V1.2.2

[1.2.2] - 2026-03-19

Security

• Upgraded flatted to mitigate CVE-2026-32141
• Updated fast-xml-parser to address CVE-2026-26278

v1.2.1

[1.2.1] - 2026-03-05

Security

• Upgraded aws-nuke to mitigate CVE-2025-68121
• Upgraded minimatch to mitigate:
  • CVE-2026-27903
  • CVE-2026-27904
• Upgraded serialize-javascript to mitigate GHSA-5c6j-r48x-rmvq
• Upgraded fast-xml-parser to mitigate CVE-2026-27942

v1.2.0

[1.2.0] - 2026-02-25

Added

• Blueprint management for registering, configuring, and tracking CloudFormation StackSets as reusable infrastructure templates (#34)
  • Configurable deployment strategies with region targeting, concurrency controls, and failure tolerance
  • Automated blueprint deployment to sandbox accounts during lease provisioning, orchestrated through AWS Step Functions
  • Provisioning and ProvisioningFailed lease statuses to track blueprint deployment progress during lease approval
  • Deployment history per blueprint with health metrics (successful deployments, deployment history, last deployment time)
  • Blueprint management UI with registration wizard, detail view, deployment history visualization, and editing for basic details and deployment configuration
  • Blueprint association on lease templates, allowing administrators to attach or detach blueprints during template creation or update
• Dedicated detail and edit pages for leases and lease templates covering duration, budget, cost report, and blueprint settings
• Version update alert in the navigation bar when a newer version of the solution is available (#45)
• AWS WAF logging to Amazon CloudWatch Logs and alarm on blocked requests
• Validation that the InnovationSandbox-<namespace>-SandboxAccountRole role exists in a sandbox account before starting cleanup, reducing unnecessary cleanup attempts

Fixed

• Sorting on date and status columns in frontend tables by adding dedicated sorting comparators
• Cross-stack reference issue where updates to the account pool stack were not reflected in the compute stack due to deploy-time resolution

Changed

• Lease approval workflow now supports two paths: immediate access (no blueprint) or deferred access after blueprint deployment completes
• Miscellaneous UX improvements to the frontend application

Security

• Added JWT signature verification at Lambda middleware layer to prevent authentication bypass when API Gateway is bypassed (#93)
• Upgraded fast-xml-parser to mitigate:
  • CVE-2026-25896
  • CVE-2026-26278
• Upgraded ajv to mitigate CVE-2025-69873
• Upgraded qs to mitigate CVE-2026-2391

v1.1.8

[1.1.8] - 2026-02-04

Security

• Upgraded aws-nuke to mitigate:
  • CVE-2025-61726
  • CVE-2025-8732
  • CVE-2025-61728
  • CVE-2025-61730
• Upgraded fast-xml-parser to mitigate CVE-2026-25128
• Upgraded lodash to mitigate CVE-2025-13465

v1.1.7

[1.1.7] - 2026-01-20

Fixed

• Upgraded aws-nuke to v3.63.2 to resolve discovery short-circuit behavior when encountering SCP-protected log groups

v1.1.6

[1.1.6] - 2026-01-12

Security

• Upgraded @remix-run/router to mitigate CVE-2026-22029
• Upgraded glib2 to mitigate CVE-2025-14087
• Upgraded libcap to mitigate:
  • CVE-2025-61727
  • CVE-2025-61729
• Upgraded python3 to mitigate:
  • CVE-2025-12084
  • CVE-2025-13837
• Upgraded python3-libs to mitigate:
  • CVE-2025-12084
  • CVE-2025-13837
• Upgraded python-unversioned-command to mitigate:
  • CVE-2025-12084
  • CVE-2025-13837

v1.1.5

[1.1.5] - 2026-01-05

Security

• Upgraded qs to mitigate CVE-2025-15284

v1.1.4

[1.1.4] - 2025-12-16

Security

• Upgraded aws-nuke to mitigate:
  • CVE-2025-61729
  • CVE-2025-61727

v1.1.3

[1.1.3] - 2025-12-10

Security

• Upgraded jws to mitigate CVE-2025-65945
• Upgraded mdast-util-to-hast to mitigate CVE-2025-66400
• Upgraded curl-minimal to mitigate CVE-2025-11563
• Upgraded libcurl-minimal to mitigate CVE-2025-11563
• Upgraded glib2 to mitigate CVE-2025-13601
• Upgraded python-unversioned-command to mitigate CVE-2025-6075
• Upgraded python3-libs to mitigate CVE-2025-6075
• Upgraded python3 to mitigate CVE-2025-6075

v1.1.2

[1.1.2] - 2025-11-20

Security

• Upgraded js-yaml to mitigate CVE-2025-64718
• Upgraded glob to mitigate CVE-2025-64756