Merge pull request #55 from aws-solutions/release/v1.0.5

v1.0.5 release

Author: ianwow

CHANGELOG.md

@@ -5,7 +5,17 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.0.4] - 2025-09-02
+## [1.0.5] - 2025-10-09
+
+### Fixed
+
+- Disabled WAF SizeRestrictions_QUERYSTRING rule blocking legitimate AWS Organizations pagination tokens on GET /accounts/unregistered endpoint when handling large numbers of accounts (>20)
+
+### Security
+
+- Upgraded `expat` to mitigate [CVE-2025-59375](https://nvd.nist.gov/vuln/detail/CVE-2025-59375)
+
+## [1.0.4] - 2025-08-22
 
 ### Added
 

docs/openapi/innovation-sandbox-api.yaml

@@ -2,7 +2,7 @@ openapi: 3.0.0
 info:
   title: Innovation Sandbox on AWS
   description: API documentation for the Innovation Sandbox on AWS solution.
-  version: 1.0.4
+  version: 1.0.5
   license:
     name: Apache 2.0
     url: "http://www.apache.org/licenses/LICENSE-2.0.html"

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@amzn/innovation-sandbox-on-aws",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "description": "Innovation Sandbox on AWS (SO0284)",
   "scripts": {
     "test": "vitest run --coverage",

package.json

@@ -1,6 +1,6 @@
 id: SO0284
 name: innovation-sandbox-on-aws
-version: v1.0.4
+version: v1.0.5
 cloudformation_templates:
   - template: InnovationSandbox-AccountPool.template
     main_template: true

solution-manifest.yaml

@@ -1,7 +1,7 @@
 {
   "name": "@amzn/innovation-sandbox-commons",
   "description": "Common - Innovation Sandbox on AWS (SO0284)",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "scripts": {
     "build": "tsc",
     "test": "vitest run"

source/common/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@amzn/innovation-sandbox-e2e",
   "description": "E2E Tests - Innovation Sandbox on AWS (SO0284)",
-  "version": "1.0.4",
+  "version": "1.0.5",
   "scripts": {
     "build": "tsc",
     "e2e": "vitest run --config ./vitest.config.e2e.ts",

source/e2e/package.json

@@ -2,7 +2,7 @@
   "name": "@amzn/innovation-sandbox-frontend",
   "description": "Frontend - Innovation Sandbox on AWS (SO0284)",
   "private": true,
-  "version": "1.0.4",
+  "version": "1.0.5",
   "type": "module",
   "scripts": {
     "dev": "vite",

source/frontend/package.json

@@ -1,4 +1,4 @@
-FROM public.ecr.aws/amazonlinux/amazonlinux:2023-minimal
+FROM public.ecr.aws/amazonlinux/amazonlinux:2023-minimal@sha256:c9a8457247e453f635fda07121cce4fc16c2219290ca4e5494959e6452fc0244
 
 RUN dnf install -y tar gzip awscli jq sed
 

source/infrastructure/lib/components/account-cleaner/Dockerfile

@@ -216,6 +216,9 @@ export class RestApi extends ApiGatewayRestApi {
                 {
                   name: "SizeRestrictions_BODY",
                 },
+                {
+                  name: "SizeRestrictions_QUERYSTRING",
+                },
                 {
                   name: "CrossSiteScripting_BODY",
                 },