@psnext/slingcli 3.5.20261026-1 → 3.6.20261105-1

package/node_modules/@smithy/core/dist-types/submodules/protocols/protocol-http/extensions/httpExtensionConfiguration.d.ts

@@ -24,6 +24,7 @@ export declare const getHttpHandlerExtensionConfiguration: <HandlerConfig extend
     logger?: Logger;
 }>(runtimeConfig: HttpHandlerExtensionConfigType<HandlerConfig> & {
     logger?: Logger;
+    defaultSocketTimeout?: number;
 }) => {
     setHttpHandler(handler: HttpHandler<HandlerConfig>): void;
     httpHandler(): HttpHandler<HandlerConfig>;

package/node_modules/@smithy/core/dist-types/submodules/retry/util-retry/race.d.ts

@@ -0,0 +1,3 @@
+import type { AbortSignal as DeprecatedAbortSignal } from "@smithy/types";
+export declare const race: <T>(promise: Promise<T>, signal?: AbortSignal | DeprecatedAbortSignal) => Promise<T>;
+export declare const isAbortError: (error: unknown) => boolean;

package/node_modules/@smithy/core/dist-types/submodules/serde/index.browser.d.ts

@@ -40,3 +40,4 @@ export { streamCollector } from "./util-stream/stream-collector.browser";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/dist-types/submodules/serde/index.d.ts

@@ -38,3 +38,4 @@ export { streamCollector } from "./util-stream/stream-collector";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/dist-types/submodules/serde/index.native.d.ts

@@ -38,3 +38,4 @@ export { streamCollector } from "./util-stream/stream-collector.browser";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/cbor/SmithyRpcV2CborProtocol.d.ts

@@ -1,28 +1,19 @@
-import { RpcProtocol } from "@smithy/core/protocols";
-import { TypeRegistry } from "@smithy/core/schema";
-import { EndpointBearer, HandlerExecutionContext, HttpRequest as IHttpRequest, HttpResponse as IHttpResponse, MetadataBearer, OperationSchema, ResponseMetadata, SerdeFunctions } from "@smithy/types";
+import { AbstractRpcV2Protocol } from "@smithy/core/protocols";
+import { HandlerExecutionContext, HttpRequest as IHttpRequest, HttpResponse as IHttpResponse, OperationSchema, ResponseMetadata, SerdeFunctions } from "@smithy/types";
 import { CborCodec } from "./CborCodec";
 /**
  * Client protocol for Smithy RPCv2 CBOR.
  *
  * @public
  */
-export declare class SmithyRpcV2CborProtocol extends RpcProtocol {
-    /**
-     * @override
-     */
-    protected compositeErrorRegistry: TypeRegistry;
+export declare class SmithyRpcV2CborProtocol extends AbstractRpcV2Protocol {
     private codec;
     protected serializer: import(".").CborShapeSerializer2;
     protected deserializer: import(".").CborShapeDeserializer2;
-    constructor({ defaultNamespace, errorTypeRegistries, }: {
-        defaultNamespace: string;
-        errorTypeRegistries?: TypeRegistry[];
-    });
     getShapeId(): string;
     getPayloadCodec(): CborCodec;
-    serializeRequest<Input extends object>(operationSchema: OperationSchema, input: Input, context: HandlerExecutionContext & SerdeFunctions & EndpointBearer): Promise<IHttpRequest>;
-    deserializeResponse<Output extends MetadataBearer>(operationSchema: OperationSchema, context: HandlerExecutionContext & SerdeFunctions, response: IHttpResponse): Promise<Output>;
+    protected getSmithyProtocolHeaderValue(): string;
+    protected applyEmptyBody(request: IHttpRequest): void;
     protected handleError(operationSchema: OperationSchema, context: HandlerExecutionContext & SerdeFunctions, response: IHttpResponse, dataObject: any, metadata: ResponseMetadata): Promise<never>;
     protected getDefaultContentType(): string;
 }

