Upgrade: [dependabot] - bump @middy/core from 6.4.5 to 7.2.3
Type: Pull Request
State: Open
Association: Unknown
Comments: 7
(about 2 months ago)
(about 2 months ago)
dependencies javascript requires-manual-qa
⚠️ Dependabot is rebasing this PR ⚠️
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps @middy/core from 6.4.5 to 7.2.3.
Release notes
Sourced from @middy/core's releases.
7.2.2
What's Changed
- Low risk Prototype Pollution with
internalin@middy/utilNPM Package@dfzysmy2tf-create#1609@middy/http-cors: Punycode normalization breaks origin matching for mixed-case hostnames (since v7.1.1)@WtfJoke#1608- chore(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by
@dependabot[bot] in middyjs/middy#1606- chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by
@dependabot[bot] in middyjs/middy#1605- chore(deps): bump github/codeql-action from 4.33.0 to 4.35.1 by
@dependabot[bot] in middyjs/middy#1610Full Changelog: https://github.com/middyjs/middy/compare/7.2.1...7.2.2
7.2.1
What changed
@middy/cloudformation-responseversion 7.1.7 breaks life cycle of custom resource #1602Full Changelog: https://github.com/middyjs/middy/compare/7.2.0...7.2.1
7.2.0
What's Changed
- event-normalizer: add support for rmq
Full Changelog: https://github.com/middyjs/middy/compare/7.1.8...7.2.0
7.1.8
What's Changed
- fix appconfig: crash when Configuration absent in GetLatestConfiguration response (SDK >= 3.929.0) #1600
Full Changelog: https://github.com/middyjs/middy/compare/7.1.7...7.1.8
7.1.7
What's Changed
@middy/secrets-manager: Fixed crash when LastRotationDate or LastChangedDate is undefined during rotation-date-based cache expiry calculation. Previously, Math.max(undefined, ...) would produce NaN, breaking the cache logic. Now defaults to 0 when either date is missing.@middy/cloudformation-response: Auto-populate PhysicalResourceId from context.logStreamName when not explicitly set. This prevents CloudFormation custom resource responses from failing due to a missing required field.@middy/core(types): Widened the TErr generic in UseFn from Error to any, allowing middleware that uses custom error types to be passed to .use() without type errors.
- Issue/1594 in middyjs/middy#1597
Full Changelog: https://github.com/middyjs/middy/compare/7.1.6...7.1.7
7.1.6
What's Changed
- Compatability with lambda power tools broken since 7.1.3 #1594
- chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by
@dependabot[bot] in middyjs/middy#1593- chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by
@dependabot[bot] in middyjs/middy#1592Full Changelog: https://github.com/middyjs/middy/compare/7.1.5...7.1.6
7.1.5
... (truncated)
Commits
88a8fd1chore: version bumpfbdb4e6fix: make sure plugin.requestEnd always runs7316d0atest: improve fuzz coverage0516ad5test: improve perf test controls02056e2fix: small sec improvements8301442chore: version bumpd040588fix: prevent prototype pollution on internal object8ca0256chore: version bump136e3b4chore: dep updateca70b9bchore: version bump- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @middy/core since your current version.
Package Dependencies
Technical Details
| ID: | 15367979 |
| UUID: | 4284460226 |
| Node ID: | PR_kwDOL025w87TaBVU |
| Host: | GitHub |
| Repository: | NHSDigital/eps-load-test |