Feature: SageMaker Inference Recommender now supports a new API ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an inference recommendation job.
Release (2022-10-21)
General Highlights
Dependency Update: Updated to the latest SDK module versions
Module Highlights
github.com/aws/aws-sdk-go-v2: v1.17.0
Feature: Adds aws.IsCredentialsProvider for inspecting CredentialProvider types when needing to determine if the underlying implementation type matches a target type. This resolves an issue where CredentialsCache could mask AnonymousCredentials providers, breaking downstream detection logic.
Feature: This release adds a new "DeletionProtection" field to the UserPool in Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting this field to ACTIVE will prevent a user pool from accidental deletion.
Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
Feature: S3 on Outposts launches support for automatic bucket-style alias. You can use the automatic access point alias instead of an access point ARN for any object-level operation in an Outposts bucket.
Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
Feature: CreateInferenceRecommenderjob API now supports passing endpoint details directly, that will help customers to identify the max invocation and max latency they can achieve for their model and the associated endpoint along with getting recommendations on other instances.
Feature: In this release, we are introducing support for regional optimization for AWS Resilience Hub applications. It also includes a few documentation updates to improve clarity.
v2.1.0 18 Jun 2024
[New Features]
* [jwt] Added `jwt.ParseCookie()` function
* [jwt] `jwt.ParseRequest()` can now accept a new option, jwt.WithCookieKey() to
specify a cookie name to extract the token from.
* [jwt] `jwt.ParseRequest()` and `jwt.ParseCookie()` can accept the `jwt.WithCookie()` option,
which will, upon successful token parsing, make the functions assign the *http.Cookie
used to parse the token. This allows users to further inspect the cookie where the
token came from, should the need arise.
* [jwt] (BREAKING CHANGE) `jwt.ParseRequest()` no longer automatically looks for "Authorization" header when
only `jwt.WithFormKey()` is used. This behavior is the same for `jwt.WithCookieKey()` and
any similar options that may be implemented in the future.
# previously
jwt.ParseRequest(req) // looks under Authorization
jwt.ParseReuqest(req, jwt.WithFormKey("foo")) // looks under foo AND Authorization
jwt.ParseReuqest(req, jwt.WithHeaderKey("Authorization"), jwt.WithFormKey("foo")) // looks under foo AND Authorization
# since this release
jwt.ParseRequest(req) // same as before
jwt.ParseRequest(req, jwt.WithFormKey("foo")) // looks under foo
jwt.ParseReuqest(req, jwt.WithHeaderKey("Authorization"), jwt.WithFormKey("foo")) // looks under foo AND Authorization
[jwt] Add jwt.WithResetValidators() option to jwt.Validate(). This option
will allow you to tell jwt.Validate() to NOT automatically check the
default validators (iat, exp, and nbf), so that you can completely customize
the validation with the validators you specify using jwt.WithValidator().
This sort of behavior is useful for special cases such as
https://openid.net/specs/openid-connect-rpinitiated-1_0.html. However, you SHOULD NOT
use this option unless you know exactly what you are doing, as this will pose
significant security issues when used incorrectly.
[jwk] Provide a stop-gap measure to work with PEM format ASN.1 DER encoded secp256k1 keys.
In order to enable this feature, you must compile jwx with TWO build tags:
`jwx_es256k` to enable ES256K/secp256k1, and `jwx_secp256k1_pem` to enable PEM handling.
Not one, but BOTH tags need to be present.
With this change, by suppliying the `WithPEM(true)` option, `jwk.Parse()` is now
able to read sep256k1 keys. Also, `jwk.Pem()` should be able to handle `jwk.Key` objects
that represent a secp256k1 key.
Please do note that the implementation of this feature is dodgy at best. Currently
Go's crypto/x509 does not allow handling additional EC curves, and thus in order to
accomodate secp256k1 keys in PEM/ASN.1 DER format we need to "patch" the stdlib.
We do this by copy-and-pasting relevant parts of go 1.22.2's crypto/x509 code and
adding the minimum required code to make secp256k1 keys work.
[jwt] jwt.ParseRequest() can now accept a new option, jwt.WithCookieKey() to
specify a cookie name to extract the token from.
[jwt] jwt.ParseRequest() and jwt.ParseCookie() can accept the jwt.WithCookie() option,
which will, upon successful token parsing, make the functions assign the *http.Cookie
used to parse the token. This allows users to further inspect the cookie where the
token came from, should the need arise.
[jwt] (BREAKING CHANGE) jwt.ParseRequest() no longer automatically looks for "Authorization" header when
only jwt.WithFormKey() is used. This behavior is the same for jwt.WithCookieKey() and
any similar options that may be implemented in the future.
previously
jwt.ParseRequest(req) // looks under Authorization
jwt.ParseReuqest(req, jwt.WithFormKey("foo")) // looks under foo AND Authorization
jwt.ParseReuqest(req, jwt.WithHeaderKey("Authorization"), jwt.WithFormKey("foo")) // looks under foo AND Authorization
since this release
jwt.ParseRequest(req) // same as before
jwt.ParseRequest(req, jwt.WithFormKey("foo")) // looks under foo
jwt.ParseReuqest(req, jwt.WithHeaderKey("Authorization"), jwt.WithFormKey("foo")) // looks under foo AND Authorization
[jwt] Add jwt.WithResetValidators() option to jwt.Validate(). This option
will allow you to tell jwt.Validate() to NOT automatically check the
default validators (iat, exp, and nbf), so that you can completely customize
the validation with the validators you specify using jwt.WithValidator().
