Merge pull request #76 from aws-solutions/release/v1.1.6

release v1.1.6

Author: patrickq2

CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.1.6] - 2026-01-12
+
+### Security
+
+- Upgraded `@remix-run/router` to mitigate [CVE-2026-22029](https://nvd.nist.gov/vuln/detail/CVE-2026-22029)
+- Upgraded `glib2` to mitigate [CVE-2025-14087](https://nvd.nist.gov/vuln/detail/CVE-2025-14087)
+- Upgraded `libcap` to mitigate:
+  - [CVE-2025-61727](https://nvd.nist.gov/vuln/detail/CVE-2025-61727)
+  - [CVE-2025-61729](https://nvd.nist.gov/vuln/detail/CVE-2025-61729)
+- Upgraded `python3` to mitigate:
+  - [CVE-2025-12084](https://nvd.nist.gov/vuln/detail/CVE-2025-12084)
+  - [CVE-2025-13837](https://nvd.nist.gov/vuln/detail/CVE-2025-13837)
+- Upgraded `python3-libs` to mitigate:
+  - [CVE-2025-12084](https://nvd.nist.gov/vuln/detail/CVE-2025-12084)
+  - [CVE-2025-13837](https://nvd.nist.gov/vuln/detail/CVE-2025-13837)
+- Upgraded `python-unversioned-command` to mitigate:
+  - [CVE-2025-12084](https://nvd.nist.gov/vuln/detail/CVE-2025-12084)
+  - [CVE-2025-13837](https://nvd.nist.gov/vuln/detail/CVE-2025-13837)
+
 ## [1.1.5] - 2026-01-05
 
 ### Security

docs/openapi/innovation-sandbox-api.yaml

@@ -2,7 +2,7 @@ openapi: 3.0.0
 info:
   title: Innovation Sandbox on AWS
   description: API documentation for the Innovation Sandbox on AWS solution.
-  version: 1.1.5
+  version: 1.1.6
   license:
     name: Apache 2.0
     url: "http://www.apache.org/licenses/LICENSE-2.0.html"

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@amzn/innovation-sandbox-on-aws",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "description": "Innovation Sandbox on AWS (SO0284)",
   "scripts": {
     "preinstall": "npm run generate-local-package-lock --workspaces --if-present",

package.json

@@ -1,6 +1,6 @@
 id: SO0284
 name: innovation-sandbox-on-aws
-version: v1.1.5
+version: v1.1.6
 cloudformation_templates:
   - template: InnovationSandbox-AccountPool.template
     main_template: true

solution-manifest.yaml

@@ -1,7 +1,7 @@
 {
   "name": "@amzn/innovation-sandbox-commons",
   "description": "Common - Innovation Sandbox on AWS (SO0284)",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "scripts": {
     "build": "tsc --incremental --noEmit",
     "test": "vitest run"

source/common/package.json

@@ -2,7 +2,7 @@
   "name": "@amzn/innovation-sandbox-frontend",
   "description": "Frontend - Innovation Sandbox on AWS (SO0284)",
   "private": true,
-  "version": "1.1.5",
+  "version": "1.1.6",
   "type": "module",
   "scripts": {
     "dev": "vite",

source/frontend/package.json

@@ -1,4 +1,4 @@
-FROM public.ecr.aws/amazonlinux/amazonlinux:2023-minimal@sha256:3f6c5a2858113e9bb6710dfccdace7dc698e83f7a012240a1d07b3a46d273999
+FROM public.ecr.aws/amazonlinux/amazonlinux:2023-minimal@sha256:13bffb7de7ef4836742a6be2b09642e819aaec50ceed1d7961424e19a95da0de
 
 RUN dnf install -y tar gzip awscli jq sed
 

source/infrastructure/lib/components/account-cleaner/Dockerfile

@@ -1,7 +1,7 @@
 {
   "name": "@amzn/innovation-sandbox-infrastructure",
   "description": "Infrastructure - Innovation Sandbox on AWS (SO0284)",
-  "version": "1.1.5",
+  "version": "1.1.6",
   "bin": {
     "infrastructure": "bin/app.js"
   },