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/AbstractRpcV2Protocol.d.ts

@@ -0,0 +1,45 @@
+import { EndpointBearer, HandlerExecutionContext, HttpRequest as IHttpRequest, OperationSchema, SerdeFunctions } from "@smithy/types";
+import { TypeRegistry } from "@smithy/core/schema";
+import { RpcProtocol } from "./RpcProtocol";
+/**
+ * Shared abstract base for the Smithy RPC v2 client protocols (JSON and CBOR).
+ *
+ * Factors out the request-framing flow and response status handling that are
+ * identical across both RPC v2 protocols. Concrete protocols supply their
+ * codec, error handling, content type, shape id, and the two per-protocol
+ * request details via {@link getSmithyProtocolHeaderValue} and
+ * {@link applyEmptyBody}.
+ *
+ * @internal
+ */
+export declare abstract class AbstractRpcV2Protocol extends RpcProtocol {
+    /**
+     * @override
+     */
+    protected compositeErrorRegistry: TypeRegistry;
+    constructor({ defaultNamespace, errorTypeRegistries, }: {
+        defaultNamespace: string;
+        errorTypeRegistries?: TypeRegistry[];
+    });
+    serializeRequest<Input extends object>(operationSchema: OperationSchema, input: Input, context: HandlerExecutionContext & SerdeFunctions & EndpointBearer): Promise<IHttpRequest>;
+    /**
+     * @override
+     *
+     * Per the Smithy RPC v2 specification, the only successful response status
+     * code is 200; any other status code MUST be handled as an error.
+     */
+    protected isErrorResponse(statusCode: number): boolean;
+    /**
+     * @returns the value of the `smithy-protocol` header for this protocol,
+     * e.g. `rpc-v2-json` or `rpc-v2-cbor`.
+     */
+    protected abstract getSmithyProtocolHeaderValue(): string;
+    /**
+     * Applies this protocol's representation of an empty request body when the
+     * operation has a non-unit input but produced no serialized body. Called
+     * only for non-unit inputs.
+     *
+     * @param request - the request being serialized, mutated in place.
+     */
+    protected abstract applyEmptyBody(request: IHttpRequest): void;
+}

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/RpcProtocol.d.ts

@@ -13,4 +13,16 @@ export declare abstract class RpcProtocol extends HttpProtocol {
     protected compositeErrorRegistry: TypeRegistry;
     serializeRequest<Input extends object>(operationSchema: OperationSchema, _input: Input, context: HandlerExecutionContext & SerdeFunctions & EndpointBearer): Promise<IHttpRequest>;
     deserializeResponse<Output extends MetadataBearer>(operationSchema: OperationSchema, context: HandlerExecutionContext & SerdeFunctions, response: IHttpResponse): Promise<Output>;
+    /**
+     * Determines whether a response status code indicates an error response that
+     * should be routed to {@link handleError} rather than deserialized as output.
+     *
+     * The default treats any status code of 300 or greater as an error,
+     * preserving the historical behavior for RPC-over-HTTP protocols. Subclasses
+     * whose specification is stricter SHOULD override this.
+     *
+     * @param statusCode - the HTTP response status code.
+     * @returns true if the response should be handled as an error.
+     */
+    protected isErrorResponse(statusCode: number): boolean;
 }

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/index.d.ts

@@ -3,6 +3,7 @@ export { extendedEncodeURIComponent } from "./extended-encode-uri-component";
 export { HttpBindingProtocol } from "./HttpBindingProtocol";
 export { HttpProtocol } from "./HttpProtocol";
 export { RpcProtocol } from "./RpcProtocol";
+export { AbstractRpcV2Protocol } from "./AbstractRpcV2Protocol";
 export { RequestBuilder, requestBuilder } from "./requestBuilder";
 export { resolvedPath } from "./resolve-path";
 export { FromStringShapeDeserializer } from "./serde/FromStringShapeDeserializer";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/json/SmithyRpcV2JsonProtocol.d.ts

