v3.15.4

jdx/misev3.15.4Jan 13, 2026by github-actions[bot]

AI Summary

This release updates critical backend and frontend dependencies to address security vulnerabilities, specifically in urllib3, and adds validation features for routing and configuration.

Key Highlights

  • Updated urllib3 to 2.6.3 with decompression-bomb safeguards
  • Updated react-router-dom with validation for redirect locations
  • Added support for asterisk region in CDK Lambda knowledge-base
  • Included security fixes for Retry-After handling

New Features

  • Redirect location validation
  • Decompression-bomb safeguards
  • Asterisk region support
  • Retry-After handling improvements

Full Release Notes

## Enhancements
- Updated urllib3 from 2.6.0 to 2.6.3 in backend, including security fixes for decompression-bomb safeguards and improvements to Retry-After handling by @app/dependabot (#995)
- Updated @smithy/config-resolver from 4.3.0 to 4.4.5 in CDK Lambda knowledge-base-custom-transformation, including support for asterisk region with warning by @app/dependabot (#996)
- Updated @remix-run/router to 1.23.2 and react-router-dom to 6.30.3 in frontend, adding validation for redirect locations by @app/dependabot (#997)