release/v3.3.19

CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.19] - 2025-09-18
+
+### Security
+
+- Bumped axios to `1.12.1` to mitigate [CVE-2025-58754](https://avd.aquasec.com/nvd/cve-2025-58754)
+
+### Changed
+
+- package-lock.json to address dependabot identified vulnerabilities
+
 ## [3.3.18] - 2025-07-30
 
 ### Security

NOTICE.txt

@@ -1407,6 +1407,7 @@ cli-cursor under the MIT license.
 restore-cursor under the MIT license.
 cli-width under the ISC license.
 external-editor under the MIT license.
+@inquirer/external-editor under the MIT license.
 chardet under the MIT license.
 os-tmpdir under the MIT license.
 figures under the MIT license.

deployment/network-orchestration-organization-role.template

@@ -44,7 +44,7 @@ Resources:
             Condition:
               ArnEquals:
                 aws:PrincipalArn:
-                - !Sub arn:${AWS::Partition}:iam::${HubAccount}:role/STNO-StateMachineLambdaFunctionRole-* // remove region, use wildcard
+                - !Sub arn:${AWS::Partition}:iam::${HubAccount}:role/STNO-StateMachineLambdaFunctionRole-*
       Policies:
         - PolicyName: OrganizationDetailsReadOnly
           PolicyDocument:

source/cognito-trigger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cognito-trigger",
-  "version": "3.3.17",
+  "version": "3.3.19",
   "description": "Triggered when a new user is confirmed in the user pool to allow for custom actions to be taken",
   "author": {
     "name": "Amazon Web Services",

source/lambda/pyproject.toml

@@ -5,7 +5,7 @@ build-backend = "poetry.core.masonry.api"
 
 [project]
 name = "solution"
-version = "3.3.18"
+version = "3.3.19"
 authors = [ { name = "Amazon Web Services" }]
 description = "solution packages for network-orchestration-for-tgw"
 license = "Apache-2.0"

source/ui/package.json

@@ -1,6 +1,6 @@
 {
   "name": "network-orchestrator-for-aws-transit-gateway",
-  "version": "3.3.18",
+  "version": "3.3.19",
   "description": "Network Orchestration for AWS Transit Gateway(SO0058)",
   "license": "Apache-2.0",
   "author": {