@@ -1,28 +1,19 @@
-import { RpcProtocol } from "../RpcProtocol";
-import { TypeRegistry } from "@smithy/core/schema";
-import { EndpointBearer, HandlerExecutionContext, HttpRequest as IHttpRequest, HttpResponse as IHttpResponse, MetadataBearer, OperationSchema, ResponseMetadata, SerdeFunctions, ShapeDeserializer, ShapeSerializer } from "@smithy/types";
+import { AbstractRpcV2Protocol } from "../AbstractRpcV2Protocol";
+import { HandlerExecutionContext, HttpRequest as IHttpRequest, HttpResponse as IHttpResponse, OperationSchema, ResponseMetadata, SerdeFunctions, ShapeDeserializer, ShapeSerializer } from "@smithy/types";
 import { JsonCodec2 } from "./codec-v2/JsonCodec2";
 /**
  * Client protocol for Smithy RPCv2 JSON.
  *
  * @public
  */
-export declare class SmithyRpcV2JsonProtocol extends RpcProtocol {
-    /**
-     * @override
-     */
-    protected compositeErrorRegistry: TypeRegistry;
+export declare class SmithyRpcV2JsonProtocol extends AbstractRpcV2Protocol {
     private codec;
     protected serializer: ShapeSerializer<string | Uint8Array>;
     protected deserializer: ShapeDeserializer<string | Uint8Array>;
-    constructor({ defaultNamespace, errorTypeRegistries, }: {
-        defaultNamespace: string;
-        errorTypeRegistries?: TypeRegistry[];
-    });
     getShapeId(): string;
     getPayloadCodec(): JsonCodec2;
-    serializeRequest<Input extends object>(operationSchema: OperationSchema, input: Input, context: HandlerExecutionContext & SerdeFunctions & EndpointBearer): Promise<IHttpRequest>;
-    deserializeResponse<Output extends MetadataBearer>(operationSchema: OperationSchema, context: HandlerExecutionContext & SerdeFunctions, response: IHttpResponse): Promise<Output>;
+    protected getSmithyProtocolHeaderValue(): string;
+    protected applyEmptyBody(request: IHttpRequest): void;
     protected handleError(operationSchema: OperationSchema, context: HandlerExecutionContext & SerdeFunctions, response: IHttpResponse, dataObject: any, metadata: ResponseMetadata): Promise<never>;
     protected getDefaultContentType(): string;
 }

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/protocols/protocol-http/extensions/httpExtensionConfiguration.d.ts

@@ -24,6 +24,7 @@ export declare const getHttpHandlerExtensionConfiguration: <HandlerConfig extend
     logger?: Logger;
 }>(runtimeConfig: HttpHandlerExtensionConfigType<HandlerConfig> & {
     logger?: Logger;
+    defaultSocketTimeout?: number;
 }) => {
     setHttpHandler(handler: HttpHandler<HandlerConfig>): void;
     httpHandler(): HttpHandler<HandlerConfig>;

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/retry/util-retry/race.d.ts

@@ -0,0 +1,3 @@
+import { AbortSignal as DeprecatedAbortSignal } from "@smithy/types";
+export declare const race: <T>(promise: Promise<T>, signal?: AbortSignal | DeprecatedAbortSignal) => Promise<T>;
+export declare const isAbortError: (error: unknown) => boolean;

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/serde/index.browser.d.ts

@@ -40,3 +40,4 @@ export { streamCollector } from "./util-stream/stream-collector.browser";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/serde/index.d.ts

@@ -38,3 +38,4 @@ export { streamCollector } from "./util-stream/stream-collector";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/dist-types/ts3.4/submodules/serde/index.native.d.ts

@@ -38,3 +38,4 @@ export { streamCollector } from "./util-stream/stream-collector.browser";
 export declare const v4: () => string;
 export declare const generateIdempotencyToken: () => string;
 export { hasOwn } from "@smithy/core/transport";
+export { writeKey } from "./writeKey";

package/node_modules/@smithy/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/core",
-  "version": "3.36.2",
+  "version": "3.39.0",
   "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/core",
   "license": "Apache-2.0",
   "author": {
@@ -242,7 +242,7 @@
     "test:integration:watch": "yarn g:vitest watch -c vitest.config.integ.mts"
   },
   "dependencies": {
-    "@smithy/types": "^4.19.0",
+    "@smithy/types": "^4.20.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@smithy/fetch-http-handler/dist-cjs/index.js

