate:
+  - [CVE-2025-9230](https://nvd.nist.gov/vuln/detail/CVE-2025-9230)
+  - [CVE-2025-9231](https://nvd.nist.gov/vuln/detail/CVE-2025-9231)
+- Upgraded `openssl-fips-provider-latest` to mitigate:
+  - [CVE-2025-9230](https://nvd.nist.gov/vuln/detail/CVE-2025-9230)
+  - [CVE-2025-9231](https://nvd.nist.gov/vuln/detail/CVE-2025-9231)
+- Upgraded `brace-expansion` to mitigate [CVE-2025-5889](https://nvd.nist.gov/vuln/detail/CVE-2025-5889)
+
 ## [1.0.5] - 2025-10-09
 
 ### Fixed