cdk-ecr-deployment 2.5.0 → 2.5.3

package/.gitattributes

@@ -9,7 +9,6 @@
 /.github/workflows/pull-request-lint.yml linguist-generated
 /.github/workflows/release-v1-main.yml linguist-generated
 /.github/workflows/release.yml linguist-generated
-/.github/workflows/stale.yml linguist-generated
 /.github/workflows/upgrade-main.yml linguist-generated
 /.github/workflows/upgrade-v1-main.yml linguist-generated
 /.gitignore linguist-generated

package/.jsii

@@ -3330,6 +3330,6 @@
       "symbolId": "src/index:S3ArchiveName"
     }
   },
-  "version": "2.5.0",
-  "fingerprint": "3mLYngpykDsoD4fk8zZhCKMcPe4fSNCho13J/iBIv18="
+  "version": "2.5.3",
+  "fingerprint": "wVg46eKSV8HZR9XFJGIEhtL18SwSCw5kC9+va6fZW5I="
 }

package/changelog.md

@@ -1,13 +1,9 @@
 
-## [2.5.0](https://github.com/cdklabs/cdk-ecr-deployment/compare/v2.4.4...v2.5.0) (2022-04-10)
-
-
-### Features
-
-* add FORCE_PREBUILT_LAMBDA env ([ad3359f](https://github.com/cdklabs/cdk-ecr-deployment/commit/ad3359fde560597f4d3bda1d5da0c67fd1f6d97b))
+### [2.5.3](https://github.com/cdklabs/cdk-ecr-deployment/compare/v2.5.2...v2.5.3) (2022-05-28)
 
 
 ### Bug Fixes
 
-* github.com/urfave/cli@v1.20.0: reading https://goproxy.cn/github.com/urfave/cli/@v/v1.20.0.mod: 504 Gateway Timeout ([11a0397](https://github.com/cdklabs/cdk-ecr-deployment/commit/11a0397b5db39a7567dd4fa42f4cb9affa3d1f77))
-* test Dockerfile GOPROXY seperator to pipe(|) ([99c72ee](https://github.com/cdklabs/cdk-ecr-deployment/commit/99c72ee5c9c53cf1cd79271a1ed2893afe8c80ba))
+* GOPROXY naming conflicts ([303e3b4](https://github.com/cdklabs/cdk-ecr-deployment/commit/303e3b478d78830cdac24e2c8a3b735e2ce74a45))
+* security issues ([2f10629](https://github.com/cdklabs/cdk-ecr-deployment/commit/2f106294febd2d6602b6e43dda4c57af71c779fc))
+* wrong ARG position leading to GOPROXY unset ([66b66e5](https://github.com/cdklabs/cdk-ecr-deployment/commit/66b66e52770f7e37ea48343e95e29d368c52fac4))

package/lambda/Dockerfile

@@ -13,16 +13,22 @@ RUN yum -y install \
     libassuan-devel \
     libudev-devel
 
+# In https://github.com/aws/aws-sam-build-images/blob/0a39eebc0d1d462afbe155d4e6a4cbcb12888847/build-image-src/Dockerfile-go1x#L29
+# already defined GOPROXY env.
+# To avoid naming conflict which will lead to weird error like https://github.com/laradock/laradock/issues/2618
+# , use the following name instead
+ARG _GOPROXY
+
 ENV GOOS=linux \
     GOARCH=amd64 \
     GO111MODULE=on \
-    GOPROXY=https://goproxy.cn|https://goproxy.io|direct
+    GOPROXY="${_GOPROXY}"
 
 WORKDIR /ws
 
 COPY go.mod go.sum ./
 
-RUN go mod download -x
+RUN go env && go mod download -x
 
 COPY . /ws
 

package/lambda/go.mod

@@ -3,39 +3,30 @@ module cdk-ecr-deployment-handler
 go 1.15
 
 require (
-	github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
-	github.com/Microsoft/go-winio v0.5.1 // indirect
-	github.com/Microsoft/hcsshim v0.9.2 // indirect
-	github.com/aws/aws-lambda-go v1.23.0
-	github.com/aws/aws-sdk-go-v2 v1.14.0
-	github.com/aws/aws-sdk-go-v2/config v1.1.6
-	github.com/aws/aws-sdk-go-v2/internal/ini v1.3.6 // indirect
-	github.com/aws/aws-sdk-go-v2/service/ecr v1.2.2
-	github.com/aws/aws-sdk-go-v2/service/s3 v1.5.0
-	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.14.0
-	github.com/cespare/xxhash/v2 v2.1.2 // indirect
-	github.com/containerd/cgroups v1.0.3 // indirect
-	github.com/containerd/containerd v1.5.10 // indirect
-	github.com/containers/image/v5 v5.17.0
-	github.com/docker/distribution v2.8.0+incompatible // indirect
-	github.com/docker/docker v20.10.12+incompatible // indirect
+	github.com/BurntSushi/toml v1.1.0 // indirect
+	github.com/aws/aws-lambda-go v1.29.0
+	github.com/aws/aws-sdk-go-v2 v1.16.2
+	github.com/aws/aws-sdk-go-v2/config v1.15.3
+	github.com/aws/aws-sdk-go-v2/service/ecr v1.17.3
+	github.com/aws/aws-sdk-go-v2/service/s3 v1.26.4
+	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.15.4
+	github.com/containerd/containerd v1.6.2 // indirect
+	github.com/containers/image/v5 v5.21.0
+	github.com/containers/storage v1.39.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
-	github.com/hashicorp/errwrap v1.1.0 // indirect
-	github.com/moby/term v0.0.0-20210610120745-9d4ed1856297 // indirect
+	github.com/gorilla/mux v1.8.0 // indirect
+	github.com/imdario/mergo v0.3.13 // indirect
 	github.com/opencontainers/go-digest v1.0.0
-	github.com/opencontainers/image-spec v1.0.3-0.20211202193544-a5463b7f9c84 // indirect
-	github.com/opencontainers/runc v1.1.0 // indirect
+	github.com/opencontainers/runc v1.1.2 // indirect
 	github.com/pkg/errors v0.9.1
-	github.com/prometheus/common v0.30.0 // indirect
-	github.com/prometheus/procfs v0.7.3 // indirect
+	github.com/prometheus/common v0.33.0 // indirect
 	github.com/sirupsen/logrus v1.8.1
-	github.com/stretchr/testify v1.7.0
-	golang.org/x/crypto v0.0.0-20210817164053-32db794688a5 // indirect
-	golang.org/x/net v0.0.0-20211216030914-fe4d6282115f // indirect
-	golang.org/x/term v0.0.0-20210615171337-6886f2dfbf5b // indirect
-	golang.org/x/time v0.0.0-20210723032227-1f47c861a9ac // indirect
-	google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
-	google.golang.org/grpc v1.43.0 // indirect
-	gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
-	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
+	github.com/stretchr/testify v1.7.1
+	github.com/vbauerster/mpb/v7 v7.4.1 // indirect
+	go.mozilla.org/pkcs7 v0.0.0-20210826202110-33d05740a352 // indirect
+	golang.org/x/crypto v0.0.0-20220408190544-5352b0902921 // indirect
+	golang.org/x/net v0.0.0-20220407224826-aac1ed45d8e3 // indirect
+	golang.org/x/sys v0.0.0-20220408201424-a24fb2fb8a0f // indirect
+	google.golang.org/genproto v0.0.0-20220407144326-9054f6ed7bac // indirect
+	gopkg.in/square/go-jose.v2 v2.6.0 // indirect
 )