From 39a3be956e155d633c5cfa6eec2f7059ecb70eea Mon Sep 17 00:00:00 2001
From: Di Gao <gaod@amazon.com>
Date: Wed, 21 Aug 2024 11:20:04 -0700
Subject: [PATCH] Update to version v4.2.7

---
 CHANGELOG.md                             |  6 ++++++
 SECURITY.md                              | 11 +++++++++++
 solution-manifest.yaml                   |  2 +-
 source/console/package-lock.json         |  4 ++--
 source/console/package.json              |  2 +-
 source/constructs/package.json           |  2 +-
 source/custom-resource/package-lock.json | 12 ++++++------
 source/custom-resource/package.json      |  4 ++--
 8 files changed, 30 insertions(+), 13 deletions(-)
 create mode 100644 SECURITY.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2033e9e..2222a9d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.2.7] - 2024-08-22
+
+### Security
+
+- Security updates for npm packages
+
 ## [4.2.6] - 2024-08-09
 
 ### Security
diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 0000000..5a24f15
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,11 @@
+# Reporting Security Issues
+
+We take all security reports seriously.
+When we receive such reports,
+we will investigate and subsequently address
+any potential vulnerabilities as quickly as possible.
+If you discover a potential security issue in this project,
+please notify AWS/Amazon Security via our
+[vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/)
+or directly via email to [AWS Security](mailto:aws-security@amazon.com).
+Please do *not* create a public GitHub issue in this project.
diff --git a/solution-manifest.yaml b/solution-manifest.yaml
index 59b2c84..de2dbcb 100644
--- a/solution-manifest.yaml
+++ b/solution-manifest.yaml
@@ -1,6 +1,6 @@
 id: SO0013
 name: live-streaming-on-aws
-version: v4.2.6
+version: v4.2.7
 cloudformation_templates:
   - template: live-streaming-on-aws.template
     main_template: true
diff --git a/source/console/package-lock.json b/source/console/package-lock.json
index 4b55e5b..b320b44 100644
--- a/source/console/package-lock.json
+++ b/source/console/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "player",
-  "version": "4.2.6",
+  "version": "4.2.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "player",
-      "version": "4.2.6",
+      "version": "4.2.7",
       "license": "Apache-2.0",
       "dependencies": {
         "bootstrap": "^5.3.0",
diff --git a/source/console/package.json b/source/console/package.json
index b7240ae..78bf249 100644
--- a/source/console/package.json
+++ b/source/console/package.json
@@ -1,6 +1,6 @@
 {
   "name": "player",
-  "version": "4.2.6",
+  "version": "4.2.7",
   "description": "Demo HTML preview player",
   "license": "Apache-2.0",
   "author": {
diff --git a/source/constructs/package.json b/source/constructs/package.json
index 383a3b7..36f1347 100644
--- a/source/constructs/package.json
+++ b/source/constructs/package.json
@@ -1,6 +1,6 @@
 {
   "name": "live-streaming-on-aws",
-  "version": "4.2.6",
+  "version": "4.2.7",
   "description": "cdk construct for the live streaming on aws solution",
   "bin": {
     "live-stream": "bin/live-streaming.js"
diff --git a/source/custom-resource/package-lock.json b/source/custom-resource/package-lock.json
index c0cb645..fce75de 100644
--- a/source/custom-resource/package-lock.json
+++ b/source/custom-resource/package-lock.json
@@ -1,16 +1,16 @@
 {
   "name": "live-streaming-on-aws",
-  "version": "4.2.6",
+  "version": "4.2.7",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "live-streaming-on-aws",
-      "version": "4.2.6",
+      "version": "4.2.7",
       "license": "Apache-2.0",
       "dependencies": {
         "ansi-regex": "^6.0.1",
-        "axios": "^1.6.8",
+        "axios": "^1.7.4",
         "uuid": "^9.0.0"
       },
       "devDependencies": {
@@ -3090,9 +3090,9 @@
       }
     },
     "node_modules/axios": {
-      "version": "1.6.8",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.6.8.tgz",
-      "integrity": "sha512-v/ZHtJDU39mDpyBoFVkETcd/uNdxrWRrg3bKpOKzXFA6Bvqopts6ALSMU3y6ijYxbw2B+wPrIv46egTzJXCLGQ==",
+      "version": "1.7.4",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.4.tgz",
+      "integrity": "sha512-DukmaFRnY6AzAALSH4J2M3k6PkaC+MfaAGdEERRWcC9q3/TWQwLpHR8ZRLKTdQ3aBDL64EdluRDjJqKw+BPZEw==",
       "dependencies": {
         "follow-redirects": "^1.15.6",
         "form-data": "^4.0.0",
diff --git a/source/custom-resource/package.json b/source/custom-resource/package.json
index ae8523f..d471ac3 100644
--- a/source/custom-resource/package.json
+++ b/source/custom-resource/package.json
@@ -1,6 +1,6 @@
 {
   "name": "live-streaming-on-aws",
-  "version": "4.2.6",
+  "version": "4.2.7",
   "engines": {
     "node": ">=18"
   },
@@ -11,7 +11,7 @@
   },
   "dependencies": {
     "ansi-regex": "^6.0.1",
-    "axios": "^1.6.8",
+    "axios": "^1.7.4",
     "uuid": "^9.0.0"
   },
   "devDependencies": {