@servicevic-oss/cdk-cleanup-certificate-validation-records 1.3.41 → 1.3.43

package/.jsii

@@ -7,8 +7,8 @@
     ]
   },
   "bundled": {
-    "@aws-sdk/client-acm": "^3.1079.0",
-    "@aws-sdk/client-route-53": "^3.1079.0",
+    "@aws-sdk/client-acm": "^3.1081.0",
+    "@aws-sdk/client-route-53": "^3.1081.0",
     "@types/aws-lambda": "^8.10.162",
     "async-await-retry": "^2.1.0"
   },
@@ -8898,6 +8898,6 @@
       "symbolId": "src/index:CertificateWithCleanup"
     }
   },
-  "version": "1.3.41",
-  "fingerprint": "TgMAuPTzsLs0CcXxDqhxOu+Ls5ZFkiGfq6fFM+uw1b4="
+  "version": "1.3.43",
+  "fingerprint": "MlNiz29BlYrQgxdLWVlAYN630m7+gmVBRqDajhjAJcY="
 }

package/lib/index.js

@@ -43,7 +43,7 @@ const constructs_1 = require("constructs");
  * leave behind when deleting a DNS validated certificate
  */
 class CertificateValidationRecordCleanup extends constructs_1.Construct {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@servicevic-oss/cdk-cleanup-certificate-validation-records.CertificateValidationRecordCleanup", version: "1.3.41" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@servicevic-oss/cdk-cleanup-certificate-validation-records.CertificateValidationRecordCleanup", version: "1.3.43" };
     static HANDLER_UID = 'CertRecordsCleanupHandler-2B663BAB-7981';
     static PROVIDER_UID = 'CertRecordsCleanupProvider-57EBF059-2E26';
     static LOG_GROUP_UID = 'CertRecordsCleanupLogGroup-57ABF051-1E25';
@@ -109,7 +109,7 @@ exports.CertificateValidationRecordCleanup = CertificateValidationRecordCleanup;
  * A wrapper class for a vanilla `Certificate` object with automatic cleanup attached
  */
 class CertificateWithCleanup extends cdk.aws_certificatemanager.Certificate {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@servicevic-oss/cdk-cleanup-certificate-validation-records.CertificateWithCleanup", version: "1.3.41" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@servicevic-oss/cdk-cleanup-certificate-validation-records.CertificateWithCleanup", version: "1.3.43" };
     constructor(scope, id, props) {
         super(scope, id, props);
         if (props.validation && props.validation.props.hostedZone && props.validation?.method == cdk.aws_certificatemanager.ValidationMethod.DNS) {

package/node_modules/@aws-sdk/client-acm/dist-cjs/index.js

@@ -71,7 +71,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1078.0";
+var version = "3.1080.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-acm/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-acm",
   "description": "AWS SDK for JavaScript Acm Client for Node.js, Browser and React Native",
-  "version": "3.1079.0",
+  "version": "3.1081.0",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
     "build:cjs": "node ../../scripts/compilation/inline",
@@ -21,8 +21,8 @@
   "module": "./dist-es/index.js",
   "sideEffects": false,
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/credential-provider-node": "^3.972.62",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/credential-provider-node": "^3.972.64",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/fetch-http-handler": "^5.6.2",

package/node_modules/@aws-sdk/client-route-53/dist-cjs/index.js

@@ -70,7 +70,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1078.0";
+var version = "3.1080.0";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/client-route-53/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-route-53",
   "description": "AWS SDK for JavaScript Route 53 Client for Node.js, Browser and React Native",
-  "version": "3.1079.0",
+  "version": "3.1081.0",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
     "build:cjs": "node ../../scripts/compilation/inline",
@@ -25,8 +25,8 @@
   "module": "./dist-es/index.js",
   "sideEffects": false,
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/credential-provider-node": "^3.972.62",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/credential-provider-node": "^3.972.64",
     "@aws-sdk/middleware-sdk-route53": "^3.972.19",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",

package/node_modules/@aws-sdk/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/core",
-  "version": "3.974.27",
+  "version": "3.974.29",
   "description": "Core functions & classes shared by multiple AWS SDK clients.",
   "scripts": {
     "build": "concurrently 'yarn:build:types' 'yarn:build:es' && yarn build:cjs",
@@ -12,7 +12,7 @@
     "clean": "premove dist-cjs dist-es dist-types",
     "extract:docs": "api-extractor run --local",
     "lint": "node ../../scripts/validation/submodules-linter.js",
-    "prebuild": "node scripts/copy-partitions.js && yarn lint",
+    "prebuild": "yarn lint",
     "test": "yarn g:vitest run",
     "test:watch": "yarn g:vitest watch",
     "test:integration": "yarn g:vitest run -c vitest.config.integ.mts && yarn test:temp:retry",

package/node_modules/@aws-sdk/credential-provider-env/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-env",
-  "version": "3.972.53",
+  "version": "3.972.55",
   "description": "AWS credential provider that sources credentials from known environment variables",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -26,7 +26,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
+    "@aws-sdk/core": "^3.974.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/node_modules/@aws-sdk/credential-provider-http/dist-cjs/index.js

