aws-solutions/dynamic-image-transformation-for-amazon-cloudfront v8.0.3

on GitHub

What's Changed

Full Changelog: v8.0.2...v8.0.3

[8.0.3] - 2026-02-26

Added

• CorsOriginParameter to restrict image processing endpoint to specific origin, default to * #624
• added no-store, no-cache cache control headers on management api

Changed

• restrict management api to admin-ui cloudfront origin, preventing arbitrary origins being trusted on api
• fix stripExif, stripIcc transforms and autoOrient logic #623
• remove default Sharp image size limit and support the limit as environment variable on container #632
• move to built-in node:crypto
• added verboseDescription to log image processing errors at a different verbosity than the HTTP response
• narrowed resource for logs actions to specific container log group
• fix e2e test setup in management-lambda package to clear ddb table instead of delete/recreate

Security

• Bump systeminformation to mitigate CVE-2026-26318 and CVE-2026-26280