Merge pull request #161 from aws-solutions/release/v3.3.20

Update to release/v3.3.20

Author: tbelmega

.gitignore

@@ -33,4 +33,8 @@ node_modules
 .DS_Store
 .idea/
 *sonarlint*
-test.sh
+test.sh
+
+
+/.temp_redpencil
+/bom.json

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.20] - 2025-11-25
+
+### Security
+
+- Bumped glob to `^11.1.0` to mitigate [CVE-2025-64756](https://avd.aquasec.com/nvd/cve-2025-64756)
+- Bumped js-yaml to `^4.1.1` to mitigate [CVE-2025-64718](https://avd.aquasec.com/nvd/cve-2025-64718)
+
 ## [3.3.19] - 2025-09-18
 
 ### Security

CONTRIBUTING.md

@@ -10,7 +10,7 @@ information to effectively respond to your bug report or contribution.
 
 We welcome you to use the GitHub issue tracker to report bugs or suggest features.
 
-When filing an issue, please check [existing open](https://github.com/aws-solutions/network-orchestration-for-aws-transit-gateway/issues), or [recently closed](https://github.com/aws-solutions/network-orchestration-for-aws-transit-gateway/issues?q=is%3Aissue%20state%3Aclosed), issues to make sure somebody else hasn't already reported the issue. Please try to include as much information as you can. Details like these are incredibly useful:
+When filing an issue, please check [existing open](https://github.com/aws-solutions/network-orchestration-for-aws-transit-gateway/issues), or [recently closed](https://github.com/aws-solutions/network-orchestration-for-aws-transit-gateway/issues?utf8=%E2%9C%93&q=is%3Aissue%20is%3Aclosed%20), issues to make sure somebody else hasn't already reported the issue. Please try to include as much information as you can. Details like these are incredibly useful:
 
 - A reproducible test case or series of steps
 - The version of our code being used

NOTICE.txt

@@ -1596,6 +1596,39 @@ bundle-name under the MIT license.
 run-applescript under the MIT license.
 default-browser-id under the MIT license.
 is-network-error under the MIT license.
+@aws-sdk/credential-provider-login under the Apache-2.0 license.
+@aws/lambda-invoke-store under the Apache-2.0 license.
+@babel/plugin-transform-explicit-resource-management under the MIT license.
+@babel/plugin-transform-regexp-modifiers under the MIT license.
+@isaacs/balanced-match under the MIT license.
+@isaacs/brace-expansion under the MIT license.
+@jridgewell/remapping under the MIT license.
+@jsonjoy.com/buffers under the Apache-2.0 license.
+@jsonjoy.com/codegen under the Apache-2.0 license.
+@jsonjoy.com/json-pointer under the Apache-2.0 license.
+@rtsao/scc under the MIT license.
+@smithy/uuid under the Apache-2.0 license.
+@so-ric/colorspace under the MIT license.
+@types/eslint-scope under the MIT license.
+acorn-import-phases under the MIT license.
+async-function under the MIT license.
+baseline-browser-mapping under the Apache-2.0 license.
+call-bound under the MIT license.
+fdir under the MIT license.
+generator-function under the MIT license.
+glob-to-regex.js under the Apache-2.0 license.
+handlebars under the MIT license.
+own-keys under the MIT license.
+regjsgen under the MIT license.
+safe-push-apply under the MIT license.
+set-proto under the MIT license.
+side-channel-list under the MIT license.
+side-channel-map under the MIT license.
+side-channel-weakmap under the MIT license.
+tinyglobby under the MIT license.
+uglify-js under the BSD-2-Clause license.
+wordwrap under the MIT license.
+wsl-utils under the MIT license.
 
 ********************
 OPEN SOURCE LICENSES

source/cognito-trigger/jest.config.js

@@ -5,6 +5,7 @@ module.exports = {
         "^.+\\.tsx?$": "ts-jest",
     },
     coverageReporters: ["text", ["lcov", { projectRoot: "../../" }]],
+    coverageProvider: "v8",
     setupFiles: ["./setJestEnvironmentVariables.ts"],
     moduleFileExtensions: ["ts", "tsx", "js", "jsx", "json", "node"],
     preset: 'ts-jest',