v3.15.4
jdx/misev3.15.4Jan 13, 2026by github-actions[bot]
AI Summary
This release updates critical backend and frontend dependencies to address security vulnerabilities, specifically in urllib3, and adds validation features for routing and configuration.
Key Highlights
- Updated urllib3 to 2.6.3 with decompression-bomb safeguards
- Updated react-router-dom with validation for redirect locations
- Added support for asterisk region in CDK Lambda knowledge-base
- Included security fixes for Retry-After handling
New Features
- Redirect location validation
- Decompression-bomb safeguards
- Asterisk region support
- Retry-After handling improvements
Full Release Notes
## Enhancements - Updated urllib3 from 2.6.0 to 2.6.3 in backend, including security fixes for decompression-bomb safeguards and improvements to Retry-After handling by @app/dependabot (#995) - Updated @smithy/config-resolver from 4.3.0 to 4.4.5 in CDK Lambda knowledge-base-custom-transformation, including support for asterisk region with warning by @app/dependabot (#996) - Updated @remix-run/router to 1.23.2 and react-router-dom to 6.30.3 in frontend, adding validation for redirect locations by @app/dependabot (#997)