@aws-sdk/client-codepipeline - npm Package Compare versions

Comparing version 3.645.0 to 3.646.0

dist-types/commands/ListWebhooksCommand.d.ts

@@ -33,2 +33,5 @@ import { Command as $Command } from "@smithy/smithy-client";
  *             configuration for each webhook.</p>
+ *          <note>
+ *             <p>If a secret token was provided, it will be redacted in the response.</p>
+ *          </note>
  * @example
@@ -35,0 +38,0 @@ * Use a bare-bones client and the command you need to make an API call.

dist-types/commands/PutWebhookCommand.d.ts

@@ -38,2 +38,14 @@ import { Command as $Command } from "@smithy/smithy-client";
  *             URL.</p>
+ *          <important>
+ *             <p>When creating CodePipeline webhooks, do not use your own credentials or
+ *                 reuse the same secret token across multiple webhooks. For optimal security, generate
+ *                 a unique secret token for each webhook you create. The secret token is an arbitrary
+ *                 string that you provide, which GitHub uses to compute and sign the webhook payloads
+ *                 sent to CodePipeline, for protecting the integrity and authenticity of the
+ *                 webhook payloads. Using your own credentials or reusing the same token across
+ *                 multiple webhooks can lead to security vulnerabilities.</p>
+ *          </important>
+ *          <note>
+ *             <p>If a secret token was provided, it will be redacted in the response.</p>
+ *          </note>
  * @example
@@ -40,0 +52,0 @@ * Use a bare-bones client and the command you need to make an API call.

package.json

 {
   "name": "@aws-sdk/client-codepipeline",
   "description": "AWS SDK for JavaScript Codepipeline Client for Node.js, Browser and React Native",
-  "version": "3.645.0",
+  "version": "3.646.0",
   "scripts": {
@@ -6,0 +6,0 @@ "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",

No alert changes

Improved metrics

Total package byte prevSize

1093976

increased by0.2%

Lines of code

25994

increased by0.09%

No dependency changes