Merge pull request #151 from aws-solutions/feature/v2.3.4

Update to version v2.3.4

Author: fhoueto-amz

CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.3.4] - 2024-09-19
+
+### Security
+
+- Patched micromatch, path-to-regexp vulnerability
+
 ## [2.3.3] - 2024-08-20
 
 ### Security
@@ -77,10 +83,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - AWS SDK Node and Python libraries
 
 ## [2.1.3] - 2023-04-18
-
+s
 ### Fixed
 
-- Update AWS-SDK V2 that addresses the security issue identified in xml2js (https://github.com/aws/aws-sdk-js/issues/4387)
+- Update AWS-SDK V2 that addresses the security issue identified in [xml2js](https://github.com/aws/aws-sdk-js/issues/4387)
 - Updated the bucket policy on the logging bucket to grant access to the logging service principal (logging.s3.amazonaws.com) for access log delivery.
 
 ## [2.1.2] - 2023-01-11

CONTRIBUTING.md

@@ -10,7 +10,7 @@ information to effectively respond to your bug report or contribution.
 
 We welcome you to use the GitHub issue tracker to report bugs or suggest features.
 
-When filing an issue, please check [existing open](https://github.com/aws-solutions/discovering-hot-topics-using-machine-learning/issues), or [recently closed](https://github.com/aws-solutions/discovering-hot-topics-using-machine-learning/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aclosed20), issues to make sure somebody else hasn't already
+When filing an issue, please check [existing open](https://github.com/aws-solutions/discovering-hot-topics-using-machine-learning/issues), or [recently closed](https://github.com/aws-solutions/discovering-hot-topics-using-machine-learning/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aclosed%20), issues to make sure somebody else hasn't already
 reported the issue. Please try to include as much information as you can. Details like these are incredibly useful:
 
 * A reproducible test case or series of steps
@@ -56,4 +56,4 @@ If you discover a potential security issue in this project we ask that you notif
 
 See the [LICENSE](https://github.com/aws-solutions/discovering-hot-topics-using-machine-learning/blob/master/LICENSE) file for our project's licensing. We will ask you to confirm the licensing of your contribution.
 
-We may ask you to sign a [Contributor License Agreement (CLA)](http://en.wikipedia.org/wiki/Contributor_License_Agreement) for larger changes.
+We may ask you to sign a [Contributor License Agreement (CLA)](https://en.wikipedia.org/wiki/Contributor_License_Agreement) for larger changes.

NOTICE.txt

@@ -82,6 +82,7 @@ This software includes third party software subject to the following copyrights:
 @aws-solutions-constructs/aws-lambda-s3 under the Apache-2.0 license
 @aws-solutions-constructs/aws-lambda-stepfunctions under the Apache-2.0 license
 @aws-solutions-constructs/aws-sqs-lambda under the Apache-2.0 license
+@aws-solutions-constructs/core under the Apache License 2.0
 @babel/code-frame under the MIT license
 @babel/compat-data under the MIT license
 @babel/generator under the MIT license
@@ -572,10 +573,8 @@ jmespath under the MIT license
 mock under the 0BSD license
 moto under the Apache-2.0 license
 openpyxl under the MIT license
-praw under the 0BSD license
-praw under the Simplified BSD License license
+praw under the BSD License 
 protobuf under the BSD-3-Clause license
-pyaml under the Public Domain license
 pyaml under the WTFPL license
 pytest-cov under the MIT license
 pytest-env under the MIT license
@@ -588,6 +587,26 @@ tenacity under the Apache-2.0 license
 tldextract under the 0BSD license
 tldextract under the BSD-3-Clause license
 urllib3 under the MIT license
+cachetools under MIT License
+colorama under BSD License
+docutils under BSD License
+et-xmlfile under MIT License
+google-api-core under Apache 2.0
+google-auth under Apache 2.0
+google-auth-httplib2 under Apache 2.0
+googleapis-common-protos under Apache License 2.0
+httplib2 under MIT License
+prawcore under BSD License
+pyasn1 under BSD License (BSD-2-Clause)
+pyasn1-modules under BSD License
+proto-plus under Apache License 2.0
+python-dateutil under Apache License 2.0, BSD License
+requests-file under Apache 2.0
+s3transfer under Apache 2.0
+sgmllib3k under BSD License
+update-checker under BSD License
+uritemplate under Apache Software License, BSD License (BSD 3-Clause License or Apache License, Version 2.0)
+websocket-client under Apache License 2.0
 
 ********************
 OPEN SOURCE LICENSES
@@ -606,4 +625,4 @@ MIT - https://opensource.org/licenses/MIT
 Public Domain - None
 Simplified BSD License - None
 Unlicense - https://opensource.org/licenses/Unlicense
-WTFPL - https://opensource.org/licenses/WTFPL%                                                                                               bios@bcd0741e1ff7 .temp_redpencil % 
+WTFPL - https://opensource.org/licenses/WTFPL%

source/lambda/firehose-text-proxy/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "firehose-text-proxy",
-  "version": "2.3.3",
+  "version": "2.3.4",
   "description": "Lambda proxy to write to Firehose to generate Glue tables through S3",
   "main": "index.js",
   "scripts": {
@@ -21,9 +21,11 @@
     "aws-sdk-client-mock": "^3.0.1",
     "chai": "^4.3.7",
     "jest": "^29.7.0",
-    "sinon": "^17.0.1"
+    "sinon": "^18.0.1"
   },
   "overrides": {
-    "fast-xml-parser": "^4.4.1"
+    "fast-xml-parser": "^4.4.1",
+    "micromatch": "^4.0.8",
+    "sinon": "^18.0.1"
   }
 }