Skip to content

chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.31 - autoclosed - #339

Closed
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/aws-sdk-credential-provider-node-3.x-lockfile
Closed

chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.31 - autoclosed#339
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/aws-sdk-credential-provider-node-3.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Jul 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
@aws-sdk/credential-provider-node (source) dependencies patch 3.972.303.972.31

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability
Medium Medium 6.1 CVE-2026-41650

Release Notes

aws/aws-sdk-js-v3 (@​aws-sdk/credential-provider-node)

v3.972.31

Chores

  • If you want to rebase/retry this PR, check this box

@kylehounslow

Copy link
Copy Markdown
Collaborator

Superseded by #359, which adopts this same @aws-sdk/credential-provider-node 3.972.30 lock in aws/cli-installer (the newer @aws-sdk/xml-builder drops fast-xml-parser, clearing the alert at the source) and clears the coupled aws/cdk alerts in one PR. Unit suite 134/134 and npm audit 0 vulns on the installer.

@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/aws-sdk-credential-provider-node-3.x-lockfile branch from 1ae4804 to d5b8c6a Compare July 27, 2026 20:35
@mend-for-github-com
mend-for-github-com Bot force-pushed the whitesource-remediate/aws-sdk-credential-provider-node-3.x-lockfile branch from d5b8c6a to c9ab9db Compare July 28, 2026 16:44
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.30 chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.31 Jul 28, 2026
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.31 chore(deps): update dependency @aws-sdk/credential-provider-node to v3.972.31 - autoclosed Jul 28, 2026
@mend-for-github-com
mend-for-github-com Bot deleted the whitesource-remediate/aws-sdk-credential-provider-node-3.x-lockfile branch July 28, 2026 16:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant