release/v3.3.18 (#156)

* release/v3.3.18

Author: rharikak

CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.3.18] - 2025-07-30
+
+### Security
+
+- Bump `form-data` to address [CVE-2025-7783] (<https://avd.aquasec.com/nvd/cve-2025-7783>)
+- Bump `brace-expansion` to address [CVE-2025-5889]
+- Bump `urllib3` to address [CVE-2025-50181], [CVE-2025-50182] (<https://avd.aquasec.com/nvd/cve-2025-50181>), (<https://avd.aquasec.com/nvd/cve-2025-50182>)
+
+### Removed
+
+- AppRegistry application tags at resource level
+
 ## [3.3.17] - 2025-06-10
 
 ### Security
@@ -106,7 +118,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Changed
 
 - `resource_exception_handler` decorator does not catch `IncorrectState`
-  exception, allowing the exception to be raised as `ResourceBusyException `
+  exception, allowing the exception to be raised as `ResourceBusyException`
   by `service_exception_handler` decorator
 
 ### Security

NOTICE.txt

@@ -14,6 +14,9 @@ This software includes third party software subject to the following copyrights:
 
 @aws-amplify/auth under the Apache-2.0 license.
 @aws-amplify/core under the Apache-2.0 license.
+@aws-sdk/nested-clients under the Apache-2.0 license.
+@babel/helper-globals under the MIT license.
+@types/uuid under the MIT license.
 @jest/environment under the MIT license.
 @jest/types under the MIT license.
 ansi-styles under the MIT license.
@@ -1582,10 +1585,16 @@ six under the MIT license.
 tomli under the MIT license.
 types-awscrt under the MIT license.
 types-s3transfer under the MIT license.
-typing-extensions
-urllib3
+typing-extensions under the MIT license.
+urllib3 under the MIT license.
 werkzeug under the 0BSD license.
 xmltodict under the MIT license.
+is-inside-container under the MIT license.
+default-browser under the MIT license.
+bundle-name under the MIT license.
+run-applescript under the MIT license.
+default-browser-id under the MIT license.
+is-network-error under the MIT license.
 
 ********************
 OPEN SOURCE LICENSES

README.md

@@ -132,7 +132,7 @@ VERSION=custom001
 ```
 cd ./deployment
 chmod +x ./build-s3-dist.sh
-./build-s3-dist.sh $DIST_OUTPUT_BUCKET $SOLUTION_NAME $VERSION
+./build-s3-dist.sh $DIST_OUTPUT_BUCKET $SOLUTION_NAME $VERSION $DIST_OUTPUT_BUCKET-$REGION
 ```
 
 _✅ All assets are now built. You should see templates under deployment/global-s3-assets and other artifacts (console and lambda binaries) under deployment/regional-s3-assets._

deployment/build-s3-dist.sh

@@ -62,7 +62,7 @@ find . -type f -name ".coverage" -delete
 headline "[Configure] Poetry"
 poetry config virtualenvs.in-project true --local
 poetry config virtualenvs.options.no-pip true --local
-poetry config virtualenvs.options.always-copy true --local
+poetry config virtualenvs.options.always-copy false --local
 
 
 headline "[Install] Solution python package"
@@ -139,6 +139,9 @@ if [[ "$OSTYPE" == "darwin"* ]]; then
     sed -i '' -e $replace $template_dist_dir/network-orchestration-organization-role.template
     sed -i '' -e $replace $template_dist_dir/network-orchestration-hub-service-linked-roles.template
     sed -i '' -e $replace $template_dist_dir/network-orchestration-spoke-service-linked-roles.template
+    # Replace template bucket name
+    replace="s/%TEMPLATE_OUTPUT_BUCKET%/$4/g"
+    sed -i '' -e $replace $template_dist_dir/network-orchestration-spoke.template
 else
     # Other linux
     # Replace source code s3 bucket name with real value