[Snyk] Fix for 1 vulnerabilities

[goatandsheep]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-AWSSDKSHAREDINIFILELOADER-1049304	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @aws-amplify/auth

The new version differs by 250 commits.

• 6a84560 chore(release): Publish [ci skip]
• c370e9a release: Amplify JS release (#11458)
• 2d934a3 feat(clients): use custom cognito-identity and pinpoint clients (#11427)
• e402fa7 Merge branch 'main' into v5/custom-clients
• c38d4c6 fix: Core build issue (#11449)
• 2d6eecf fix: address feedbacks
• 47ff2e1 chore: prepare for release; split out data packages diffs
• e718b47 Merge branch 'main' into v5/custom-clients
• f576be5 fix(clients): middleware chain revert after every invocation (#11432)
• ffe65ea chore: Add GitHub workflow for detecting changes to `aws-amplify` package.json (#11416)
• 94da23c Merge remote-tracking branch 'upstream/main' into v5/custom-clients (#11428)
• 1699ab6 Merge remote-tracking branch 'upstream/main' into v5/custom-clients
• 2e8acaa chore(release): update API docs [ci skip]
• e7a6f07 chore(release): Publish [ci skip]
• aefcff2 release(required): Amplify JS release (#11415)
• 8137ee7 fix(core): bundle react-native-url-polyfill to unblock jest test failure (#11422)
• a9d5cc1 Merge remote-tracking branch 'upstream/main' into v5/custom-clients (#11417)
• 7e95298 Merge remote-tracking branch 'upstream/main' into v5/custom-clients-merge-0526
• eeb6c9c fix: Revert `getProperties` API (#11419)
• 7179636 Revert "feat(storage): getProperties API (#11378)"
• 457f562 Revert "fix(storage): make getProperties param optional (#11413)"
• 9e4d497 Merge remote-tracking branch 'upstream/main' into v5/custom-clients
• 5d00b1f fix(storage): make getProperties param optional (#11413)
• a009ce8 fix(notifications): Add babel plugins to devDependencies (#11414)

See the full diff

Package name: @aws-amplify/core

The new version differs by 250 commits.

• 6a84560 chore(release): Publish [ci skip]
• c370e9a release: Amplify JS release (#11458)
• 2d934a3 feat(clients): use custom cognito-identity and pinpoint clients (#11427)
• e402fa7 Merge branch 'main' into v5/custom-clients
• c38d4c6 fix: Core build issue (#11449)
• 2d6eecf fix: address feedbacks
• 47ff2e1 chore: prepare for release; split out data packages diffs
• e718b47 Merge branch 'main' into v5/custom-clients
• f576be5 fix(clients): middleware chain revert after every invocation (#11432)
• ffe65ea chore: Add GitHub workflow for detecting changes to `aws-amplify` package.json (#11416)
• 94da23c Merge remote-tracking branch 'upstream/main' into v5/custom-clients (#11428)
• 1699ab6 Merge remote-tracking branch 'upstream/main' into v5/custom-clients
• 2e8acaa chore(release): update API docs [ci skip]
• e7a6f07 chore(release): Publish [ci skip]
• aefcff2 release(required): Amplify JS release (#11415)
• 8137ee7 fix(core): bundle react-native-url-polyfill to unblock jest test failure (#11422)
• a9d5cc1 Merge remote-tracking branch 'upstream/main' into v5/custom-clients (#11417)
• 7e95298 Merge remote-tracking branch 'upstream/main' into v5/custom-clients-merge-0526
• eeb6c9c fix: Revert `getProperties` API (#11419)
• 7179636 Revert "feat(storage): getProperties API (#11378)"
• 457f562 Revert "fix(storage): make getProperties param optional (#11413)"
• 9e4d497 Merge remote-tracking branch 'upstream/main' into v5/custom-clients
• 5d00b1f fix(storage): make getProperties param optional (#11413)
• a009ce8 fix(notifications): Add babel plugins to devDependencies (#11414)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution