Skip to content

[Snyk] Upgrade @aws-sdk/client-s3 from 3.826.0 to 3.934.0 #64

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
Sunwuyuan wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade @aws-sdk/client-s3 from 3.826.0 to 3.934.0 #64

Sunwuyuan wants to merge 1 commit into from
+1 −1

Conversation

@Sunwuyuan
Copy link
Member

@Sunwuyuan Sunwuyuan commented Dec 10, 2025

snyk-top-banner

Snyk has created this PR to upgrade @aws-sdk/client-s3 from 3.826.0 to 3.934.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 65 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Uncaught Exception
SNYK-JS-MULTER-10773732		 666 No Known Exploit
high severity Incomplete Filtering of One or More Instances of Special Elements
SNYK-JS-VALIDATOR-13653476		 666 Proof of Concept
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-AXIOS-12613773		 666 Proof of Concept
medium severity Allocation of Resources Without Limits or Throttling
SNYK-JS-BODYPARSER-14105059		 666 No Known Exploit
medium severity Prototype Pollution
SNYK-JS-EXPRESS-14157151		 666 No Known Exploit
medium severity Improper Handling of Unexpected Data Type
SNYK-JS-ONHEADERS-10773729		 666 No Known Exploit
medium severity Improper Validation of Specified Type of Input
SNYK-JS-VALIDATOR-13395830		 666 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 666 Proof of Concept
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-BRACEEXPANSION-9789073		 666 Proof of Concept
critical severity Predictable Value Range from Previous Values
SNYK-JS-FORMDATA-10841150		 666 Proof of Concept
Release notes
Package name: @aws-sdk/client-s3
  • 3.934.0 - 2025-11-18

    3.934.0(2025-11-18)

    New Features
    • clients: update client endpoints as of 2025-11-18 (0f989254)
    • client-connect: This release added support for ring timer configuration for campaign calls. (ae3d7600)
    • client-cloudwatch-logs: CloudWatch Logs updates: Added capability to setup a recurring schedule for log insights queries. Logs introduced Scheduled Queries (managed through Create/Update/Get/Delete/List/History Scheduled Query APIs). For more information, see CloudWatch Logs API documentation. (467947d4)
    • client-wafv2: AssociateWebACL, UpdateWebACL and PutLoggingConfiguration will now throw WAFFeatureNotIncludedInPricingPlanException when the request contains a feature that is not included in the CloudFront pricing plan of the WebACL. (6da7a3db)
    • client-storage-gateway: Adds support for European Sovereign Cloud ARNs in Storage Gateway API parameters. (c7dd6fd7)
    • client-cloudformation: New CloudFormation DescribeEvents API with operation ID tracking and failure filtering capabilities to quickly identify root causes of deployment failures. Also, a DeploymentMode parameter for the CreateChangeSet API that enables creation of drift-aware change sets for safe drift management. (04624df2)
    • client-kafka: Amazon MSK adds three new APIs, ListTopics, DescribeTopic, and DescribeTopicPartitions for viewing Kafka topics in your MSK clusters. (12ad701d)
    • client-backup: AWS Backup now supports a low-cost warm storage tier for Amazon S3 backup data. (0b0c9b8f)
    • client-iam: Added the AssociateDelegationRequest, GetDelegationRequest, AcceptDelegationRequest, RejectDelegatonRequest, ListDelegationRequests, UpdateDelegationRequest, SendDelegationToken and GetHumanReadableSummary APIs for the IAM temporary delegation feature. (b200679b)
    • client-resource-groups-tagging-api: Add support for new ListRequiredTags API used to retrieve the required tags specified in a customer's effective tag policy. (fa505515)
    • client-ec2: AWS Site-to-Site VPN now supports VPN Concentrator, a new feature that enables customers to connect multiple low-bandwidth sites connections through a single attachment, simplifying multi-site connectivity for distributed enterprises. (b94cadfd)
    • client-bedrock-runtime: Amazon Bedrock Runtime Service Tier Support Launch (ea418df5)
    • client-auto-scaling: This release adds the new LaunchInstances API, which can launch instances synchronously in an AutoScaling group. The API also returns instances info and launch error back immediately. (5d96b688)
    Tests

    For list of updated packages, view updated-packages.md in assets-3.934.0.zip

  • 3.933.0 - 2025-11-17

    3.933.0(2025-11-17)

    Chores
    • middleware-recursion-detection: upgrade aws/lambda-invoke-store to 0.2.0 (#7506) (7454bd81)
    New Features
    • clients: update client endpoints as of 2025-11-17 (a9869e99)
    • client-bedrock: Automated Reasoning checks in Amazon Bedrock Guardrails now automatically generate Q&A tests for new Automated Reasoning policies. The GetAutomatedReasoningPolicyBuildWorkflowResultAssets API adds GENERATED_TEST_CASES asset type, allowing customers to retrieve tests generated by the build workflow. (0e347c45)
    • client-database-migration-service: This release introduces the SAP ASE(Sybase) Data Provider for AWS Data Migration Service (DMS). In addition, DMS Schema Conversion now supports this provider, enabling customers to migrate SAP ASE(Sybase) databases to Amazon RDS for PostgreSQL or Aurora PostgreSQL seamlessly. (c44cfad0)
    • client-mwaa-serverless: Amazon MWAA now offers serverless deployment, eliminating operational overhead while optimizing costs. The service supports YAML and Python-based workflows, with 80+ AWS Operators. It provides isolated execution, IAM permissions, and automatic scaling with pay-per-use pricing. (53dbffc3)
    • client-device-farm: This release adds support for interacting with devices during a remote access session using the remoteDriverEndpoint interface (574b1897)
    • client-ec2: This release introduces new APIs: DescribeInstanceSqlHaStates, DescribeInstanceSqlHaHistoryStates, EnableInstanceSqlHaStandbyDetections and DisableInstanceSqlHaStandbyDetections on Amazon EC2, allowing customers to enroll and monitor SQL Server licensing fee savings for their SQL HA EC2 instances. (c0076d8e)
    • client-appstream: Adding support for additional instances and extended storage (ec6111c8)
    • client-route53resolver: Adding DICTIONARY_DGA to dns-threat-protection as a new enum type. Customers can now set rules for dictionary dga protection (adec304c)
    • client-medialive: Adds configurations for spatial/temporal adaptive quantization in AV1 codec, and conversion to HLG output color space in H265 codec. (d994f74e)
    • client-opensearch: This release adds index operation APIs to support Automatic Semantic Enrichment feature (8e96aa9a)
    • client-backup: AWS Backup now supports specifying a logically air-gapped backup vault as a primary backup target in backup plans and on-demand backup jobs. (8223f6d1)
    • client-guardduty: Add S3 On-Demand Object Scanning (0d0b1aea)
    • client-pcs: Added support for the managed Slurm REST API endpoint (2557db0f)
    • client-lex-models-v2: Adds support for LLM as Primary, allowing usage of LLMs as the default NLU system. (f2bcb725)
    • client-mediapackagev2: Add support for SCTE messages in Segment file output (67d2919f)
    • client-glue: Amazon Glue Releasing 2 the new API ListIntegrationResourceProperties and DeleteIntegrationResourceProperty along with minor improvement on existing API(s). (266572c5)
    Tests

    For list of updated packages, view updated-packages.md in assets-3.933.0.zip

  • 3.932.0 - 2025-11-14

    3.932.0(2025-11-14)

    New Features
    • clients: update client endpoints as of 2025-11-14 (87473bd2)
    • client-ec2: This release adds AvailabilityZoneId support for CreateInstanceConnectEndpoint, DescribeInstanceConnectEndpoints, and DeleteInstanceConnectEndpoint APIs. (5ba1cf64)
    • client-datazone: Adds support for granting read and write access to Amazon S3 general purpose buckets using CreateSubscriptionRequest and AcceptSubscriptionRequest APIs. Also adds search filters for SSOUser and SSOGroup to ListSubscriptions APIs and deprecates "sortBy" parameter for ListSubscriptions APIs. (77488e77)
    • client-medialive: Removed all the value constraint (min/max) for the shape definitions (e.g. integerMin0Max3600) on the C2j models to get rid of the need to request an exemption from the SDK team whenever a shape definition (e.g. integerMin0Max3600) is changed. (9bcaeef4)
    • client-imagebuilder: EC2 Image Builder now supports invoking Lambda functions and executing Step Functions state machine through image workflows. (f8fe9d73)
    Bug Fixes
    • core/protocols: decorate service exceptions with unmodeled fields (#7504) (6de803d7)

    For list of updated packages, view updated-packages.md in assets-3.932.0.zip

  • 3.931.0 - 2025-11-13

    3.931.0(2025-11-13)

    Chores
    New Features
    • client-sagemaker: Added support for minor version upgrades and AWS Identity Center integration for SageMaker Hadron Partner Apps, enabling automated version management and IdC group-based access control. (99fbf1f1)
    • client-elastic-load-balancing-v2: QUIC and TCP_QUIC protocol support for Network Load Balancer (NLB). This capability enables customers to forward QUIC traffic to their targets with ultra-low latency while maintaining session stickiness using QUIC Connection IDs. (555b55de)
    • client-ecr: Add Amazon ECR FIPS PrivateLink endpoint support (b2a1603e)
    • client-cloudformation: CloudFormation now supports GetHookResult API with annotations to retrieve structured compliance check results and remediation guidance for each evaluated resource, replacing the previous single-message limitation with detailed validation outcomes. (326e5dda)
    • client-rds: Updated endpoint and service metadata (b075f0ff)
    • client-mediaconvert: Lowers minimum duration for black video generator. Adds support for embedding and signing C2PA content credentials in DASH and CMAF HLS outputs. (dc04e020)
    • client-workspaces-web: Support for managing web content filtering for defining, tracking and regulating type of content accessed with WorkSpaces Secure Browser as part of browser settings. (36de0dee)
    • client-controlcatalog: Added support for related control mappings with new RELATED_CONTROL mapping type in ListControlMappings API. (1333cd34)
    • client-iot-wireless: Integration of Device Location with Amazon Sidewalk network for Amazon Sidewalk enabled devices (bcf811ef)
    • client-ec2: Added support for new accelerator types ("media") and accelerator names ("L4", "L40s", "GAUDI_HL_205", "INFERENTIA2", "TRAINIUM", "TRAINIUM2", "U30") in Attributes Based Instance Type Selection for launched instance types. (69871860)
    • clients: use schema-serde in AWS REST XML clients (#7499) (f806a2b9)
    Bug Fixes
    • core/protocols: rest-json default request body conditions (#7501) (37e8b0dd)

    For list of updated packages, view updated-packages.md in assets-3.931.0.zip

  • 3.930.0 - 2025-11-12

    3.930.0(2025-11-12)

    Chores
    • codegen: sync for idempotencyToken fix in http binding protocols (#7495) (6362fe25)
    New Features
    • client-sagemaker: Add support for trn2.3xlarge instance type for SageMaker Hyperpod (bf8d2ce3)
    • client-redshift: Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages. (145a8368)
    • client-amp: Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters. (4aca00ff)
    • client-s3tables: Adds support for request metrics metrics APIs for S3 Tables (0cb01631)
    • client-database-migration-service: Added support of SQL statements creation, metadata model discovery and selection rules transformation. (95bd643b)
    • client-ec2: Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI (fa8c029b)
    • client-elastic-load-balancing-v2: This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule. (46928a72)
    • client-connect: Updated Authentication Profile APIs to add support for automatic logout on user inactivity (99b0f8d9)
    • clients: use schema-serde in AWS Query & EC2 Query clients (#7489) (e9b6da8f)
    Tests
    • client-cloudwatch: e2e test of protocol selection (#7491) (bb14b543)

    For list of updated packages, view updated-packages.md in assets-3.930.0.zip

  • 3.929.0 - 2025-11-11

    3.929.0(2025-11-11)

    Documentation Changes
    • client-batch: Documentation-only update: update API and doc descriptions per EKS ImageType default value switch from AL2 to AL2023. (42db21d3)
    New Features
    • client-bedrock-data-automation: Added support for Language Expansion feature for BDA Audio modality. (e2374dbd)
    • client-medical-imaging: Added new fields in existing APIs. (8e8ee4a0)
    • client-ec2: AWS Site-to-Site VPN now supports VPN connections with up to 5 Gbps bandwidth per tunnel, a 4x improvement from existing limit of 1.25 Gbps. (165cccca)
    • client-security-ir: Added support for configuring communication preferences as well as clearly displaying case comment author identities. (6c2d4f91)
    • client-rtbfabric: Added LogSettings and LinkAttribute fields to external links (5f3dd496)
    • clients: use schema-serde in AWS REST JSON clients (#7485) (99a36932)
    Tests
    • client-s3vectors: add e2e test (#7487) (8d3df6ff)
    • client-dynamodb: e2e test for type registry based error handling (#7486) (ba1aeb67)
    • client-cloudwatch-logs: e2e test for live tail event streams (#7484) (3d7ac161)

    For list of updated packages, view updated-packages.md in assets-3.929.0.zip

  • 3.928.0 - 2025-11-10

    3.928.0(2025-11-10)

    Chores
    • core/protocols: set public release level for runtime protocols (#7482) (78a69dc8)
    New Features
    • client-verifiedpermissions: Amazon Verified Permissions / Features : Adds support for entity Cedar tags. (d635af58)
    • client-appstream: AWS Appstream support for IPv6 (6fc319f4)
    • client-datazone: Remove trackingServerName from DataZone Connection MLflowProperties (8c22eaae)
    • client-acm-pca: Private Certificate Authority service now supports ML-DSA key algorithms. (1bd0b8f9)
    • client-backup: AWS Backup supports backups of Amazon EKS clusters, including Kubernetes cluster state and persistent storage attached to the EKS cluster via a persistent volume claim (EBS volumes, EFS file systems, and S3 buckets). (d45f0ebc)
    • client-guardduty: Include tags filed in CreatePublishingDestinationRequest and DescribePublishingDestinationResponse. (9b11c354)
    • client-ec2: Amazon EC2 Fleet customers can now filter instance types based on encryption-in-transit support using Attribute-Based Instance Type Selection (ABIS), eliminating the manual effort of identifying and selecting compatible instance types for security-sensitive workloads. (2b4fb805)
    • client-iam: Added CreateDelegationRequest API, which is not available for general use at this time. (a7579e45)
    • client-sts: Added GetDelegatedAccessToken API, which is not available for general use at this time. (41552ed6)
    • client-wafv2: AWS WAF now supports CLOUDWATCH_TELEMETRY_RULE_MANAGED as a LogScope option, enabling automated logging configuration through Amazon CloudWatch Logs for telemetry data collection and analysis. (79d73853)
    • client-kafka: Amazon MSK now supports intelligent rebalancing for MSK Express brokers. (265e5dae)
    • client-braket: Adds ExperimentalCapabilities field to CreateQuantumTask request and GetQuantumTask response objects. Enables use of experimental software capabilities when creating quantum tasks. (6c179ae7)
    • client-invoicing: Added new invoicing get-invoice-pdf API Operation (de2f6799)
    • client-dsql: Cluster endpoint added to CreateCluster and GetCluster API responses (647406db)
    • clients: use schema-serde in AWS JSON RPC clients (#7483) (b0f07b49)

    For list of updated packages, view updated-packages.md in assets-3.928.0.zip

  • 3.927.0 - 2025-11-07

    3.927.0(2025-11-07)

    New Features
    • client-ec2: Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service (650aa6de)
    • client-opensearch: This release introduces the Default Application feature, allowing users to set, change, or unset a preferred OpenSearch UI application on a per-region basis for a streamlined and consistent user experience. (ea5f4e47)
    • client-vpc-lattice: Amazon VPC Lattice now supports custom domain name for resource configurations (f46fcf1f)
    • client-controltower: Added Parent Identifier support to ListEnabledControls and GetEnabledControl API. Implemented RemediationType support for Landing Zone operations: CreateLandingZone, UpdateLandingZone and GetLandingZone APIs (89c1f79d)
    • client-kms: Added support for new ECC_NIST_EDWARDS25519 AWS KMS key spec (1d8341db)
    Bug Fixes
    • client-elastic-beanstalk: differentiate modeled and synthesized service base exception name (5e1e54b4)
    Tests
    • core/protocols: add shape serde perf baselines (#7479) (40bc6005)

    For list of updated packages, view updated-packages.md in assets-3.927.0.zip

  • 3.926.0 - 2025-11-06

    3.926.0(2025-11-06)

    Chores
    • core/protocols: make error lookup in runtime protocol consistent with existing codegen (#7478) (64e9c616)
    New Features
    • clients: update client endpoints as of 2025-11-06 (4d3f1528)
    • client-connect: Added support for Conditional Questions in Evaluation Forms. Introduced Auto Evaluation capability for Evaluation Forms and Contact Evaluations. Added new API operations: SearchEvaluationForms and SearchContactEvaluations. (45c43b47)
    • client-gamelift: Amazon GameLift Servers now supports game builds that use the Windows 2022 operating system. (e38ba819)
    • client-sagemaker: Added NodeProvisioningMode parameter to UpdateCluster API to determine how instance provisioning is handled during cluster operations; in Continuous mode. Added VpcId field in UpdateDomain request for SageMaker Unified Studio domains with no VPC to add a customer VPC. (382a2ff3)
    • client-s3vectors: Amazon S3 Vectors provides cost-effective, elastic, and durable vector storage for queries based on semantic meaning and similarity. (cb2626e6)
    • client-accessanalyzer: New field totalActiveErrors added to getFindingsStatistics response. (595167c7)
    • client-s3tables: Adds support for tagging APIs for S3 Tables (4c268176)
    • client-ec2: Add Amazon EC2 R8a instance types (7cb13679)
    • client-identitystore: IdentityStore API: added new KMSExceptionReason fields to the Exception object; added multiple new fields to the User APIs - UserStatus, Birthdate, Website and Photos; added multiple new metadata fields for User, Groups and Membership APIs - CreatedAt, CreatedBy, UpdatedAt and UpdatedBy. (28d85047)
    • client-quicksight: Support for New Data Prep Experience (02e87fe9)
    • client-ssm: Provides NoLongerSupportedException error message (70be2a35)
    • client-backup: AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards. (b83f5f99)

    For list of updated packages, view updated-packages.md in assets-3.926.0.zip

  • 3.925.0 - 2025-11-05

    3.925.0(2025-11-05)

    Chores
    New Features
    • client-sagemaker: Add new fields in SageMaker Hyperpod DescribeCluster API response: TargetStateCount, SoftwareUpdateStatus and ActiveSoftwareDeploymentConfig to provide AMI update progress visibility . (a29341a5)
    • client-datazone: Added support for Project Resource Tags (64852ec8)
    • client-s3: Launch IPv6 dual-stack support for S3 Express (a6a3e298)
    • client-cloudfront: This release adds new and updated API operations. You can now use the IpAddressType field to specify either ipv4 or dualstack for your Anycast static IP list. You can also enable cross-account resource sharing to share your VPC origins with other AWS accounts (75c3cef3)
    • client-groundstation: Introduce CreateDataflowEndpointGroupV2 action (67ac8eb6)
    • client-ec2: This release adds AvailabilityZoneId support for DescribeFastSnapshotRestores, DisableFastSnapshotRestores, and EnableFastSnapshotRestores APIs. (68aae5bd)
    • client-fsx: Amazon FSx now enables secure management of Active Directory credentials through AWS Secrets Manager integration. Customers can use Secret ARNs instead of direct credentials when joining resources to Active Directory domains. (4e481ba5)

    For list of updated packages, view updated-packages.md in assets-3.925.0.zip

  • 3.922.0 - 2025-10-31
  • 3.921.0 - 2025-10-30
  • 3.920.0 - 2025-10-29
  • 3.919.0 - 2025-10-28
  • 3.918.0 - 2025-10-27
  • 3.917.0 - 2025-10-24
  • 3.916.0 - 2025-10-23
  • 3.914.0 - 2025-10-21
  • 3.913.0 - 2025-10-17
  • 3.911.0 - 2025-10-15
  • 3.910.0 - 2025-10-14
  • 3.908.0 - 2025-10-10
  • 3.907.0 - 2025-10-09
  • 3.906.0 - 2025-10-08
  • 3.901.0 - 2025-10-01
  • 3.899.0 - 2025-09-29
  • 3.896.0 - 2025-09-24
  • 3.895.0 - 2025-09-23
  • 3.894.0 - 2025-09-22
  • 3.893.0 - 2025-09-19
  • 3.892.0 - 2025-09-18
  • 3.891.0 - 2025-09-17
  • 3.890.0 - 2025-09-16
  • 3.888.0 - 2025-09-12
  • 3.887.0 - 2025-09-11
  • 3.886.0 - 2025-09-10
  • 3.884.0 - 2025-09-08
  • 3.883.0 - 2025-09-05
  • 3.882.0 - 2025-09-04
  • 3.879.0 - 2025-08-29
  • 3.878.0 - 2025-08-28
  • 3.876.0 - 2025-08-26
  • 3.873.0 - 2025-08-21
  • 3.872.0 - 2025-08-20
  • 3.864.0 - 2025-08-08
  • 3.863.0 - 2025-08-07
  • 3.862.0 - 2025-08-06
  • 3.859.0 - 2025-08-01
  • 3.858.0 - 2025-07-31
  • 3.857.0 - 2025-07-30
  • 3.856.0 - 2025-07-29
  • 3.855.0 - 2025-07-28
  • 3.850.0 - 2025-07-21
  • 3.848.0 - 2025-07-17
  • 3.846.0 - 2025-07-16
  • 3.845.0 - 2025-07-15
  • 3.844.0 - 2025-07-09
  • 3.842.0 - 2025-07-02
  • 3.840.0 - 2025-06-30
  • 3.839.0 - 2025-06-27
  • 3.837.0 - 2025-06-25
  • 3.835.0 - 2025-06-23
  • 3.832.0 - 2025-06-18
  • 3.830.0 - 2025-06-16
  • 3.828.0 - 2025-06-11
  • 3.826.0 - 2025-06-06
from @aws-sdk/client-s3 GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade @aws-sdk/client-s3 from 3.826.0 to 3.934.0
64aca2d 
Snyk has created this PR to upgrade @aws-sdk/client-s3 from 3.826.0 to 3.934.0.

See this package in npm:
@aws-sdk/client-s3

See this project in Snyk:
https://app.snyk.io/org/sunwuyuan/project/7f95d725-ca6f-4cce-ab56-8b055b9f632f?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings December 10, 2025 08:48
@vercel
Copy link

vercel bot commented Dec 10, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
our-world Error Error Dec 10, 2025 8:48am

Copilot AI reviewed Dec 10, 2025
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR upgrades the @aws-sdk/client-s3 dependency from version 3.826.0 to 3.934.0, advancing 65 versions to address multiple security vulnerabilities identified by Snyk. The upgrade includes fixes for 10 security issues ranging from critical to low severity, including vulnerabilities in related dependencies like multer, validator, axios, body-parser, express, and form-data.

Key changes:

  • Security patches for multiple high and critical vulnerabilities
  • Bug fixes and performance improvements from 65 version releases
  • New AWS service features and API enhancements

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@Sunwuyuan @snyk-bot