@@ -7,15 +7,17 @@ function createRequest(url, requestOptions) {
 }
 
 function requestTimeout(timeoutInMs = 0) {
-    return new Promise((resolve, reject) => {
+    let timeoutId;
+    const promise = new Promise((resolve, reject) => {
         if (timeoutInMs) {
-            setTimeout(() => {
+            timeoutId = setTimeout(() => {
                 const timeoutError = new Error(`Request did not complete within ${timeoutInMs} ms`);
                 timeoutError.name = "TimeoutError";
                 reject(timeoutError);
             }, timeoutInMs);
         }
     });
+    return { promise, cancel: () => clearTimeout(timeoutId) };
 }
 
 const keepAliveSupport = {
@@ -95,6 +97,7 @@ class FetchHttpHandler {
             Object.assign(requestOptions, this.config.requestInit(request));
         }
         let removeSignalEventListener = () => { };
+        const timeout = requestTimeout(requestTimeoutInMs);
         const fetchRequest = createRequest(url, requestOptions);
         const raceOfPromises = [
             fetchFn(fetchRequest).then((response) => {
@@ -123,7 +126,7 @@ class FetchHttpHandler {
                     }),
                 };
             }),
-            requestTimeout(requestTimeoutInMs),
+            timeout.promise,
         ];
         if (abortSignal) {
             raceOfPromises.push(new Promise((resolve, reject) => {
@@ -141,7 +144,10 @@ class FetchHttpHandler {
                 }
             }));
         }
-        return Promise.race(raceOfPromises).finally(removeSignalEventListener);
+        return Promise.race(raceOfPromises).finally(() => {
+            timeout.cancel();
+            removeSignalEventListener();
+        });
     }
     updateHttpClientConfig(key, value) {
         this.config = undefined;

package/node_modules/@smithy/fetch-http-handler/dist-es/fetch-http-handler.js

@@ -78,6 +78,7 @@ export class FetchHttpHandler {
             Object.assign(requestOptions, this.config.requestInit(request));
         }
         let removeSignalEventListener = () => { };
+        const timeout = requestTimeoutFn(requestTimeoutInMs);
         const fetchRequest = createRequest(url, requestOptions);
         const raceOfPromises = [
             fetchFn(fetchRequest).then((response) => {
@@ -106,7 +107,7 @@ export class FetchHttpHandler {
                     }),
                 };
             }),
-            requestTimeoutFn(requestTimeoutInMs),
+            timeout.promise,
         ];
         if (abortSignal) {
             raceOfPromises.push(new Promise((resolve, reject) => {
@@ -124,7 +125,10 @@ export class FetchHttpHandler {
                 }
             }));
         }
-        return Promise.race(raceOfPromises).finally(removeSignalEventListener);
+        return Promise.race(raceOfPromises).finally(() => {
+            timeout.cancel();
+            removeSignalEventListener();
+        });
     }
     updateHttpClientConfig(key, value) {
         this.config = undefined;

package/node_modules/@smithy/fetch-http-handler/dist-es/request-timeout.js

@@ -1,11 +1,13 @@
 export function requestTimeout(timeoutInMs = 0) {
-    return new Promise((resolve, reject) => {
+    let timeoutId;
+    const promise = new Promise((resolve, reject) => {
         if (timeoutInMs) {
-            setTimeout(() => {
+            timeoutId = setTimeout(() => {
                 const timeoutError = new Error(`Request did not complete within ${timeoutInMs} ms`);
                 timeoutError.name = "TimeoutError";
                 reject(timeoutError);
             }, timeoutInMs);
         }
     });
+    return { promise, cancel: () => clearTimeout(timeoutId) };
 }

package/node_modules/@smithy/fetch-http-handler/dist-types/request-timeout.d.ts

@@ -1 +1,12 @@
-export declare function requestTimeout(timeoutInMs?: number): Promise<never>;
+/**
+ * Rejects with a TimeoutError after `timeoutInMs` (never, for 0).
+ *
+ * Call `cancel` once the request settles: a pending timer keeps the request
+ * race, and the response it settled with, reachable until the timer fires.
+ *
+ * @internal
+ */
+export declare function requestTimeout(timeoutInMs?: number): {
+    promise: Promise<never>;
+    cancel: () => void;
+};

package/node_modules/@smithy/fetch-http-handler/dist-types/ts3.4/request-timeout.d.ts

