@squiz/job-runner-lib 2.4.0 → 2.5.1

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Change Log
 
+## 2.5.1
+
+### Patch Changes
+
+- 61edb6e: Fix S3 key validation vulnerabilities
+
+## 2.5.0
+
+### Minor Changes
+
+- 1c41058: Updated packages
+
 ## 2.4.0
 
 ### Minor Changes

package/lib/domains/job/S3Repository/S3RepositoryBase.d.ts

@@ -13,6 +13,12 @@ export declare class S3RepositoryBase {
     protected s3Client: S3Client;
     protected bucketName: string;
     constructor(s3Client: S3Client, bucketName: string);
+    /**
+     * Validates S3 key to prevent malicious input
+     * @param {string} key The S3 object key to validate
+     * @private
+     */
+    private validateS3Key;
     /**
      * Save object into S3.
      * @param {string} key The S3 object key.

package/lib/domains/job/services/JobExecutionTaskService/JobExecutionTaskService.defs.d.ts

@@ -14,7 +14,6 @@ export interface RunJobTaskParams {
     shortRegion: string;
     shortEnvironment: string;
     clusterArn: string;
-    subnets: Array<string>;
     taskDefinitionArn: string;
     tenantId: string;
 }