@@ -123,19 +123,19 @@ const fromHttp = (options = {}) => {
     if (relative && full) {
         warn("@aws-sdk/credential-provider-http: " +
             "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
-        warn("awsContainerCredentialsFullUri will take precedence.");
+        warn("awsContainerCredentialsRelativeUri will take precedence.");
     }
     if (token && tokenFile) {
         warn("@aws-sdk/credential-provider-http: " +
             "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
-        warn("awsContainerAuthorizationToken will take precedence.");
+        warn("awsContainerAuthorizationTokenFile will take precedence.");
     }
-    if (full) {
-        host = full;
-    }
-    else if (relative) {
+    if (relative) {
         host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;
     }
+    else if (full) {
+        host = full;
+    }
     else {
         throw new CredentialsProviderError(`No HTTP credential provider host provided.
 Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });
@@ -146,11 +146,11 @@ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
     const requestTimeout = options.timeout ?? 1000;
     const provider = retryWrapper(async () => {
         const request = createGetRequest(url);
-        if (token) {
-            request.headers.Authorization = token;
+        if (tokenFile) {
+            request.headers.Authorization = validateToken((await fs.readFile(tokenFile)).toString());
         }
-        else if (tokenFile) {
-            request.headers.Authorization = (await fs.readFile(tokenFile)).toString();
+        else if (token) {
+            request.headers.Authorization = validateToken(token);
         }
         try {
             const result = await requestHandler.handle(request, { requestTimeout });
@@ -169,5 +169,11 @@ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
         }
     };
 };
+const validateToken = (token) => {
+    if (token.includes("\r\n")) {
+        throw new CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");
+    }
+    return token;
+};
 
 exports.fromHttp = fromHttp;

package/node_modules/@aws-sdk/credential-provider-http/dist-es/fromHttp/fromHttp.js

@@ -23,19 +23,19 @@ export const fromHttp = (options = {}) => {
     if (relative && full) {
         warn("@aws-sdk/credential-provider-http: " +
             "you have set both awsContainerCredentialsRelativeUri and awsContainerCredentialsFullUri.");
-        warn("awsContainerCredentialsFullUri will take precedence.");
+        warn("awsContainerCredentialsRelativeUri will take precedence.");
     }
     if (token && tokenFile) {
         warn("@aws-sdk/credential-provider-http: " +
             "you have set both awsContainerAuthorizationToken and awsContainerAuthorizationTokenFile.");
-        warn("awsContainerAuthorizationToken will take precedence.");
+        warn("awsContainerAuthorizationTokenFile will take precedence.");
     }
-    if (full) {
-        host = full;
-    }
-    else if (relative) {
+    if (relative) {
         host = `${DEFAULT_LINK_LOCAL_HOST}${relative}`;
     }
+    else if (full) {
+        host = full;
+    }
     else {
         throw new CredentialsProviderError(`No HTTP credential provider host provided.
 Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI.`, { logger: options.logger });
@@ -46,11 +46,11 @@ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
     const requestTimeout = options.timeout ?? 1000;
     const provider = retryWrapper(async () => {
         const request = createGetRequest(url);
-        if (token) {
-            request.headers.Authorization = token;
+        if (tokenFile) {
+            request.headers.Authorization = validateToken((await fs.readFile(tokenFile)).toString());
         }
-        else if (tokenFile) {
-            request.headers.Authorization = (await fs.readFile(tokenFile)).toString();
+        else if (token) {
+            request.headers.Authorization = validateToken(token);
         }
         try {
             const result = await requestHandler.handle(request, { requestTimeout });
@@ -69,3 +69,9 @@ Set AWS_CONTAINER_CREDENTIALS_FULL_URI or AWS_CONTAINER_CREDENTIALS_RELATIVE_URI
         }
     };
 };
+const validateToken = (token) => {
+    if (token.includes("\r\n")) {
+        throw new CredentialsProviderError("Authorization token contains invalid \\r\\n sequence.");
+    }
+    return token;
+};

package/node_modules/@aws-sdk/credential-provider-http/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-http",
-  "version": "3.972.55",
+  "version": "3.972.57",
   "description": "AWS credential provider for containers and HTTP sources",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -36,7 +36,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
+    "@aws-sdk/core": "^3.974.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/fetch-http-handler": "^5.6.2",

package/node_modules/@aws-sdk/credential-provider-ini/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-ini",
-  "version": "3.972.60",
+  "version": "3.972.62",
   "description": "AWS credential provider that sources credentials from ~/.aws/credentials and ~/.aws/config",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,14 +28,14 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/credential-provider-env": "^3.972.53",
-    "@aws-sdk/credential-provider-http": "^3.972.55",
-    "@aws-sdk/credential-provider-login": "^3.972.59",
-    "@aws-sdk/credential-provider-process": "^3.972.53",
-    "@aws-sdk/credential-provider-sso": "^3.972.59",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.59",
-    "@aws-sdk/nested-clients": "^3.997.27",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/credential-provider-env": "^3.972.55",
+    "@aws-sdk/credential-provider-http": "^3.972.57",
+    "@aws-sdk/credential-provider-login": "^3.972.61",
+    "@aws-sdk/credential-provider-process": "^3.972.55",
+    "@aws-sdk/credential-provider-sso": "^3.972.61",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.61",
+    "@aws-sdk/nested-clients": "^3.997.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/credential-provider-imds": "^4.4.5",