@@ -1 +1,12 @@
-export declare function requestTimeout(timeoutInMs?: number): Promise<never>;
+/**
+ * Rejects with a TimeoutError after `timeoutInMs` (never, for 0).
+ *
+ * Call `cancel` once the request settles: a pending timer keeps the request
+ * race, and the response it settled with, reachable until the timer fires.
+ *
+ * @internal
+ */
+export declare function requestTimeout(timeoutInMs?: number): {
+    promise: Promise<never>;
+    cancel: () => void;
+};

package/node_modules/@smithy/fetch-http-handler/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/fetch-http-handler",
-  "version": "5.8.0",
+  "version": "5.8.1",
   "description": "Provides a way to make requests",
   "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/fetch-http-handler",
   "license": "Apache-2.0",
@@ -40,8 +40,8 @@
     "test:browser:watch": "yarn g:vitest watch -c vitest.config.browser.mts"
   },
   "dependencies": {
-    "@smithy/core": "^3.33.3",
-    "@smithy/types": "^4.18.0",
+    "@smithy/core": "^3.39.0",
+    "@smithy/types": "^4.20.0",
     "tslib": "^2.6.2"
   },
   "devDependencies": {

package/node_modules/@smithy/signature-v4/dist-cjs/index.js

@@ -1,4 +1,4 @@
-const { hasOwn, fromUtf8, fromHex, toHex, toUint8Array, isArrayBuffer } = require("@smithy/core/serde");
+const { hasOwn, fromUtf8, fromHex, toHex, toUint8Array, writeKey, isArrayBuffer } = require("@smithy/core/serde");
 const { normalizeProvider } = require("@smithy/core/client");
 const { escapeUri, HttpRequest } = require("@smithy/core/protocols");
 
@@ -6,8 +6,9 @@ class HeaderFormatter {
     format(headers) {
         const chunks = [];
         for (const headerName in headers) {
-            if (!hasOwn(headers, headerName))
+            if (!hasOwn(headers, headerName)) {
                 continue;
+            }
             const bytes = fromUtf8(headerName);
             chunks.push(Uint8Array.from([bytes.byteLength]), bytes, this.formatHeaderValue(headers[headerName]));
         }
@@ -124,8 +125,9 @@ function negate(bytes) {
     }
     for (let i = 7; i > -1; i--) {
         bytes[i]++;
-        if (bytes[i] !== 0)
+        if (bytes[i] !== 0) {
             break;
+        }
     }
 }
 
@@ -177,8 +179,9 @@ const getCanonicalQuery = ({ query = {} }) => {
     const keys = [];
     const serialized = {};
     for (const key in query) {
-        if (!hasOwn(query, key))
+        if (!hasOwn(query, key)) {
             continue;
+        }
         if (key.toLowerCase() === SIGNATURE_HEADER) {
             continue;
         }
@@ -257,10 +260,12 @@ ${toHex(hashedRequest)}`;
         if (this.uriEscapePath) {
             const normalizedPathSegments = [];
             for (const pathSegment of path.split("/")) {
-                if (pathSegment?.length === 0)
+                if (pathSegment?.length === 0) {
                     continue;
-                if (pathSegment === ".")
+                }
+                if (pathSegment === ".") {
                     continue;
+                }
                 if (pathSegment === "..") {
                     normalizedPathSegments.pop();
                 }
@@ -331,7 +336,7 @@ const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) =>
             continue;
         }
         const canonicalHeaderName = headerName.toLowerCase();
-        if (canonicalHeaderName in ALWAYS_UNSIGNABLE_HEADERS ||
+        if (hasOwn(ALWAYS_UNSIGNABLE_HEADERS, canonicalHeaderName) ||
             unsignableHeaders?.has(canonicalHeaderName) ||
             PROXY_HEADER_PATTERN.test(canonicalHeaderName) ||
             SEC_HEADER_PATTERN.test(canonicalHeaderName)) {
@@ -339,6 +344,9 @@ const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) =>
                 continue;
             }
         }
+        if (canonicalHeaderName === "__proto__") {
+            writeKey(canonical);
+        }
         canonical[canonicalHeaderName] = headers[headerName]
             .replace(/[\r\n]/g, " ")
             .replace(/[ \t]+/g, " ")
@@ -349,8 +357,9 @@ const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) =>
 