This sort of behavior is useful for special cases such as
https://openid.net/specs/openid-connect-rpinitiated-1_0.html. However, you SHOULD NOT
use this option unless you know exactly what you are doing, as this will pose
significant security issues when used incorrectly.
[jwk] Provide a stop-gap measure to work with PEM format ASN.1 DER encoded secp256k1 keys.
In order to enable this feature, you must compile jwx with TWO build tags:
jwx_es256k to enable ES256K/secp256k1, and jwx_secp256k1_pem to enable PEM handling.
Not one, but BOTH tags need to be present.
With this change, by suppliying the WithPEM(true) option, jwk.Parse() is now
able to read sep256k1 keys. Also, jwk.Pem() should be able to handle jwk.Key objects
that represent a secp256k1 key.
Please do note that the implementation of this feature is dodgy at best. Currently
Go's crypto/x509 does not allow handling additional EC curves, and thus in order to
accomodate secp256k1 keys in PEM/ASN.1 DER format we need to "patch" the stdlib.
We do this by copy-and-pasting relevant parts of go 1.22.2's crypto/x509 code and
adding the minimum required code to make secp256k1 keys work.
Because of the above, there are several important caveats for this feature:
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all-modules group in /sda with 6 updates:
1.28.0
1.30.0
1.27.19
1.27.21
1.17.19
1.17.21
1.16.25
1.17.1
1.55.2
1.56.1
2.0.21
2.1.0
Updates
github.com/aws/aws-sdk-go-v2
from 1.28.0 to 1.30.0Commits
2d43b81
Release 2024-06-19812bc72
Regenerated Clients12e2648
Update endpoints model5df426a
Update API model78777b6
add implicit global region to internal partition metadata (#2688)077df5d
Release 2024-06-183320b13
Regenerated Clients1315201
Update API model8dddc9c
add SDK-specific feature tracking (#2682)Updates
github.com/aws/aws-sdk-go-v2/config
from 1.27.19 to 1.27.21Commits
2d43b81
Release 2024-06-19812bc72
Regenerated Clients12e2648
Update endpoints model5df426a
Update API model78777b6
add implicit global region to internal partition metadata (#2688)077df5d
Release 2024-06-183320b13
Regenerated Clients1315201
Update API model8dddc9c
add SDK-specific feature tracking (#2682)Updates
github.com/aws/aws-sdk-go-v2/credentials
from 1.17.19 to 1.17.21Commits
2d43b81
Release 2024-06-19812bc72
Regenerated Clients12e2648
Update endpoints model5df426a
Update API model78777b6
add implicit global region to internal partition metadata (#2688)077df5d
Release 2024-06-183320b13
Regenerated Clients1315201
Update API model8dddc9c
add SDK-specific feature tracking (#2682)Updates
github.com/aws/aws-sdk-go-v2/feature/s3/manager
from 1.16.25 to 1.17.1Changelog
Sourced from github.com/aws/aws-sdk-go-v2/feature/s3/manager's changelog.
... (truncated)
Commits
08f1f0b
Release 2022-10-240e1e20e
Regenerated Clients281c268
Update SDK's smithy-go dependency to v1.13.4db7c0a3
Update endpoints model1eae80d
Update API model17628c4
EC2 IMDS client logging fixes (#1891)7655449
Release 2022-10-21dcae829
Regenerated Clientsb82766b
Update API model1c05fb6
Implements IsCredentialsProvider for checking if a provider matches a target ...Updates
github.com/aws/aws-sdk-go-v2/service/s3
from 1.55.2 to 1.56.1Commits
2d43b81
Release 2024-06-19812bc72
Regenerated Clients12e2648
Update endpoints model5df426a
Update API model78777b6
add implicit global region to internal partition metadata (#2688)077df5d
Release 2024-06-183320b13
Regenerated Clients1315201
Update API model8dddc9c
add SDK-specific feature tracking (#2682)Updates
github.com/lestrrat-go/jwx/v2
from 2.0.21 to 2.1.0Release notes
Sourced from github.com/lestrrat-go/jwx/v2's releases.
... (truncated)
Changelog
Sourced from github.com/lestrrat-go/jwx/v2's changelog.
... (truncated)
Commits
639d231
Update Changesc8d35f6
Change the next minor version because of breaking changesea3a57e
Bump golang.org/x/crypto from 0.23.0 to 0.24.0 (#1138)5fd1fa5
Fix conversion in JWE when WithUseNumber global settings is used (#1140) (#1141)33d0966
Update 01-jwt.md (#1139)f073076
Bump github.com/goccy/go-json from 0.10.2 to 0.10.3 (#1135)ed00dba
Bump pozil/auto-assign-issue from 1 to 2 (#1131)c910cfc
See if this silences CodeQL (#1129)dfa27f9
Bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#1124)5f0d76f
Bump golangci/golangci-lint-action from 5 to 6 (#1125)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show