middyjs/middy 7.6.0

on GitHub

What's Changed

• New Middleware: appconfig-extension by @willfarrell in #1270

• New Middleware: ssm-extension by @willfarrell in #1270

• New Middleware: secrets-manager-extension by @willfarrell in #1270

• New Middleware: event-batch-parser by @willfarrell in #1627

• New Middleware: event-batch-response by @willfarrell in #1627

• New Middleware: event-batch-handler by @willfarrell in #1627

• New Middleware: glue-schema-registry by @willfarrell in #1627

• New Middleware: http-x402 by @willfarrell in #1633

• New Middleware: http-jwt by @willfarrell

• New Middleware: http-paseto by @willfarrell

• New Middleware: kms by @willfarrell

• Update dsql to follow rds pattern, dsql-signer` required.

• cloudformation-router — Narrowed Route.requestType from string to the union "Create" | "Update" | "Delete", matching the actual CloudFormation event types. Added type tests verifying the three valid values are accepted and invalid strings (including wrong casing like "create") are rejected.

• cloudwatch-metrics — Added maxProperties: 30 to the dimension set JSON schema validation, enforcing CloudWatch's limit of 30 dimensions per metric.

• event-normalizer — Added a new maxDecompressedBytes option (default 10 MiB) to guard against decompression bombs when parsing CloudWatch Logs events. The gunzipSync call for aws:cloudwatch events now passes maxOutputLength, and payloads exceeding the cap throw ERR_BUFFER_TOO_LARGE. Includes a test that confirms a 1 MiB gzipped payload fails against a 1 KiB cap.

• error-logger — Exported the Options type and added type tests verifying that the logger callback receives a middy.Request and that the logger property is optional.

Full Changelog: 7.5.0...7.6.0