 const getPayloadHash = async ({ headers, body }, hashConstructor) => {
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (headerName.toLowerCase() === SHA256_HEADER) {
             return headers[headerName];
         }
@@ -369,8 +378,9 @@ const getPayloadHash = async ({ headers, body }, hashConstructor) => {
 const hasHeader = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (soughtHeader === headerName.toLowerCase()) {
             return true;
         }
@@ -381,8 +391,9 @@ const hasHeader = (soughtHeader, headers) => {
 const moveHeadersToQuery = (request, options = {}) => {
     const { headers, query = {} } = HttpRequest.clone(request);
     for (const name in headers) {
-        if (!hasOwn(headers, name))
+        if (!hasOwn(headers, name)) {
             continue;
+        }
         const lname = name.toLowerCase();
         if ((lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) ||
             options.hoistableHeaders?.has(lname)) {
@@ -400,8 +411,9 @@ const moveHeadersToQuery = (request, options = {}) => {
 const prepareRequest = (request) => {
     request = HttpRequest.clone(request);
     for (const headerName in request.headers) {
-        if (!hasOwn(request.headers, headerName))
+        if (!hasOwn(request.headers, headerName)) {
             continue;
+        }
         if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
             delete request.headers[headerName];
         }

package/node_modules/@smithy/signature-v4/dist-es/HeaderFormatter.js

@@ -4,8 +4,9 @@ export class HeaderFormatter {
     format(headers) {
         const chunks = [];
         for (const headerName in headers) {
-            if (!hasOwn(headers, headerName))
+            if (!hasOwn(headers, headerName)) {
                 continue;
+            }
             const bytes = fromUtf8(headerName);
             chunks.push(Uint8Array.from([bytes.byteLength]), bytes, this.formatHeaderValue(headers[headerName]));
         }
@@ -122,7 +123,8 @@ function negate(bytes) {
     }
     for (let i = 7; i > -1; i--) {
         bytes[i]++;
-        if (bytes[i] !== 0)
+        if (bytes[i] !== 0) {
             break;
+        }
     }
 }

package/node_modules/@smithy/signature-v4/dist-es/SignatureV4Base.js

@@ -41,10 +41,12 @@ ${toHex(hashedRequest)}`;
         if (this.uriEscapePath) {
             const normalizedPathSegments = [];
             for (const pathSegment of path.split("/")) {
-                if (pathSegment?.length === 0)
+                if (pathSegment?.length === 0) {
                     continue;
-                if (pathSegment === ".")
+                }
+                if (pathSegment === ".") {
                     continue;
+                }
                 if (pathSegment === "..") {
                     normalizedPathSegments.pop();
                 }

package/node_modules/@smithy/signature-v4/dist-es/getCanonicalHeaders.js

@@ -1,3 +1,4 @@
+import { hasOwn, writeKey } from "@smithy/core/serde";
 import { ALWAYS_UNSIGNABLE_HEADERS, PROXY_HEADER_PATTERN, SEC_HEADER_PATTERN } from "./constants";
 export const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHeaders) => {
     const canonical = {};
@@ -6,7 +7,7 @@ export const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHead
             continue;
         }
         const canonicalHeaderName = headerName.toLowerCase();
-        if (canonicalHeaderName in ALWAYS_UNSIGNABLE_HEADERS ||
+        if (hasOwn(ALWAYS_UNSIGNABLE_HEADERS, canonicalHeaderName) ||
             unsignableHeaders?.has(canonicalHeaderName) ||
             PROXY_HEADER_PATTERN.test(canonicalHeaderName) ||
             SEC_HEADER_PATTERN.test(canonicalHeaderName)) {
@@ -14,6 +15,9 @@ export const getCanonicalHeaders = ({ headers }, unsignableHeaders, signableHead
                 continue;
             }
         }
+        if (canonicalHeaderName === "__proto__") {
+            writeKey(canonical);
+        }
         canonical[canonicalHeaderName] = headers[headerName]
             .replace(/[\r\n]/g, " ")
             .replace(/[ \t]+/g, " ")

