Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Release v1.1.1 #11

Merged
merged 3 commits into from
Nov 29, 2023
Merged

Release v1.1.1 #11

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2dcd888
chore(deps): bump cryptography from 41.0.4 to 41.0.6 in /src/lambda-l…
dependabot[bot] Nov 29, 2023
a765b67
fix: use cdk synth --no-lookup in the Github Worklow, this helps when…
gmuslia Nov 29, 2023
7dadf43
chore: prepare the RELEASE v1.1.1
gmuslia Nov 29, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,6 +35,6 @@ jobs:
run: ./scripts/build.sh
- name: Test
run: ./scripts/test.sh
- name: CDK-Synth
run: ./scripts/cdk-synth.sh
- name: CDK-Synth-No-Lookup
run: ./scripts/cdk-synth-no-lookup.sh

10 changes: 10 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,16 @@ and this project adheres to [Semantic Versioning](http://semver.org/).

## [Released]

## [1.1.1] - 2023-11-29done
In this release we have included bugfixes, small updates to README as well as changed the Github Workflow to use cdk synth without lookup.

### Added
### Changed
- Use cdk synth --no-lookup (scripts/cdk-synth-no-lookup.sh) in the Github Workflows. This helps the forks which are using [Amazon VPC](https://docs.aws.amazon.com/de_de/vpc/latest/userguide/what-is-amazon-vpc.html) remove the need to connect their Github repo to the AWS Account where the VPC is living. Instead, the lookup will still run in the CodePipeline steps as before.
### Fixed
- Commit message for the initialization of the downstream with CodeCommit in accordance with the conventional commits convention.
- Bump cryptography from 41.0.4 to 41.0.6 in /src/lambda-layer/common which solves [CWE-476](https://cwe.mitre.org/data/definitions/476.html)

## [1.1.0] - 2023-11-08
In this release we harden the security functionalities built into the pipeline. The newly introduced scanners ensure that not just your IaaC in TypeScript will follow the best practices but your Python and Bash scripts as well. Make sure to run ```npm ci``` after pulling this release into your existing version.
BREAKING CHANGE: You need to first destroy the MonitoringStack first and then the existing LambdaStack before promoting the changes to the stages (DEV/INT/ ...)
Expand Down
Loading
Loading