Update to version v3.2.11 (#207)

aws-solutions · Aug 19, 2024 · 7b1ddc3 · 7b1ddc3
1 parent 342139f
commit 7b1ddc3
Show file tree

Hide file tree

Showing 25 changed files with 73 additions and 63 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.2.11] - 2024-08-19
+
+### Updated
+
+- Updated taurus from 1.16.31 to 1.16.34
+- Updated axios to 1.7.4 to mitigate [CVE-2024-39338](https://nvd.nist.gov/vuln/detail/CVE-2024-39338)
+- Updated urllib3 to 2.2.2 to mitgate [CVE-2024-37891](https://nvd.nist.gov/vuln/detail/CVE-2024-37891)
+- Updated Werkzeug to 3.0.3 to mitigate [CVE-2024-34069](https://nvd.nist.gov/vuln/detail/CVE-2024-34069)
+- Updated cryptography to 42.0.6 to mitigate [CVE-2024-2511](https://nvd.nist.gov/vuln/detail/CVE-2024-2511)
+
 ## [3.2.10] - 2024-08-02
 
 ### Updated

diff --git a/VERSION.txt b/VERSION.txt
@@ -1 +1 @@
-3.2.10
+3.2.11
diff --git a/deployment/ecr/distributed-load-testing-on-aws-load-tester/Dockerfile b/deployment/ecr/distributed-load-testing-on-aws-load-tester/Dockerfile
@@ -1,4 +1,4 @@
-FROM blazemeter/taurus:1.16.31
+FROM blazemeter/taurus:1.16.34
 # taurus includes python and pip
 RUN /usr/bin/python3 -m pip install --upgrade pip
 RUN pip install --no-cache-dir awscli
@@ -23,21 +23,21 @@ RUN python3 /bzt-configs/jar_updater.py
 # Remove K6 as it is not supported in DLT by default
 RUN apt remove -y k6
 
-RUN /bin/bash -c "source /etc/profile.d/rbenv.sh && yes | rbenv uninstall $(cat /usr/local/rbenv/version)"
+RUN /bin/bash -c "source /etc/profile.d/rbenv.sh && rbenv uninstall --force $(cat /usr/local/rbenv/version)"
 RUN rm -rf /usr/local/rbenv
 
 # Replacing urllib3 with more stable Versions to resolve vulnerabilities
-RUN pip install urllib3==2.0.7
+RUN pip install urllib3==2.2.2
 RUN rm -rf /root/.bzt/python-packages/3.10.12/urllib3*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/urllib3* /root/.bzt/python-packages/3.10.12/
 
 # Replacing Werkzeug with more stable version to resolve vulnerabilities
-RUN pip install Werkzeug==3.0.1
+RUN pip install Werkzeug==3.0.3
 RUN rm -rf /root/.bzt/python-packages/3.10.12/werkzeug*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/werkzeug* /root/.bzt/python-packages/3.10.12/
 
 # Replacing cryptography with more stable version to resolve vulnerabilities
-RUN pip install cryptography==42.0.5
+RUN pip install cryptography==42.0.6
 RUN rm -rf /root/.bzt/python-packages/3.10.12/cryptography*
 RUN cp -r /usr/local/lib/python3.10/dist-packages/cryptography* /root/.bzt/python-packages/3.10.12/
 

diff --git a/source/api-services/package-lock.json b/source/api-services/package-lock.json
diff --git a/source/api-services/package.json b/source/api-services/package.json
@@ -1,6 +1,6 @@
 {
   "name": "api-services",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "REST API micro services",
   "repository": {
     "type": "git",

diff --git a/source/console/package-lock.json b/source/console/package-lock.json
diff --git a/source/console/package.json b/source/console/package.json
@@ -1,6 +1,6 @@
 {
   "name": "distributed-load-testing-on-aws-ui",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "private": true,
   "license": "Apache-2.0",
   "author": {

diff --git a/source/custom-resource/package-lock.json b/source/custom-resource/package-lock.json
diff --git a/source/custom-resource/package.json b/source/custom-resource/package.json
@@ -1,6 +1,6 @@
 {
   "name": "custom-resource",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "cfn custom resources for distributed load testing on AWS workflow",
   "repository": {
     "type": "git",

diff --git a/source/infrastructure/package-lock.json b/source/infrastructure/package-lock.json
diff --git a/source/infrastructure/package.json b/source/infrastructure/package.json
@@ -1,6 +1,6 @@
 {
   "name": "distributed-load-testing-on-aws-infrastructure",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "author": {
     "name": "Amazon Web Services",
     "url": "https://aws.amazon.com/solutions"

diff --git a/source/package-lock.json b/source/package-lock.json
diff --git a/source/package.json b/source/package.json
@@ -1,6 +1,6 @@
 {
   "name": "source",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "private": true,
   "description": "ESLint and prettier dependencies to be used within the solution",
   "license": "Apache-2.0",

diff --git a/source/real-time-data-publisher/package-lock.json b/source/real-time-data-publisher/package-lock.json
diff --git a/source/real-time-data-publisher/package.json b/source/real-time-data-publisher/package.json
@@ -1,6 +1,6 @@
 {
   "name": "real-time-data-publisher",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "Publishes real time test data to an IoT endpoint",
   "repository": {
     "type": "git",

diff --git a/source/results-parser/package-lock.json b/source/results-parser/package-lock.json
diff --git a/source/results-parser/package.json b/source/results-parser/package.json
@@ -1,6 +1,6 @@
 {
   "name": "results-parser",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "result parser for indexing xml test results to DynamoDB",
   "repository": {
     "type": "git",

diff --git a/source/solution-utils/package-lock.json b/source/solution-utils/package-lock.json
diff --git a/source/solution-utils/package.json b/source/solution-utils/package.json
@@ -1,6 +1,6 @@
 {
   "name": "solution-utils",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "Utilities package for Distributed Load Testing on AWS",
   "license": "Apache-2.0",
   "author": {

diff --git a/source/task-canceler/package-lock.json b/source/task-canceler/package-lock.json
diff --git a/source/task-canceler/package.json b/source/task-canceler/package.json
@@ -1,6 +1,6 @@
 {
   "name": "task-canceler",
-  "version": "3.2.10",
+  "version": "3.2.11",
   "description": "Triggered by api-services lambda function, cancels ecs tasks",
   "repository": {
     "type": "git",