package/node_modules/@smithy/signature-v4/dist-es/getCanonicalQuery.js

@@ -5,8 +5,9 @@ export const getCanonicalQuery = ({ query = {} }) => {
     const keys = [];
     const serialized = {};
     for (const key in query) {
-        if (!hasOwn(query, key))
+        if (!hasOwn(query, key)) {
             continue;
+        }
         if (key.toLowerCase() === SIGNATURE_HEADER) {
             continue;
         }

package/node_modules/@smithy/signature-v4/dist-es/getPayloadHash.js

@@ -3,8 +3,9 @@ import { isArrayBuffer, toHex, toUint8Array } from "@smithy/core/serde";
 import { SHA256_HEADER, UNSIGNED_PAYLOAD } from "./constants";
 export const getPayloadHash = async ({ headers, body }, hashConstructor) => {
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (headerName.toLowerCase() === SHA256_HEADER) {
             return headers[headerName];
         }

package/node_modules/@smithy/signature-v4/dist-es/headerUtil.js

@@ -2,8 +2,9 @@ import { hasOwn } from "@smithy/core/serde";
 export const hasHeader = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (soughtHeader === headerName.toLowerCase()) {
             return true;
         }
@@ -13,8 +14,9 @@ export const hasHeader = (soughtHeader, headers) => {
 export const getHeaderValue = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (soughtHeader === headerName.toLowerCase()) {
             return headers[headerName];
         }
@@ -24,8 +26,9 @@ export const getHeaderValue = (soughtHeader, headers) => {
 export const deleteHeader = (soughtHeader, headers) => {
     soughtHeader = soughtHeader.toLowerCase();
     for (const headerName in headers) {
-        if (!hasOwn(headers, headerName))
+        if (!hasOwn(headers, headerName)) {
             continue;
+        }
         if (soughtHeader === headerName.toLowerCase()) {
             delete headers[headerName];
         }

package/node_modules/@smithy/signature-v4/dist-es/moveHeadersToQuery.js

@@ -3,8 +3,9 @@ import { HttpRequest } from "@smithy/core/protocols";
 export const moveHeadersToQuery = (request, options = {}) => {
     const { headers, query = {} } = HttpRequest.clone(request);
     for (const name in headers) {
-        if (!hasOwn(headers, name))
+        if (!hasOwn(headers, name)) {
             continue;
+        }
         const lname = name.toLowerCase();
         if ((lname.slice(0, 6) === "x-amz-" && !options.unhoistableHeaders?.has(lname)) ||
             options.hoistableHeaders?.has(lname)) {

package/node_modules/@smithy/signature-v4/dist-es/prepareRequest.js

@@ -4,8 +4,9 @@ import { GENERATED_HEADERS } from "./constants";
 export const prepareRequest = (request) => {
     request = HttpRequest.clone(request);
     for (const headerName in request.headers) {
-        if (!hasOwn(request.headers, headerName))
+        if (!hasOwn(request.headers, headerName)) {
             continue;
+        }
         if (GENERATED_HEADERS.indexOf(headerName.toLowerCase()) > -1) {
             delete request.headers[headerName];
         }

package/node_modules/@smithy/signature-v4/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smithy/signature-v4",
-  "version": "5.7.4",
+  "version": "5.7.5",
   "description": "A standalone implementation of the AWS Signature V4 request signing algorithm",
   "homepage": "https://github.com/smithy-lang/smithy-typescript/tree/main/packages/signature-v4",
   "license": "Apache-2.0",
@@ -38,7 +38,7 @@
     "test:watch": "yarn g:vitest watch"
   },
   "dependencies": {
-    "@smithy/core": "^3.35.0",
+    "@smithy/core": "^3.38.0",
     "@smithy/types": "^4.19.0",
     "tslib": "^2.6.2"
   },