package/node_modules/@aws-sdk/credential-provider-login/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-login",
-  "version": "3.972.59",
+  "version": "3.972.61",
   "description": "AWS credential provider that sources credentials from aws login cached tokens",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,8 +28,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/nested-clients": "^3.997.27",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/nested-clients": "^3.997.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/node_modules/@aws-sdk/credential-provider-node/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-node",
-  "version": "3.972.62",
+  "version": "3.972.64",
   "description": "AWS credential provider that sources credentials from a Node.JS environment. ",
   "engines": {
     "node": ">=20.0.0"
@@ -31,12 +31,12 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/credential-provider-env": "^3.972.53",
-    "@aws-sdk/credential-provider-http": "^3.972.55",
-    "@aws-sdk/credential-provider-ini": "^3.972.60",
-    "@aws-sdk/credential-provider-process": "^3.972.53",
-    "@aws-sdk/credential-provider-sso": "^3.972.59",
-    "@aws-sdk/credential-provider-web-identity": "^3.972.59",
+    "@aws-sdk/credential-provider-env": "^3.972.55",
+    "@aws-sdk/credential-provider-http": "^3.972.57",
+    "@aws-sdk/credential-provider-ini": "^3.972.62",
+    "@aws-sdk/credential-provider-process": "^3.972.55",
+    "@aws-sdk/credential-provider-sso": "^3.972.61",
+    "@aws-sdk/credential-provider-web-identity": "^3.972.61",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/credential-provider-imds": "^4.4.5",

package/node_modules/@aws-sdk/credential-provider-process/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-process",
-  "version": "3.972.53",
+  "version": "3.972.55",
   "description": "AWS credential provider that sources credential_process from ~/.aws/credentials and ~/.aws/config",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -26,7 +26,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
+    "@aws-sdk/core": "^3.974.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/node_modules/@aws-sdk/credential-provider-sso/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-sso",
-  "version": "3.972.59",
+  "version": "3.972.61",
   "description": "AWS credential provider that exchanges a resolved SSO login token file for temporary AWS credentials",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,9 +28,9 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/nested-clients": "^3.997.27",
-    "@aws-sdk/token-providers": "3.1079.0",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/nested-clients": "^3.997.29",
+    "@aws-sdk/token-providers": "3.1081.0",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/node_modules/@aws-sdk/credential-provider-web-identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/credential-provider-web-identity",
-  "version": "3.972.59",
+  "version": "3.972.61",
   "description": "AWS credential provider that calls STS assumeRole for temporary AWS credentials",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -33,8 +33,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/nested-clients": "^3.997.27",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/nested-clients": "^3.997.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/cognito-identity/index.js

@@ -81,7 +81,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.26";
+var version = "3.997.28";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/signin/index.js

@@ -77,7 +77,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.26";
+var version = "3.997.28";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso/index.js

@@ -77,7 +77,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.26";
+var version = "3.997.28";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sso-oidc/index.js

@@ -77,7 +77,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.26";
+var version = "3.997.28";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/nested-clients/dist-cjs/submodules/sts/index.js

@@ -258,7 +258,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.997.26";
+var version = "3.997.28";
 var packageInfo = {
 	version: version};
 

package/node_modules/@aws-sdk/nested-clients/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/nested-clients",
-  "version": "3.997.27",
+  "version": "3.997.29",
   "description": "Nested clients for AWS SDK packages.",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -28,7 +28,7 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
+    "@aws-sdk/core": "^3.974.29",
     "@aws-sdk/signature-v4-multi-region": "^3.996.38",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",

package/node_modules/@aws-sdk/token-providers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/token-providers",
-  "version": "3.1079.0",
+  "version": "3.1081.0",
   "description": "A collection of token providers",
   "main": "./dist-cjs/index.js",
   "module": "./dist-es/index.js",
@@ -29,8 +29,8 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@aws-sdk/core": "^3.974.27",
-    "@aws-sdk/nested-clients": "^3.997.27",
+    "@aws-sdk/core": "^3.974.29",
+    "@aws-sdk/nested-clients": "^3.997.29",
     "@aws-sdk/types": "^3.973.15",
     "@smithy/core": "^3.29.0",
     "@smithy/types": "^4.15.1",

package/package.json

@@ -62,8 +62,8 @@
     "constructs": "^10.5.1"
   },
   "dependencies": {
-    "@aws-sdk/client-acm": "^3.1079.0",
-    "@aws-sdk/client-route-53": "^3.1079.0",
+    "@aws-sdk/client-acm": "^3.1081.0",
+    "@aws-sdk/client-route-53": "^3.1081.0",
     "@types/aws-lambda": "^8.10.162",
     "async-await-retry": "^2.1.0"
   },
@@ -91,7 +91,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "1.3.41",
+  "version": "1.3.43",
   "jest": {
     "coverageProvider": "v8",
     "testMatch": [